Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier: B04GQVYsLOh++u8NUuUvSp4sFpqwEbo6+uYTd/edJ/o=
Subject key identifier: 78:DF:CD:27:F2:9C:FA:65:3C:89:71:42:4E:35:59:F7:03:92:0D:18
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 01A0C28DC44D7B5487F04D89934205AD09CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number: 06DD
Signing time: Mon 21 Sep 2026 06:01:05 +0000
Manifest this update: Mon 21 Sep 2026 06:01:05 +0000
Manifest next update: Tue 22 Sep 2026 06:01:05 +0000
Files and hashes: 1: 0U-rEF9agnpJ5Ty3fMelv62IQ0M.roa (hash: fzpeIGTnD7Q+WUFkK4UZ/gImbOfjt8R2WwapBm5NRmI=)
2: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: M20ofDgT2KI9seS5htcf2ng218s/XZhqeg2ud3cuc9s=)
3: pvD38KfkiRiyA2ciIkT3w1-D9ho.roa (hash: d0J3qo9sPsuBsDx9fbtomBKJ9mGpLuYbMo3eWUmo/lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:c4:4d:7b:54:87:f0:4d:89:93:42:05:ad:09:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Sep 21 06:01:05 2026 GMT
Not After : Sep 22 06:01:05 2026 GMT
Subject: CN=78dfcd27f29cfa653c8971424e3559f703920d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:cc:58:6b:b5:e1:05:2a:05:4e:14:77:4a:
c3:5e:e5:ee:58:c2:33:ad:f4:58:be:07:04:22:42:
54:a0:33:58:25:4b:6f:7e:45:07:2d:b4:ed:3b:87:
43:2f:54:48:c6:16:24:2d:a6:15:f5:b6:bc:0d:f5:
a2:76:60:d8:65:ab:06:7a:d4:ac:2e:56:17:ed:12:
c6:ee:ae:7d:c4:b7:7d:76:e5:92:3e:6d:4f:8e:20:
f5:3a:16:0b:2b:f5:a4:f5:93:41:a0:3e:aa:f5:3b:
57:4e:9a:29:f9:e9:26:43:be:33:41:31:30:f1:31:
15:39:ef:d4:cc:f5:af:79:7d:b6:2f:57:d4:1a:d6:
be:17:ab:83:e2:00:53:9e:9c:b8:63:6c:cd:7f:c3:
74:8d:27:01:a8:54:96:77:77:93:a0:15:2a:93:f0:
c3:6c:a2:b9:bc:f4:cf:c2:e4:85:83:63:90:d9:91:
50:2d:87:5e:42:bf:c7:f2:84:c5:8c:76:57:7d:0f:
a8:1e:8e:d2:54:fc:a5:2e:d7:ce:7c:b3:61:93:aa:
1e:56:79:74:b2:7e:a3:a2:8d:c2:37:4f:fd:cb:e7:
f1:87:bd:dc:e8:0f:6c:37:3a:5c:45:a1:e6:9b:b4:
0b:e6:57:9d:32:d9:e6:be:f5:43:1d:60:5a:d4:a5:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DF:CD:27:F2:9C:FA:65:3C:89:71:42:4E:35:59:F7:03:92:0D:18
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:2f:fd:4c:3e:ec:72:2d:f0:27:af:99:dc:3a:7c:8c:0c:e3:
9d:c4:6d:59:8f:67:ec:6c:be:92:d4:90:a8:63:e8:d2:cf:42:
7d:cd:f4:43:1b:f6:20:6e:52:5f:cc:b4:c3:36:d1:1c:3c:ba:
26:fb:2e:fd:1f:06:71:6b:8a:62:54:e5:67:6b:a8:67:f7:4e:
1f:84:88:38:e4:46:45:3a:0b:36:5c:d5:4b:aa:ff:07:a3:5e:
04:1c:b1:d1:48:f8:1f:21:29:30:c3:93:93:80:cc:cb:34:a9:
04:18:12:bc:ca:05:35:57:88:c0:c5:01:f2:5b:f4:2a:17:eb:
52:ed:ce:cd:3e:f0:12:b8:eb:95:63:02:f6:3c:8d:82:36:76:
4f:15:52:5b:ff:ab:53:2d:80:52:e3:db:33:06:5b:3c:55:05:
39:fa:4d:f6:b5:11:9f:1e:04:ae:26:35:1a:f2:dd:be:02:26:
5c:b4:27:6c:7c:6c:a4:4b:3c:84:79:ce:1a:81:71:20:a2:57:
ff:1d:d0:50:05:84:d6:0a:cf:16:15:5a:52:c3:7b:e9:db:30:
aa:d1:13:52:7c:a5:fa:eb:27:4f:23:ab:73:c7:e7:cc:74:f0:
6e:fe:0f:17:d5:66:1f:bb:f0:d6:80:2d:f0:c2:c2:85:6f:80:
d3:04:97:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:30:14 2026 by rpki-client