Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: sHPR0+ZAen4F/yZzWPkAZu508bZ55oiG7LSWUsXjv/s=
Subject key identifier: 0D:59:9B:55:55:27:23:81:A7:1F:79:F1:65:B6:A3:46:24:D9:3E:C6
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 01A0890BAA360E6228B6A6A1ED0582C3B14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 174D
Signing time: Thu 10 Sep 2026 02:00:38 +0000
Manifest this update: Thu 10 Sep 2026 02:00:38 +0000
Manifest next update: Fri 11 Sep 2026 02:00:38 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: aIEiTyBEgzb40arBPy9T4wBiNSPzRIUAF9hTEeFMHJQ=)
2: Rhq1sSRTv0uhjPvLHpvW3CtDGlE.roa (hash: UX/Nini/8UeNEyL2NxKXe/jqFkFeqxqH/DiIg76RiTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0b:aa:36:0e:62:28:b6:a6:a1:ed:05:82:c3:b1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: Sep 10 02:00:38 2026 GMT
Not After : Sep 11 02:00:38 2026 GMT
Subject: CN=0d599b5555272381a71f79f165b6a34624d93ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c7:52:93:bc:57:5a:d4:b1:fc:6e:4a:7c:b4:
62:e2:3a:33:5f:de:24:7c:fa:33:28:fc:51:fb:c8:
11:7d:f2:80:7a:f4:0b:b9:24:44:67:51:f6:2c:e7:
bf:c4:3e:9b:78:07:23:ee:c2:73:25:b6:dd:f9:19:
30:be:9e:93:19:4e:ca:51:02:05:d0:d8:48:b1:83:
f1:87:97:5e:38:29:9a:71:11:d1:93:d8:a3:2a:f6:
12:bf:8d:38:94:6f:2d:09:4a:c3:2c:65:c4:ec:04:
32:b2:f6:fc:6e:03:c1:04:6d:4e:d8:22:5e:aa:8c:
91:09:58:89:cd:b1:46:8d:7e:0b:df:62:93:44:af:
76:cb:cc:3f:c6:e2:83:bb:28:ad:d2:88:60:50:ed:
00:a0:18:57:9d:ce:5e:39:34:c0:f6:90:34:21:d3:
8e:db:78:2b:f7:f7:55:8c:cf:cf:e4:90:9b:25:3c:
22:63:8f:26:2d:98:3f:08:c5:04:a3:9a:7c:4a:d0:
ac:8d:7b:98:66:aa:5c:c9:cf:5d:ce:ea:62:3e:ee:
b9:bf:c9:03:c3:75:0e:0c:83:57:46:ff:72:0a:8e:
86:15:6f:ce:33:a1:c2:a1:62:74:78:53:d0:65:a3:
3f:a8:05:25:70:4d:b2:b0:45:f8:3b:0e:0f:6c:2a:
41:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:59:9B:55:55:27:23:81:A7:1F:79:F1:65:B6:A3:46:24:D9:3E:C6
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:53:11:80:84:4f:2a:2a:34:02:f6:c2:79:e0:19:01:c2:1e:
4a:90:22:7f:27:54:8c:2b:d5:49:c2:2f:e2:84:08:08:e2:0e:
e5:65:fd:c4:79:0a:9b:f0:bc:97:59:87:4c:13:2e:ff:2c:62:
f3:31:27:19:62:43:f8:9a:2e:8c:c3:e6:93:b3:e5:b9:17:21:
47:60:e6:8f:1e:68:1e:90:94:3b:ad:19:7e:a6:52:eb:f6:39:
9a:7f:0d:78:dd:b3:01:c0:11:b1:c1:9a:ad:46:fd:82:96:f3:
ca:3d:c7:12:d1:68:6c:ce:19:76:b9:dd:19:7e:6a:af:53:3a:
5a:d7:f4:20:f2:13:3a:eb:3f:e2:eb:0f:76:20:d0:0e:05:76:
f5:0d:45:fe:18:ca:1e:25:99:82:cc:d7:40:af:3f:11:6f:05:
48:c5:ce:80:76:36:fa:ce:52:ab:93:37:65:8f:c6:92:2a:fd:
33:fe:a2:ac:c4:27:a2:d8:69:02:3a:f3:50:31:6f:82:f4:48:
7a:68:b3:38:32:e4:73:bf:12:4f:4b:be:f0:3d:ce:22:5f:bf:
12:50:58:41:6c:23:e6:55:0c:4b:5e:c1:22:5d:87:03:bf:4f:
c6:df:f7:71:03:ce:9b:12:6a:1b:fa:51:e2:c5:43:12:63:43:
d5:79:c0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:02:52 2026 by rpki-client