Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier: h/jN+K0oymHuLnF+dnwfkSJrnI6rXDGWQEno36z4mwI=
Subject key identifier: A8:52:F9:FA:11:A5:85:BA:24:EC:6A:BA:78:E2:B4:B7:20:57:D7:50
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 019EBEECD506F91130765E5A4E5F27232D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number: 05D2
Signing time: Sat 13 Jun 2026 03:00:52 +0000
Manifest this update: Sat 13 Jun 2026 03:00:52 +0000
Manifest next update: Sun 14 Jun 2026 03:00:52 +0000
Files and hashes: 1: 0U-rEF9agnpJ5Ty3fMelv62IQ0M.roa (hash: fzpeIGTnD7Q+WUFkK4UZ/gImbOfjt8R2WwapBm5NRmI=)
2: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: vA8Y1hmIOaelK9XI4BPTQmMfCblQfbhi/ELK6tmXg8Q=)
3: pvD38KfkiRiyA2ciIkT3w1-D9ho.roa (hash: d0J3qo9sPsuBsDx9fbtomBKJ9mGpLuYbMo3eWUmo/lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:d5:06:f9:11:30:76:5e:5a:4e:5f:27:23:2d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Jun 13 03:00:52 2026 GMT
Not After : Jun 14 03:00:52 2026 GMT
Subject: CN=a852f9fa11a585ba24ec6aba78e2b4b72057d750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:8a:24:3b:5f:84:e8:b1:da:5e:16:bb:16:
6d:28:2e:11:d6:74:5d:5f:f4:7a:9b:6b:48:1a:43:
12:ce:55:a1:ca:75:27:86:eb:9a:4c:0e:a4:24:0c:
33:59:b4:45:5c:94:dd:f4:21:9f:3f:bf:b2:1a:54:
45:ad:c3:24:b1:73:38:dd:cd:b5:07:7d:6a:ae:db:
e5:e2:1b:ba:b3:96:c3:95:18:1c:34:d1:7d:eb:fc:
6e:75:60:f6:b6:ed:1d:7f:e7:d0:ac:cd:6d:03:55:
a0:e0:5a:26:ee:9b:bf:71:a6:9a:53:b2:e0:f4:e2:
b4:9f:8d:b5:4b:0a:dc:a5:6c:68:9a:03:5b:d3:43:
af:88:a7:c9:cc:eb:bb:5a:ef:25:a8:e5:e3:76:aa:
0b:9b:ae:66:9d:98:81:79:12:03:a8:b5:2a:e9:ca:
ae:c8:78:3c:3f:62:e5:ca:6c:db:90:ba:73:80:67:
bc:9f:56:3f:25:87:f1:bc:8d:1f:2d:ef:3a:47:89:
ff:53:e9:67:02:e6:93:5a:92:5f:c2:42:0c:cc:c9:
33:f2:b1:e5:69:22:2a:a9:00:a5:32:17:97:cd:ef:
51:c0:cf:11:8c:f5:39:68:09:35:70:33:20:43:70:
f7:72:50:ab:15:ec:6f:8a:78:6e:d4:5e:a6:4c:41:
59:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:52:F9:FA:11:A5:85:BA:24:EC:6A:BA:78:E2:B4:B7:20:57:D7:50
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:87:dc:9d:d4:b4:30:19:73:2f:4c:f4:3e:a5:a2:b8:32:ed:
65:44:00:67:bb:82:11:4d:c8:68:41:8a:60:98:75:67:f0:2c:
42:ef:4b:88:e6:3f:85:b0:c2:cc:5f:5c:bc:ff:e9:1c:63:83:
b8:34:f2:dc:a9:db:cf:1c:12:5c:0d:f3:44:25:14:e1:d4:42:
6c:11:aa:25:69:63:bf:be:2d:4f:80:74:6e:9b:8e:d8:ac:ec:
8a:6d:55:d3:c7:d8:6c:bb:7c:7e:a6:f8:13:0c:2f:90:20:da:
98:38:06:72:fb:c6:de:af:55:da:0d:27:33:69:f1:f2:77:de:
c1:61:9d:fd:7d:63:c8:99:19:3e:73:90:80:72:4f:e8:52:14:
44:0b:2f:5d:be:65:61:d5:95:1a:92:77:42:c2:f8:39:9f:dd:
da:69:67:81:3b:e4:73:e4:a1:c2:6d:e5:6d:5a:68:c9:8e:a0:
77:d9:f2:05:22:7c:20:2c:29:68:e2:6e:21:b7:68:b9:67:02:
3e:6b:ea:8f:d5:8f:be:7f:ae:7a:60:4a:72:8f:51:ff:39:84:
db:78:a1:8a:1a:ca:b2:9d:94:48:cd:1a:83:0b:eb:42:5a:b3:
58:a1:51:b5:ba:93:36:f1:04:15:8a:a8:08:00:d4:10:80:81:
ac:01:3a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:07:50 2026 by rpki-client