Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json)
Hash identifier: DAPNcg7W2UnswxUeIXZI6eczrOwniKQ/uZOA9qpOXUA=
Subject key identifier: 0F:E9:95:01:EA:F0:5A:9A:82:2B:7D:A7:76:6D:51:95:0C:F6:D2:29
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial: 019FAAF5875AC9378605E38A98E300D47B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 23:00:45 +0000
Manifest this update: Tue 28 Jul 2026 23:00:45 +0000
Manifest next update: Wed 29 Jul 2026 23:00:45 +0000
Files and hashes: 1: 3_0WZ7tcEt9l7JCeqM_XLJKrQAI.roa (hash: 7OfgraftH18MfCmboAvi66Dsa4X9nEMWe7jgzn7VuiE=)
2: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: /AWXdsh8LZuzLLkfF1E3x5llytiXVRWiyqWnFU1ZefY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:87:5a:c9:37:86:05:e3:8a:98:e3:00:d4:7b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
Validity
Not Before: Jul 28 23:00:45 2026 GMT
Not After : Jul 29 23:00:45 2026 GMT
Subject: CN=0fe99501eaf05a9a822b7da7766d51950cf6d229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:63:0d:b8:bf:a4:5a:04:8e:35:ae:6c:03:
1e:c1:a8:fa:2a:cf:71:39:50:d0:fc:9f:fe:b9:37:
d2:d4:79:e9:fb:a0:fe:21:22:e0:c7:f9:d8:dd:e6:
6b:74:cd:81:24:d7:71:8b:37:0a:2f:83:06:a5:16:
14:e8:6d:50:29:3b:e6:f2:6f:4b:5f:cf:5d:4b:4c:
79:78:22:75:ca:7a:20:8b:9c:88:ce:36:f5:73:31:
5b:c8:21:70:44:01:bf:9d:40:9d:96:0e:5c:b5:55:
2b:15:d5:ab:93:73:1f:66:74:db:a0:36:47:3f:56:
82:67:56:6b:f0:ca:44:85:f2:e6:36:88:a9:54:e0:
41:90:56:93:ae:a7:3d:c9:f1:2b:db:f6:96:84:ec:
5d:c6:01:73:ba:0c:1a:90:10:9c:3d:3b:ee:57:b4:
07:96:8e:e4:93:0d:f3:a8:9d:f1:68:ac:91:fa:05:
6c:2d:34:8d:69:a5:7c:15:3b:fe:7e:e0:95:e5:5a:
c9:d5:55:fd:b5:59:84:60:1b:30:2f:13:2c:44:f0:
97:9b:30:2f:4b:13:75:76:4f:ac:4c:17:75:fb:e2:
16:b3:d7:ef:5e:02:4d:58:f4:68:8e:df:32:d3:28:
68:b2:4e:80:85:86:c6:72:3f:ee:79:1c:a0:87:af:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E9:95:01:EA:F0:5A:9A:82:2B:7D:A7:76:6D:51:95:0C:F6:D2:29
X509v3 Authority Key Identifier:
keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:74:db:7a:0f:4c:d4:a8:d7:b1:a3:5b:36:fc:8e:77:b0:43:
3b:93:18:7e:75:a6:00:c5:89:21:3e:47:7e:57:a5:9f:75:29:
ea:3b:ec:d7:28:1d:24:99:b8:62:18:26:c1:04:8f:fb:78:fb:
25:71:e3:b7:a0:fb:3f:62:12:d1:5f:df:11:21:35:8c:fb:52:
d9:48:fe:a4:12:1b:f3:16:9a:95:51:c2:e6:ca:e5:b2:55:a1:
51:e3:ed:8f:8f:56:8e:f0:3d:e5:fa:47:7e:80:a4:10:9f:a4:
00:5f:d4:71:b1:64:79:50:d7:7a:f1:97:23:d0:1d:fa:a0:82:
72:c8:43:36:ac:b6:1c:8c:3a:70:7b:73:5b:0b:3f:d4:18:18:
92:80:c2:d1:f4:35:06:b0:0f:36:a5:7e:39:d6:bf:0d:f8:21:
fb:35:c0:3f:f4:30:4c:8f:58:06:c4:12:52:1f:6b:bd:04:88:
aa:0b:02:c5:64:19:01:b0:6b:ae:11:f8:b1:c4:f8:d9:e1:ec:
87:65:b6:b0:f0:3f:ae:21:e7:89:eb:f3:6c:0b:6a:89:1e:02:
57:08:e4:5e:dd:61:25:1e:cb:ce:4c:ce:10:a1:94:62:af:82:
b3:c8:76:73:b0:52:5f:da:c0:ce:c9:79:0b:e2:d8:e8:83:ce:
da:3f:e9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:39:02 2026 by rpki-client