Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
File: AmC3ClCt6tObcJtZAEbFLgzGkps.mft (raw, json)
Hash identifier: IVnunnS2df4Vu6544ku0kM/K6ESmUAiiZpqpQLqs1cA=
Subject key identifier: 2C:E0:11:B7:C6:C9:22:A1:1E:F4:89:87:E4:E9:B9:96:B0:73:98:9E
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Certificate issuer: /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial: 01A0D26E9A4A177759863F6F358715E3F929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 08:00:58 +0000
Manifest this update: Thu 24 Sep 2026 08:00:58 +0000
Manifest next update: Fri 25 Sep 2026 08:00:58 +0000
Files and hashes: 1: AmC3ClCt6tObcJtZAEbFLgzGkps.crl (hash: DbiNstlPTU+l6KHFDkKfxDMhGDI0tn/BqpEpKXAJ650=)
2: aODoyPRmt8JcVuQjiY5gOaPNlms.roa (hash: HPGIEJFG3TeELk+Kqb8GHJ+AFHjRK9+4B5FMIaiouhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:9a:4a:17:77:59:86:3f:6f:35:87:15:e3:f9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
Validity
Not Before: Sep 24 08:00:58 2026 GMT
Not After : Sep 25 08:00:58 2026 GMT
Subject: CN=2ce011b7c6c922a11ef48987e4e9b996b073989e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:c4:77:8e:4f:84:c2:8e:89:ee:b2:85:ff:
3c:41:b3:76:22:08:ef:d1:98:f0:9a:ce:33:b9:b8:
8f:6c:98:bc:ae:57:e5:dc:ac:c0:d4:39:0a:a7:db:
ca:8b:d4:cf:21:b1:d8:4a:9a:cd:31:27:2a:e0:ee:
84:b2:f5:69:6f:5a:df:a6:d1:57:00:4a:13:cf:3a:
16:a9:b3:fb:5a:9c:ac:3f:ef:03:e9:3c:b0:c8:2f:
6e:a2:91:ab:f3:8b:e6:dd:0f:b0:a9:ee:fe:32:70:
3b:15:21:fe:54:9f:98:f4:5d:39:dd:67:37:52:0f:
f8:e8:ed:76:c1:d7:10:01:df:f2:7e:cd:48:9d:c5:
8f:a0:7e:a7:79:47:e8:15:67:71:bd:3d:c5:71:83:
bd:7c:d5:5d:23:a7:c5:2a:65:b3:ad:df:fd:b0:87:
05:0c:35:ae:dd:e7:05:4e:51:ea:04:70:d9:73:7e:
df:9a:e6:c9:43:15:b8:fa:6b:c8:0a:f0:c1:99:14:
31:93:b5:d2:ad:47:81:a8:47:cd:f5:d6:a2:59:a4:
4b:2d:f4:75:4b:53:cd:5c:b5:74:e3:a6:62:45:f9:
0e:45:54:93:18:77:cd:d6:9c:08:f7:fb:67:88:4c:
f2:dc:0b:45:aa:fc:ca:6c:0e:55:59:67:c0:59:c6:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E0:11:B7:C6:C9:22:A1:1E:F4:89:87:E4:E9:B9:96:B0:73:98:9E
X509v3 Authority Key Identifier:
keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:98:8c:b1:8b:e0:fc:8a:11:b9:61:b9:3f:38:be:7a:1a:fa:
ff:d8:77:e3:9e:6c:cd:c0:1e:44:f8:43:97:71:72:c3:b4:f2:
23:16:5e:86:3f:8f:c2:55:7e:5e:9a:3c:77:71:40:88:85:7d:
60:58:d0:ec:68:80:bc:f2:29:6d:97:b5:e9:be:2c:df:40:48:
b2:36:3e:e6:7e:06:d3:e8:60:4f:01:7d:6f:61:7c:77:f6:5e:
36:13:e6:64:83:31:1b:e8:3f:31:b9:c5:b1:00:58:5f:1f:10:
a2:76:f6:63:e0:32:e9:1c:1c:8e:79:94:cc:14:de:4a:65:98:
71:9a:c3:71:a5:2b:51:cd:0d:b0:9c:00:fa:fd:74:14:29:0e:
c5:62:b6:0e:f6:17:1d:2a:d5:5d:ee:11:d3:9c:ec:51:61:cb:
6a:a3:0a:14:90:cd:6a:78:ef:e3:b2:7a:0a:a2:d9:34:1c:57:
70:10:53:22:94:15:d8:9b:77:8b:8a:da:b2:21:13:7c:ad:7e:
53:06:6c:f5:f4:c4:4b:c0:04:03:46:ca:4f:6e:91:d3:7e:24:
a9:b1:3c:8c:0e:87:f3:98:9b:07:f3:17:ba:65:a1:69:8f:3d:
5b:1c:e9:87:24:84:cc:28:21:21:f8:cc:ee:79:fe:2e:cd:e3:
2c:70:ca:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSbppKF3dZhj9vNYcV4/kpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNjBiNzBhNTBhZGVhZDM5YjcwOWI1OTAwNDZjNTJlMGNj
NjkyOWIwHhcNMjYwOTI0MDgwMDU4WhcNMjYwOTI1MDgwMDU4WjAzMTEwLwYDVQQD
EygyY2UwMTFiN2M2YzkyMmExMWVmNDg5ODdlNGU5Yjk5NmIwNzM5ODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SnEd45PhMKOie6yhf88QbN2Igjv
0Zjwms4zubiPbJi8rlfl3KzA1DkKp9vKi9TPIbHYSprNMScq4O6EsvVpb1rfptFX
AEoTzzoWqbP7WpysP+8D6TywyC9uopGr84vm3Q+wqe7+MnA7FSH+VJ+Y9F053Wc3
Ug/46O12wdcQAd/yfs1IncWPoH6neUfoFWdxvT3FcYO9fNVdI6fFKmWzrd/9sIcF
DDWu3ecFTlHqBHDZc37fmubJQxW4+mvICvDBmRQxk7XSrUeBqEfN9daiWaRLLfR1
S1PNXLV046ZiRfkORVSTGHfN1pwI9/tniEzy3AtFqvzKbA5VWWfAWcbveQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzgEbfGySKhHvSJh+TpuZawc5ieMB8GA1UdIwQY
MBaAFAJgtwpQrerTm3CbWQBGxS4MxpKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW1DM0NsQ3Q2dE9iY0p0WkFFYkZMZ3pHa3BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81ZWIxMzAtYTBmNy00OWFmLWEyNzEt
ZWJlYzJhNDJlNjBkLzEvQW1DM0NsQ3Q2dE9iY0p0WkFFYkZMZ3pHa3BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81ZWIxMzAtYTBmNy00OWFmLWEyNzEtZWJlYzJhNDJlNjBk
LzEvQW1DM0NsQ3Q2dE9iY0p0WkFFYkZMZ3pHa3BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJiMsYvg
/IoRuWG5Pzi+ehr6/9h3455szcAeRPhDl3Fyw7TyIxZehj+PwlV+Xpo8d3FAiIV9
YFjQ7GiAvPIpbZe16b4s30BIsjY+5n4G0+hgTwF9b2F8d/ZeNhPmZIMxG+g/MbnF
sQBYXx8Qonb2Y+Ay6RwcjnmUzBTeSmWYcZrDcaUrUc0NsJwA+v10FCkOxWK2DvYX
HSrVXe4R05zsUWHLaqMKFJDNanjv47J6CqLZNBxXcBBTIpQV2Jt3i4rasiETfK1+
UwZs9fTES8AEA0bKT26R034kqbE8jA6H85ibB/MXumWhaY89WxzphySEzCghIfjM
7nn+Ls3jLHDK0g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:50:36 2026 by rpki-client