Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: l1zJP4b3EGegO8awbd1W7OXmvdV1JudVzw6DUd3mwZ4=
Subject key identifier: 9B:B6:C0:99:C3:77:64:89:CD:B7:65:36:63:B9:C5:8C:9C:7B:C2:01
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 019FA14D77A6F108FA2A2078180D42ACAFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 16D5
Signing time: Mon 27 Jul 2026 02:00:36 +0000
Manifest this update: Mon 27 Jul 2026 02:00:36 +0000
Manifest next update: Tue 28 Jul 2026 02:00:36 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: QBXTtwan643ed69NRF4GYizQGDd4qOEugB9vwIHMNdk=)
2: Rhq1sSRTv0uhjPvLHpvW3CtDGlE.roa (hash: UX/Nini/8UeNEyL2NxKXe/jqFkFeqxqH/DiIg76RiTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:77:a6:f1:08:fa:2a:20:78:18:0d:42:ac:af:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: Jul 27 02:00:36 2026 GMT
Not After : Jul 28 02:00:36 2026 GMT
Subject: CN=9bb6c099c3776489cdb7653663b9c58c9c7bc201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:b9:e7:2d:37:0c:4b:ef:e2:9a:6c:05:e5:
57:a1:35:86:b8:e4:df:45:d2:25:ab:bf:ad:78:3b:
90:fd:07:cf:c6:d9:15:c5:09:92:6f:cc:39:0b:c3:
4d:2a:4d:85:92:ef:fb:11:07:5a:22:ee:ed:c9:0b:
8b:f1:e0:ec:b1:93:18:11:a7:46:1e:2e:26:e4:ec:
77:83:6b:d9:9e:0e:af:23:fb:b5:d6:2b:e0:46:ad:
dd:5f:bd:ec:8d:f6:d0:2b:bf:e2:9d:c1:42:8e:68:
6d:ff:49:87:e8:3b:51:51:37:a0:aa:73:1b:61:e5:
3e:1e:8b:30:13:90:65:d0:b2:a9:eb:13:bb:e3:bc:
bc:5b:45:be:1a:97:19:47:c9:e9:03:8f:ac:e5:09:
50:58:90:8f:d0:1a:05:8d:d6:35:9b:54:ff:41:bb:
42:e8:29:df:70:da:63:0b:04:8c:99:11:eb:cf:02:
6f:22:04:cb:ec:60:fd:70:55:cd:74:a1:c8:9b:24:
cf:55:28:1a:6f:a9:82:ba:0e:95:81:36:79:eb:c2:
cb:6f:dd:0c:da:7d:87:88:83:61:a5:ef:4a:97:bc:
d8:80:89:dd:04:f6:7b:f4:29:2f:18:9b:65:62:cf:
c9:42:12:fb:a0:15:4a:c1:f3:d0:d1:12:8d:d9:c0:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B6:C0:99:C3:77:64:89:CD:B7:65:36:63:B9:C5:8C:9C:7B:C2:01
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0b:df:64:fb:cd:58:d4:f4:2d:b6:04:57:0f:a2:35:28:a6:
27:20:86:4d:6b:ed:d3:38:72:d4:ba:83:d9:92:d3:64:62:1e:
a1:84:01:df:bf:d6:28:36:ab:86:44:55:d7:66:87:83:36:e5:
b8:fc:2f:7a:0e:38:ec:b9:03:63:59:2f:e6:cf:26:39:b2:1f:
79:43:b4:7b:5c:1f:73:e2:ec:46:0a:5e:7c:ae:94:d0:82:c2:
3f:70:eb:be:d7:9a:9e:a1:7a:89:84:af:d5:0d:27:8e:bf:f5:
6e:7d:fd:ae:62:a0:fb:ab:6f:c2:be:4b:5f:99:8c:86:e1:e9:
d9:e4:df:ad:b7:31:41:81:40:79:85:1f:58:e7:3a:a4:b2:84:
f9:3d:28:b9:1e:4b:10:f4:f1:2c:fd:5c:b2:3d:69:ce:18:a2:
d6:e7:d1:dd:f8:61:60:2f:53:c3:c5:15:ab:fb:8b:77:76:45:
01:6f:ff:a7:e1:14:ad:61:18:02:93:44:7f:71:0b:2b:f7:17:
7a:59:d7:ba:8d:61:80:5e:10:3b:39:9c:ef:c9:ff:0b:78:ec:
37:d4:93:9f:a5:92:33:98:1c:39:99:a4:0c:29:91:0e:e5:eb:
1e:5d:71:74:4f:3a:7e:fa:a7:66:d5:1e:05:c6:56:59:c5:6e:
04:d2:96:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:56:32 2026 by rpki-client