Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
File: AM0TenUCPWcunw4UQ8sOjPU7A9M.mft (raw, json)
Hash identifier: ZaCGnLS6U9G+9efV/0/JTZxkOdI1E7KFleAx7h5G+ho=
Subject key identifier: B8:E9:B5:1B:0C:E5:18:F5:09:04:30:EB:CC:1B:26:EE:10:47:59:13
Authority key identifier: 00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
Certificate issuer: /CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Certificate serial: 019CA90EAF5F6CD476D065B27928DADFB950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
Manifest number: ED
Signing time: Sun 01 Mar 2026 11:00:37 +0000
Manifest this update: Sun 01 Mar 2026 11:00:37 +0000
Manifest next update: Mon 02 Mar 2026 11:00:37 +0000
Files and hashes: 1: AM0TenUCPWcunw4UQ8sOjPU7A9M.crl (hash: ZzybsgH7AHuXhbEr2w5KY9LaGlKbQI0S3K4EdjCjonc=)
2: QRmb5YrXwDriaT2dAaAU-pHwvNQ.asa (hash: SD+gQNGtNRHX6vzbmlJIKYTNd1x65ITQz0EzQSUqHQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:af:5f:6c:d4:76:d0:65:b2:79:28:da:df:b9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Validity
Not Before: Mar 1 11:00:37 2026 GMT
Not After : Mar 2 11:00:37 2026 GMT
Subject: CN=b8e9b51b0ce518f5090430ebcc1b26ee10475913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:6d:47:75:32:ce:26:d1:ff:54:dc:6b:a0:
c6:51:4b:94:13:a7:87:d3:73:e0:d7:22:3e:d3:4c:
85:96:7b:b6:b1:f4:d8:62:6d:e3:7f:66:6b:b5:1e:
11:e8:9b:94:51:72:4c:41:ef:c5:30:da:36:61:17:
6a:cb:74:84:fb:07:62:d3:57:8e:5a:c5:cc:35:61:
1b:80:fc:e2:4a:4e:7f:6b:07:02:63:85:7e:28:ba:
2b:90:52:99:68:65:8f:6b:f8:c6:54:60:18:db:60:
e0:d4:7b:86:55:89:89:ac:45:ed:b9:79:f8:68:f5:
0e:68:88:e0:11:1a:99:c8:af:52:99:2e:20:2b:a3:
75:3f:c1:65:df:93:1f:48:ff:55:69:94:f9:40:29:
c5:e7:8e:5e:5b:6f:92:4b:dc:a1:c0:60:a5:70:ad:
37:1a:ec:16:eb:a7:3f:bf:26:cb:cd:05:e5:e0:77:
bb:8f:63:76:9a:37:fd:77:3a:8c:8e:7e:46:96:4a:
6b:7b:32:81:e5:b9:27:4c:68:18:68:32:99:58:d8:
b0:03:96:e6:04:31:83:da:7a:a6:3a:db:bc:3e:84:
87:22:35:37:a9:1b:0f:5a:a5:ac:5f:f8:44:5b:86:
7e:a3:57:c0:74:54:e3:97:73:d5:77:90:22:64:5e:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E9:B5:1B:0C:E5:18:F5:09:04:30:EB:CC:1B:26:EE:10:47:59:13
X509v3 Authority Key Identifier:
keyid:00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:20:b8:bd:3f:46:cd:22:eb:78:2b:00:7a:2d:da:d8:86:fe:
42:c4:97:85:a2:a1:6c:ff:49:23:2c:ed:b0:30:39:45:92:f0:
26:15:45:ae:1e:65:0d:c0:f4:8d:68:be:34:0c:b3:f7:7a:7a:
1e:c3:8b:82:e1:6b:5e:de:58:26:bb:e4:d9:8d:e8:8e:e4:7d:
4c:ba:f7:4e:86:6e:07:a0:88:b3:91:de:b3:86:f3:34:44:ae:
f0:ca:0e:08:56:91:5e:7e:4b:9b:bf:fe:5d:87:5e:40:5d:c1:
a6:f5:aa:aa:e9:5d:a5:ed:d5:fa:5b:64:1e:9e:36:d6:74:b7:
a8:e1:05:50:99:b7:e2:da:19:03:be:78:7e:7a:4d:db:42:8f:
ce:9f:85:f9:60:fb:19:89:00:ad:c0:89:73:2b:ff:d2:c4:f8:
fe:fe:15:13:ba:86:a1:1e:7d:4d:72:e3:ba:28:7f:9d:2a:3e:
fe:e3:e6:ed:0a:5b:ad:a6:15:a9:4a:1c:37:b4:8d:66:8b:e8:
7c:0d:d4:ff:13:3c:f5:5c:15:a5:36:cc:92:ed:a0:b5:97:c7:
c4:01:7c:01:23:b2:2e:38:8e:7b:6b:ff:7a:c5:93:5c:89:1e:
b5:41:ed:78:49:57:f9:83:23:58:0b:ce:e2:ca:e8:c1:34:aa:
43:3a:15:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypDq9fbNR20GWyeSja37lQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwY2QxMzdhNzUwMjNkNjcyZTlmMGUxNDQzY2IwZThjZjUz
YjAzZDMwHhcNMjYwMzAxMTEwMDM3WhcNMjYwMzAyMTEwMDM3WjAzMTEwLwYDVQQD
EyhiOGU5YjUxYjBjZTUxOGY1MDkwNDMwZWJjYzFiMjZlZTEwNDc1OTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZltR3UyzibR/1Tca6DGUUuUE6eH
03Pg1yI+00yFlnu2sfTYYm3jf2ZrtR4R6JuUUXJMQe/FMNo2YRdqy3SE+wdi01eO
WsXMNWEbgPziSk5/awcCY4V+KLorkFKZaGWPa/jGVGAY22Dg1HuGVYmJrEXtuXn4
aPUOaIjgERqZyK9SmS4gK6N1P8Fl35MfSP9VaZT5QCnF545eW2+SS9yhwGClcK03
GuwW66c/vybLzQXl4He7j2N2mjf9dzqMjn5GlkprezKB5bknTGgYaDKZWNiwA5bm
BDGD2nqmOtu8PoSHIjU3qRsPWqWsX/hEW4Z+o1fAdFTjl3PVd5AiZF7QiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjptRsM5Rj1CQQw68wbJu4QR1kTMB8GA1UdIwQY
MBaAFADNE3p1Aj1nLp8OFEPLDoz1OwPTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mODMxMzYtMTg2ZC00OTA0LWI4MWMt
Yzc5ODgxZjMxNWUyLzEvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mODMxMzYtMTg2ZC00OTA0LWI4MWMtYzc5ODgxZjMxNWUy
LzEvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSC4vT9G
zSLreCsAei3a2Ib+QsSXhaKhbP9JIyztsDA5RZLwJhVFrh5lDcD0jWi+NAyz93p6
HsOLguFrXt5YJrvk2Y3ojuR9TLr3ToZuB6CIs5Hes4bzNESu8MoOCFaRXn5Lm7/+
XYdeQF3BpvWqquldpe3V+ltkHp421nS3qOEFUJm34toZA754fnpN20KPzp+F+WD7
GYkArcCJcyv/0sT4/v4VE7qGoR59TXLjuih/nSo+/uPm7QpbraYVqUocN7SNZovo
fA3U/xM89VwVpTbMku2gtZfHxAF8ASOyLjiOe2v/esWTXIketUHteElX+YMjWAvO
4srowTSqQzoVVw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:37:51 2026 by rpki-client