Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json)
Hash identifier: 2eqKBK0ducmt0VsaL07D6N0M3s6F/tvYJfCzgwRE6gQ=
Subject key identifier: A4:A9:02:9A:4C:04:09:0D:AB:65:26:01:82:50:7C:C2:E6:BB:88:64
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial: 01A0DC17318DF5430DFDA7EE8793E06E55AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 05:01:42 +0000
Manifest this update: Sat 26 Sep 2026 05:01:42 +0000
Manifest next update: Sun 27 Sep 2026 05:01:42 +0000
Files and hashes: 1: 3_0WZ7tcEt9l7JCeqM_XLJKrQAI.roa (hash: 7OfgraftH18MfCmboAvi66Dsa4X9nEMWe7jgzn7VuiE=)
2: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: ZwuwhVP6tMMkQmmVs8M8tBbGcPjFLIFHUyTUIE8hyro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:31:8d:f5:43:0d:fd:a7:ee:87:93:e0:6e:55:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
Validity
Not Before: Sep 26 05:01:42 2026 GMT
Not After : Sep 27 05:01:42 2026 GMT
Subject: CN=a4a9029a4c04090dab65260182507cc2e6bb8864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:89:90:9f:85:91:da:d7:0c:86:2c:37:80:
8c:bf:82:65:b8:7c:cb:4a:59:26:ba:0c:67:33:2e:
39:0c:72:c7:2e:1b:a2:b0:b7:8a:c9:ec:cf:8a:60:
4e:5a:75:98:f3:80:82:82:f9:6a:77:74:71:fb:4b:
6e:8c:56:6b:29:37:ee:72:d5:03:d5:d0:b6:0f:2f:
b7:4a:48:22:45:67:a6:e7:d0:79:49:b8:20:31:21:
95:56:9e:22:49:8a:e7:07:56:da:ba:eb:15:e1:a0:
30:4b:6b:7b:09:7e:70:84:0a:fc:b4:ca:e7:91:31:
69:47:bb:96:a9:f4:d7:48:68:45:91:c5:0b:95:14:
9d:3a:a3:2a:e6:0c:91:cc:15:0c:91:b2:26:58:a5:
30:f2:49:28:70:3d:2d:df:2f:3c:d0:56:ed:e6:25:
f7:d9:53:e6:19:a1:44:1b:2f:f9:2e:e7:17:f3:e6:
98:03:07:10:eb:b7:76:f8:e3:ac:87:17:1c:74:b7:
f0:d2:f6:ed:a3:6a:48:9e:22:3a:c9:a1:82:53:e4:
5c:36:80:8b:20:a5:81:cc:0b:15:fb:a9:b7:a3:c5:
d6:9f:10:00:6b:83:9b:05:d5:b2:5f:6f:6c:4b:d5:
be:5a:0e:99:2f:61:01:c8:39:a4:2b:7d:45:43:66:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A9:02:9A:4C:04:09:0D:AB:65:26:01:82:50:7C:C2:E6:BB:88:64
X509v3 Authority Key Identifier:
keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4d:b9:f4:63:e8:20:96:13:91:ab:47:bf:c6:1c:bb:a9:61:
c5:1e:10:c1:b2:7d:1e:11:14:dc:6e:d9:36:fb:1f:b7:77:62:
6a:bf:0c:15:7b:21:a8:b5:14:56:e7:ff:f2:8f:ba:69:3e:fd:
a8:7d:71:e2:0a:e8:d0:72:85:b9:c2:55:2f:bd:bf:31:2a:f3:
dd:f2:e1:72:ff:64:21:56:c4:e4:e4:e3:c9:b4:e9:c8:f5:d2:
f7:b1:39:b4:7b:fe:f1:f4:3c:f9:61:e5:56:e0:2d:de:85:6e:
10:1b:04:eb:f9:3a:05:8f:cf:5d:a0:60:97:55:bd:f5:4a:68:
c3:60:8c:cc:c3:39:fe:66:a9:68:f9:03:18:83:f1:76:f6:11:
25:74:c7:53:f7:27:d2:10:c6:2b:94:03:ad:fe:ff:5a:19:41:
b5:bd:c1:29:70:bc:c7:e0:28:32:f9:c9:cd:46:a8:79:5c:b8:
b0:c5:cc:5a:c1:4d:5d:59:38:a1:b9:d0:21:9c:ff:ba:30:75:
29:09:da:da:c8:e3:79:27:d6:5a:8f:12:45:73:35:51:22:65:
7d:8d:45:76:14:e2:8f:31:cf:c7:92:e8:f8:f3:3f:07:90:99:
3c:1b:87:40:5e:44:99:f7:83:76:26:1f:2a:0b:d3:08:16:62:
0a:c2:2f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:55:10 2026 by rpki-client