Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier: 1zPa5xDHw4vRi0pkuzSNSnttnk4H3PXkg7UvtfQy2yk=
Subject key identifier: 4A:6B:20:4B:89:0A:14:C0:44:8E:07:DE:F3:D8:8F:00:40:F5:BF:86
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 019FAA88C3C33388978617E119CF3DD0CC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number: 064C
Signing time: Tue 28 Jul 2026 21:01:57 +0000
Manifest this update: Tue 28 Jul 2026 21:01:57 +0000
Manifest next update: Wed 29 Jul 2026 21:01:57 +0000
Files and hashes: 1: 0U-rEF9agnpJ5Ty3fMelv62IQ0M.roa (hash: fzpeIGTnD7Q+WUFkK4UZ/gImbOfjt8R2WwapBm5NRmI=)
2: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: kgfGBOVBEJuQPLsC1U1Ib7lxeFxqAUAdKNN/XNJF5bY=)
3: pvD38KfkiRiyA2ciIkT3w1-D9ho.roa (hash: d0J3qo9sPsuBsDx9fbtomBKJ9mGpLuYbMo3eWUmo/lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:c3:c3:33:88:97:86:17:e1:19:cf:3d:d0:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Jul 28 21:01:57 2026 GMT
Not After : Jul 29 21:01:57 2026 GMT
Subject: CN=4a6b204b890a14c0448e07def3d88f0040f5bf86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:15:7f:4b:c4:26:e3:a0:fb:ca:f9:15:c7:
3a:ab:62:f4:48:64:e7:c7:39:ba:db:3c:bd:2c:0e:
c5:bd:70:14:f3:88:c1:1c:9b:b1:bf:6c:ab:76:85:
00:f5:54:82:8a:b0:fa:97:8b:9d:4c:4c:fa:14:d5:
83:10:3b:d9:18:f6:37:cd:27:d3:0f:91:21:91:fe:
be:14:07:b3:d5:b1:05:90:90:b6:68:9f:0d:75:80:
f6:40:bd:2d:17:ba:0a:0f:6c:18:a7:7b:ad:65:7d:
ab:5d:f0:37:d8:a4:61:9c:cb:d3:80:6d:a6:5d:ba:
2d:92:07:18:89:16:3f:f6:81:62:aa:5b:7c:f4:50:
e7:36:65:bf:bc:fb:56:e3:d9:dc:02:02:fc:52:c2:
a1:34:4c:53:58:05:0a:29:fa:27:7f:2b:1a:0c:cd:
6a:db:83:e0:75:9e:62:e4:61:8b:7d:82:ad:99:67:
f1:28:f0:f9:8a:b8:de:18:a2:3c:ae:86:df:8a:27:
8a:81:62:82:ee:f8:ea:e0:09:26:48:82:c5:ee:33:
1c:96:37:9f:7d:12:1c:b6:48:29:f6:71:30:14:e5:
50:3e:df:e0:55:e5:48:d4:8a:e2:52:43:08:21:79:
2d:f5:a2:5c:c2:9a:87:94:68:71:96:18:de:ac:32:
ee:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6B:20:4B:89:0A:14:C0:44:8E:07:DE:F3:D8:8F:00:40:F5:BF:86
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ac:d1:f0:fa:af:8e:dd:a8:fa:1f:5f:b1:b5:f0:44:52:ba:
c0:c6:12:4c:77:29:a7:79:5e:99:70:f1:14:7f:8e:c4:17:f6:
26:fc:60:f2:3f:45:a3:f2:90:73:64:3d:1e:87:0d:ff:66:ea:
25:22:ee:f6:6f:d0:e6:24:30:e6:87:70:f9:58:87:e3:0d:83:
31:55:98:cb:81:55:9e:34:98:30:f7:f6:5d:e3:8b:8a:87:23:
22:72:36:38:55:f9:8b:d3:b8:b4:94:79:b8:04:0f:dc:04:f4:
6e:6e:c8:81:0a:ff:4a:ac:15:5a:74:fb:b3:7e:85:f3:f6:47:
dc:ae:e8:90:2d:af:7e:fd:4a:d7:4d:90:1f:6c:9e:a1:12:2a:
2d:c7:93:5e:cb:76:20:1c:d9:15:c8:9d:e7:c1:7e:ab:36:96:
13:1d:d7:64:9b:20:71:43:5e:5b:eb:c4:97:ac:4e:f0:ac:86:
3f:0e:cb:af:34:73:dc:85:21:d2:5a:c7:50:dc:90:a2:ea:4f:
0b:22:46:4b:77:fd:62:37:2f:f6:94:52:55:11:b6:89:76:28:
3f:d0:a2:0a:03:7f:2d:ef:25:ab:b7:e6:2d:18:f5:3f:78:db:
4d:b7:a1:bf:86:4d:80:ce:08:32:77:82:cb:48:03:4d:68:5c:
cc:3d:84:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:04:24 2026 by rpki-client