Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
File: AM0TenUCPWcunw4UQ8sOjPU7A9M.mft (raw, json)
Hash identifier: puQWw5MDihwct34YAWMD5f1UHrXoEsM7vNUMTeTF4sA=
Subject key identifier: 9F:DB:EB:D4:25:1A:D0:E8:34:87:9F:32:09:87:D0:4C:7A:B2:2B:01
Authority key identifier: 00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
Certificate issuer: /CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Certificate serial: 019FA7BE0324D1B063853B76623F8093DC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
Manifest number: 027B
Signing time: Tue 28 Jul 2026 08:01:15 +0000
Manifest this update: Tue 28 Jul 2026 08:01:15 +0000
Manifest next update: Wed 29 Jul 2026 08:01:15 +0000
Files and hashes: 1: 4WIEmWvMFKIeFC4RDJ68apDVAe0.asa (hash: VSjOOETa3AtWZP35ehAJCwwZ8VzUb3MAyq+7YzEjsU0=)
2: AM0TenUCPWcunw4UQ8sOjPU7A9M.crl (hash: z4FqeS7glNz9htjy9sVKZ6HypNIbreneFVjq6GQbj3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:be:03:24:d1:b0:63:85:3b:76:62:3f:80:93:dc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Validity
Not Before: Jul 28 08:01:15 2026 GMT
Not After : Jul 29 08:01:15 2026 GMT
Subject: CN=9fdbebd4251ad0e834879f320987d04c7ab22b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:53:5b:9e:d7:3c:65:e5:33:ff:fb:de:51:04:
61:6a:5a:99:5f:8c:95:6b:7e:94:56:1e:e9:3a:54:
51:c4:6c:2e:13:0e:8d:6a:31:a3:38:c1:a1:19:91:
66:ff:b0:9e:06:d8:a1:c5:60:3a:ef:90:0f:00:d6:
4d:5b:5b:06:c2:93:5f:2b:09:30:cb:ba:9a:b1:93:
29:ec:b0:66:43:2a:c2:5c:ed:d5:8a:3d:86:90:ef:
fb:ee:77:f2:f1:49:0b:79:df:ec:fd:f7:62:f3:f7:
0a:42:26:cb:e7:be:75:c0:f2:b7:e6:38:a0:5e:0f:
e3:97:b2:f8:a6:2a:e9:d0:ad:b2:fc:1f:69:6f:48:
23:f3:93:94:a7:bb:1d:e5:07:05:92:cf:0c:77:43:
3f:88:3c:a5:56:30:29:c7:f4:4e:a3:b4:51:c2:a6:
13:e1:6c:00:c4:50:db:5f:ee:c9:7c:04:22:bc:db:
50:ab:f9:fb:6b:98:70:5b:07:97:b6:d4:b4:80:bc:
ff:af:f1:3b:29:c6:e6:c8:26:30:f5:7e:3a:f3:75:
f3:77:fd:cb:a8:73:a4:0b:39:cf:e9:12:b0:67:1e:
69:b9:ee:d1:06:ce:ab:23:ea:36:0f:7e:ac:96:50:
c4:ff:2e:69:a8:7a:02:23:3f:48:d7:b0:d8:2f:64:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DB:EB:D4:25:1A:D0:E8:34:87:9F:32:09:87:D0:4C:7A:B2:2B:01
X509v3 Authority Key Identifier:
keyid:00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e8:b5:a4:42:a9:ef:85:94:18:ed:a1:57:1d:57:fc:b4:2c:
7e:25:e5:78:ef:77:cf:e2:50:97:77:c1:69:16:0a:f9:14:a3:
7f:d4:9a:4a:6a:71:f9:68:13:91:25:f7:a0:10:f6:4d:ed:5b:
3c:37:1e:d2:74:6a:ef:96:9b:48:6c:96:a2:d5:f8:26:15:d4:
cb:ec:93:f0:63:28:7c:9b:30:81:c5:6d:5c:9f:a7:8f:20:8e:
ac:fe:52:8c:4d:e9:cb:16:26:17:e0:82:5b:62:b8:f5:67:94:
2f:3b:3c:4c:67:0d:62:b2:6e:d2:e5:33:1b:59:dd:b7:b9:86:
21:97:83:e0:34:14:44:92:0e:c2:32:e4:8e:cd:e5:49:d6:c5:
51:e2:ca:3f:03:da:87:48:89:5d:42:ce:f7:c1:16:b0:8c:50:
42:33:db:2e:c9:81:4e:27:20:0a:10:2c:85:d1:ee:8a:8a:65:
c1:d4:c6:1f:58:0b:d5:ef:ce:3e:a8:6f:9f:8d:53:7b:53:3f:
12:11:ff:7d:55:cb:4a:67:70:f6:b1:67:ec:60:28:6f:49:d1:
a0:ef:90:c4:51:d1:c3:7e:13:f2:12:3a:3c:42:86:c7:2a:4c:
30:8e:d4:95:4d:16:2c:88:64:67:49:8c:77:e9:c7:8d:1a:fd:
fb:96:fa:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:22 2026 by rpki-client