Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: vG0Z62av4g63eON5MnXwOXUe83R8/W2uNtKRXeu4S+s=
Subject key identifier: 6F:3F:BC:83:0A:DE:FE:EA:15:55:91:A8:86:1D:D7:74:6B:15:64:6C
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 01A18FB0979835DAD0F72CDB865DA4D6809D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 17D5
Signing time: Sat 31 Oct 2026 02:01:17 +0000
Manifest this update: Sat 31 Oct 2026 02:01:17 +0000
Manifest next update: Sun 01 Nov 2026 02:01:17 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: fc61nw6EXewoxCthQOLJ3VNPy7Hzar7vx5R3IU7ncY0=)
2: Rhq1sSRTv0uhjPvLHpvW3CtDGlE.roa (hash: UX/Nini/8UeNEyL2NxKXe/jqFkFeqxqH/DiIg76RiTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:b0:97:98:35:da:d0:f7:2c:db:86:5d:a4:d6:80:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: Oct 31 02:01:17 2026 GMT
Not After : Nov 1 02:01:17 2026 GMT
Subject: CN=6f3fbc830adefeea155591a8861dd7746b15646c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:d2:8d:7d:c6:8e:dd:a6:9a:e3:0f:60:e0:
ce:47:96:d8:d0:fa:d5:7b:10:a4:6b:22:09:08:39:
6b:e2:92:ea:46:e2:44:1d:5d:ab:77:db:6a:50:75:
10:5d:3a:7a:1f:87:cf:4e:c0:42:26:63:a3:38:07:
8b:9b:1e:17:7c:00:b7:03:2e:19:14:ea:1b:8e:c8:
52:87:3f:02:83:60:5c:69:dd:3e:59:d5:6b:b0:1b:
62:ab:d2:fa:01:73:74:8a:76:93:97:ec:fc:7d:ca:
47:62:8b:17:fb:80:c6:aa:87:5a:53:92:8e:d8:3e:
d8:6e:bb:ad:35:23:bc:f1:f1:30:a6:c4:b4:b7:64:
31:b7:a7:78:46:97:10:f9:27:26:39:62:71:a6:8b:
a9:87:5e:8f:cf:84:3f:43:3d:b8:91:ff:c7:8e:62:
ed:c5:b6:e3:26:c0:bb:12:83:68:75:54:1c:33:0d:
77:c9:d5:3a:28:38:15:c8:d5:a7:a9:42:38:7d:94:
b4:15:c3:cf:6e:ba:55:89:db:d1:f6:12:08:1d:18:
cd:53:11:c8:39:87:59:be:3b:fc:93:ba:f9:27:e2:
5c:60:7f:da:c2:1c:ae:40:39:30:da:a9:f3:86:6a:
92:18:a7:2d:a0:88:44:85:38:03:96:2c:ee:77:42:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3F:BC:83:0A:DE:FE:EA:15:55:91:A8:86:1D:D7:74:6B:15:64:6C
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ca:b7:c0:eb:8c:39:2a:2b:3a:7b:e8:69:3b:ff:4c:97:cf:
12:6c:be:95:29:3b:31:90:76:70:70:b7:b0:20:1a:4a:49:47:
dc:fe:c9:c3:b6:e6:06:6d:1f:be:60:8e:7b:76:3e:4a:50:74:
88:e0:79:e5:2f:de:bc:6b:cf:c8:5a:67:4f:a0:42:36:a0:f0:
a8:eb:fb:ab:47:eb:51:25:e3:76:ed:33:e0:c3:63:2b:72:9a:
2d:83:0a:12:c2:c0:7c:7c:cc:36:26:c1:c6:1a:a3:90:2c:7c:
6e:be:e4:aa:fa:da:00:75:9c:5e:50:c8:f7:aa:58:98:95:03:
44:51:85:72:b2:f5:b1:81:d9:87:89:5a:a7:a5:0a:cf:05:ba:
b0:49:3e:2b:20:5c:7c:3b:92:22:9e:f3:df:10:ce:7d:ed:5e:
5a:b9:a6:76:d8:36:d1:d4:2a:32:80:e5:36:fe:53:15:e3:6d:
36:9b:58:ec:9a:7f:11:ec:85:4b:71:4a:43:ec:c6:12:45:0d:
93:f1:bf:db:d6:f7:db:34:40:7c:57:da:07:e8:ff:72:f2:a2:
cf:e3:a1:40:5f:e1:40:e7:1a:88:d6:5b:56:40:73:6d:8e:60:
53:c4:75:cc:aa:0e:39:70:24:2a:35:a1:a5:7e:99:34:f9:fd:
db:ad:33:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:21:24 2026 by rpki-client