Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json)
Hash identifier: W2FHim8Ac4LuTS89N+tS5VfDkNJ6qr96lNXDnFNuh7k=
Subject key identifier: 18:4C:DC:14:58:AF:17:DB:C7:92:2B:86:38:9E:59:9C:44:41:AE:E2
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial: 019D99D034AF4DD014DC87AFE9BC5112AD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:00:52 +0000
Manifest this update: Fri 17 Apr 2026 05:00:52 +0000
Manifest next update: Sat 18 Apr 2026 05:00:52 +0000
Files and hashes: 1: 3_0WZ7tcEt9l7JCeqM_XLJKrQAI.roa (hash: 7OfgraftH18MfCmboAvi66Dsa4X9nEMWe7jgzn7VuiE=)
2: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: 7V0b+cYTCqFVXH5FLO9UQd2HvBKxz5vnYOl7y34tXh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:34:af:4d:d0:14:dc:87:af:e9:bc:51:12:ad:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
Validity
Not Before: Apr 17 05:00:52 2026 GMT
Not After : Apr 18 05:00:52 2026 GMT
Subject: CN=184cdc1458af17dbc7922b86389e599c4441aee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b2:7f:2a:ad:b5:ba:bb:9b:06:f5:9e:e9:d4:
bc:4a:7b:9b:58:7f:33:41:45:b1:0b:2d:20:da:6d:
d7:b7:28:6e:ef:38:b0:f9:d1:c3:4e:30:db:9f:75:
7c:26:a3:b8:06:48:91:43:96:8c:4c:5d:cb:d4:3f:
5c:a9:69:c2:aa:1b:f0:91:81:84:9a:f3:a0:dc:1f:
56:1f:01:12:a3:36:44:69:40:62:4d:9f:da:80:80:
bd:f7:31:8f:33:99:9b:6c:6a:4e:d4:8a:13:30:08:
5b:8d:7d:2a:24:44:40:83:e7:d9:90:28:11:26:d3:
fb:37:f6:67:e2:cf:15:36:2a:74:a8:83:fa:7b:22:
04:23:cc:cc:78:a0:50:e9:34:79:8a:10:0f:a9:16:
2c:2c:60:6f:9c:8a:33:e1:24:fa:4e:c3:71:b4:42:
1c:7a:77:3f:08:0e:d4:70:db:cc:d3:6d:86:4c:e1:
6c:d9:8b:26:c4:17:2f:83:e4:1c:35:a0:48:38:12:
31:f4:4a:d5:71:45:02:f6:de:5f:3c:18:83:88:93:
df:1b:8e:98:d3:01:94:1c:69:7b:92:ef:b0:c2:74:
97:74:26:f2:96:07:ad:10:60:04:e7:0c:e6:16:41:
6e:40:f5:e8:92:67:6d:07:e3:90:4c:b2:65:1b:7b:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4C:DC:14:58:AF:17:DB:C7:92:2B:86:38:9E:59:9C:44:41:AE:E2
X509v3 Authority Key Identifier:
keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cf:03:b0:4f:f7:48:b7:18:72:73:9b:1c:c4:d4:c7:31:3a:
4a:b3:2d:bd:5d:da:82:40:b9:5a:51:e1:57:16:e4:aa:1a:76:
49:92:38:1f:15:9c:e3:2e:ea:b4:33:40:c0:e6:70:aa:9b:2f:
e7:16:e3:aa:3b:a4:d7:e3:59:4d:59:ce:84:bf:be:44:05:79:
fb:c5:c6:c9:ba:18:a5:83:e8:76:eb:58:4f:d5:dd:91:40:91:
e0:a0:ac:31:85:25:83:de:b9:46:32:93:d5:c4:8a:fa:9c:59:
fe:7f:58:bf:27:78:15:53:c7:ce:ea:e4:23:fe:7f:33:d9:21:
a1:7f:b4:55:55:bd:73:84:81:fd:e8:10:a3:d9:ce:4c:62:db:
41:81:2d:b9:ae:47:6c:b4:44:26:44:15:83:e1:e6:2c:d0:91:
e8:3a:10:39:68:27:b0:bd:73:bc:4a:d2:ab:b1:a7:3b:0c:96:
0b:72:dc:41:09:23:5e:9f:d0:b3:f3:e8:c4:22:f3:5b:0f:23:
fd:f7:90:53:ca:c9:d9:df:99:40:11:16:e5:da:f4:a1:3f:b9:
52:ee:0d:4d:91:c7:53:29:75:7a:6b:85:19:61:f4:ec:21:09:
73:99:cf:d5:bf:e4:de:6d:51:8f:e2:62:8a:45:c2:59:bc:a6:
5c:fe:eb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:00 2026 by rpki-client