Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json)
Hash identifier: 22C/yMq3S2GF9B/WEPEwBNMybM1zDeAIi4qmqXUMkyU=
Subject key identifier: 47:9A:D7:E8:1A:CE:D6:4E:08:FC:97:94:12:AB:18:44:CF:24:FC:7D
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial: 019CAA58A989FD32B8DCA06FB2422F39B8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:03 +0000
Manifest this update: Sun 01 Mar 2026 17:01:03 +0000
Manifest next update: Mon 02 Mar 2026 17:01:03 +0000
Files and hashes: 1: 3_0WZ7tcEt9l7JCeqM_XLJKrQAI.roa (hash: 7OfgraftH18MfCmboAvi66Dsa4X9nEMWe7jgzn7VuiE=)
2: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: PptPptPUDScUOmXIDpiZN0imTKrIM36R+IJxsyI+TC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:a9:89:fd:32:b8:dc:a0:6f:b2:42:2f:39:b8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
Validity
Not Before: Mar 1 17:01:03 2026 GMT
Not After : Mar 2 17:01:03 2026 GMT
Subject: CN=479ad7e81aced64e08fc979412ab1844cf24fc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:96:c8:77:73:62:84:35:94:40:94:f6:2c:
68:56:51:6b:ef:db:51:b9:de:b9:b7:0c:f3:34:b7:
a8:dc:ae:63:a5:10:3b:8b:c2:11:aa:7f:8c:62:ae:
03:fd:f6:45:78:f7:90:55:cb:aa:41:82:0b:cf:a2:
ce:4f:64:cf:e8:27:52:f6:1b:de:14:68:58:87:f1:
a6:f7:3f:83:89:4b:6c:2c:c7:4e:02:ad:35:33:e4:
40:6e:95:85:61:58:67:1f:23:f9:8c:ff:fd:15:82:
45:a0:38:15:2d:5e:c3:29:06:b7:54:70:59:22:ca:
ec:19:27:2f:d3:79:83:f0:79:38:cd:36:55:01:5b:
86:e6:0a:c9:a6:70:1e:9f:13:f6:18:d3:f7:74:de:
a4:3c:f7:61:ae:a9:6d:27:7a:45:b6:32:fa:d6:61:
5a:0e:c8:21:7e:15:c7:b4:3e:74:ac:e2:30:85:d4:
0f:ae:a5:20:90:08:5e:cd:3e:a2:87:2c:80:12:a8:
e5:41:c3:42:1a:84:bb:05:6f:e6:9a:b9:d5:14:15:
d6:43:d6:41:4d:5e:30:e0:3b:76:ad:56:bc:6a:56:
61:66:c8:79:c7:87:1e:20:fd:d7:b1:8d:7b:7a:d8:
d9:41:8f:f1:4a:28:d1:c5:db:04:66:4a:03:51:2a:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9A:D7:E8:1A:CE:D6:4E:08:FC:97:94:12:AB:18:44:CF:24:FC:7D
X509v3 Authority Key Identifier:
keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3d:6c:d8:f9:0e:23:08:c7:68:ef:57:88:e2:ef:b9:f7:26:
19:02:f9:a8:34:ec:0c:b9:76:70:bd:94:5d:9b:91:f1:43:7b:
41:51:d9:4b:f6:e1:2e:86:ab:b8:3b:a9:76:e0:02:cf:9e:11:
75:f3:b0:b1:0b:a1:f0:01:ce:75:59:26:61:2d:fe:35:70:1e:
4f:6d:39:01:0d:60:b3:b6:50:99:df:15:76:24:62:fb:a8:3d:
fd:83:62:a2:94:43:60:26:ac:f0:d0:9b:57:81:4a:d8:8f:5a:
3f:2e:04:42:20:cd:85:20:ec:5c:28:1a:89:5a:db:b2:21:b3:
ea:fd:c0:c5:47:8b:29:a5:c1:c2:77:e8:ae:8e:43:af:2e:22:
df:ef:26:89:41:56:7a:e7:9b:97:85:01:9b:4a:12:b9:97:3b:
a0:59:b7:b4:79:b2:e3:c7:52:eb:c8:c0:a5:f1:df:6b:fd:f2:
e5:6c:c2:59:ef:a9:1d:ab:47:78:05:ee:e2:33:b4:4e:7a:c0:
b3:1b:37:d4:21:72:17:4c:6a:2e:34:91:43:fe:d3:26:68:79:
06:3b:ff:73:c6:3a:9a:08:da:1d:85:95:87:ef:6e:a4:9e:14:
bc:f8:51:3e:76:b3:be:0e:c8:25:01:a9:e8:68:cb:10:cc:b7:
99:38:40:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:48 2026 by rpki-client