Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
File: am_dL9Qvq_hycglSRo0pY0xoydw.mft (raw, json)
Hash identifier: GPk6ZqKm63VbGYTR1i3/xoh4vT1kToPGiEO0EXVBsPA=
Subject key identifier: A2:59:12:A3:25:F5:8C:7B:F9:F5:00:4C:E0:78:88:14:41:04:28:7A
Authority key identifier: 6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
Certificate issuer: /CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Certificate serial: 019D3A8A7F7D3D4D95D6044E59298920DFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
Manifest number: 0BF4
Signing time: Sun 29 Mar 2026 17:00:48 +0000
Manifest this update: Sun 29 Mar 2026 17:00:48 +0000
Manifest next update: Mon 30 Mar 2026 17:00:48 +0000
Files and hashes: 1: CxN7huJiaKTfbN61kn_Ws0rde3s.roa (hash: mJe0ydmDBggkld0RLjkFJN+3gsiDt8X95dpMffB1Pek=)
2: GLQLUgepyCnC830dR-Mhxz1aKnE.roa (hash: COa6OVZL38VvIej39q7ojfibMnWwOKcdA2nZbsEdfHY=)
3: am_dL9Qvq_hycglSRo0pY0xoydw.crl (hash: XrTCRJJSxLoBQdNQw+9BDxN5evaLhUVtyqZGqJr7tKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:7f:7d:3d:4d:95:d6:04:4e:59:29:89:20:df:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Validity
Not Before: Mar 29 17:00:48 2026 GMT
Not After : Mar 30 17:00:48 2026 GMT
Subject: CN=a25912a325f58c7bf9f5004ce07888144104287a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:dc:0c:f2:9c:76:ec:3c:ec:2a:ef:03:d3:
f3:9d:d0:ca:a4:37:79:bc:9c:c9:87:a7:65:c6:89:
4d:d4:02:c1:79:a5:ed:27:15:02:33:d5:e1:61:e6:
b3:61:7f:30:f0:ef:24:54:1d:63:81:45:3c:c0:9d:
0a:40:04:fb:58:99:d9:7a:80:77:c4:ed:73:62:77:
de:68:4d:3f:83:8a:8f:0c:6e:3c:85:ef:0d:f7:78:
88:b7:df:02:7e:69:35:60:67:47:2b:39:0b:30:cf:
55:19:b8:c8:f7:df:5a:36:09:f7:05:30:68:6d:aa:
48:e6:0f:3d:90:cb:45:0f:a1:38:b7:03:22:7b:f8:
ab:d5:bc:17:f4:b6:b5:5c:68:62:f9:61:f2:65:95:
10:6d:7d:10:86:8a:4f:8b:d9:b4:ca:63:cd:51:d7:
21:be:27:53:8a:a0:c7:4d:01:69:59:0a:07:ad:05:
79:8e:88:c0:33:11:62:31:d4:c9:a5:45:0e:27:c4:
76:a0:47:03:ee:6e:ec:80:f5:a2:71:d8:3f:ba:4f:
e7:7c:8e:aa:40:33:52:b9:92:b8:70:13:af:7c:49:
5a:7f:af:70:d3:64:29:35:d7:43:34:51:30:74:27:
65:ed:23:75:46:50:a2:b2:e7:1e:b8:55:27:fa:f5:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:59:12:A3:25:F5:8C:7B:F9:F5:00:4C:E0:78:88:14:41:04:28:7A
X509v3 Authority Key Identifier:
keyid:6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:02:40:7b:9f:6d:04:ef:b7:b6:57:3c:ec:fb:92:69:c3:25:
66:2a:8d:dc:95:f9:a7:b3:a7:cc:40:2f:11:4a:2f:3d:88:43:
d7:b5:61:35:c0:ab:f8:ed:e6:d4:04:b1:38:8e:a9:b5:01:64:
80:47:b9:3b:a5:cf:43:94:0c:f4:12:1b:88:df:72:d6:d9:6e:
49:65:05:d2:8e:19:9f:63:3b:8b:22:9e:71:00:91:ce:c5:25:
24:44:62:7c:27:da:f2:2c:9e:68:e4:2b:db:3b:fc:d3:c9:16:
45:d7:82:2e:db:83:3f:dd:b2:55:16:c5:7e:44:19:12:b7:d8:
c7:ad:c7:3e:cf:da:c3:17:cd:04:92:1c:b6:09:b8:4b:0a:f3:
d8:e3:d1:c8:9a:03:e4:6f:66:2e:db:d8:ea:9c:74:ee:7b:f4:
9b:11:14:35:64:97:49:1a:63:a1:23:6f:f5:d0:e1:5f:6e:bd:
bf:c1:a4:46:c2:6e:9e:34:eb:7e:32:bb:e2:c3:de:a7:7d:96:
4b:a7:e1:01:c0:41:b0:15:c1:36:0c:4d:17:57:ea:af:94:71:
a3:0f:24:69:cd:d5:28:53:4f:94:ba:a7:65:dc:d4:84:21:cb:
25:e6:d8:e5:07:d4:80:c2:b6:ae:bd:ab:15:8a:25:53:6b:1a:
65:30:75:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:08 2026 by rpki-client