
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
File: AM0TenUCPWcunw4UQ8sOjPU7A9M.mft (raw, json)
Hash identifier: uZkZuWK4B1s1kxDp01Z6kpeP8O9jfyevrzr3/ioWFyc=
Subject key identifier: 03:19:E3:A9:D9:AB:E3:84:F1:8C:B0:A9:D1:FF:50:60:7F:0E:41:85
Authority key identifier: 00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
Certificate issuer: /CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Certificate serial: 01A0D5028B06E3B9C3C6636D6B0199E4FC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
Manifest number: 0317
Signing time: Thu 24 Sep 2026 20:01:48 +0000
Manifest this update: Thu 24 Sep 2026 20:01:48 +0000
Manifest next update: Fri 25 Sep 2026 20:01:48 +0000
Files and hashes: 1: 4WIEmWvMFKIeFC4RDJ68apDVAe0.asa (hash: VSjOOETa3AtWZP35ehAJCwwZ8VzUb3MAyq+7YzEjsU0=)
2: AM0TenUCPWcunw4UQ8sOjPU7A9M.crl (hash: L6KaZHWw8eQvS408slEPQfgvkfOGtvjN6cT0MFCjwgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:8b:06:e3:b9:c3:c6:63:6d:6b:01:99:e4:fc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Validity
Not Before: Sep 24 20:01:48 2026 GMT
Not After : Sep 25 20:01:48 2026 GMT
Subject: CN=0319e3a9d9abe384f18cb0a9d1ff50607f0e4185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:44:0b:66:14:24:04:e9:91:6f:3e:72:96:
3e:e6:77:60:2c:b1:1c:b7:13:7d:50:1d:ab:41:4b:
7f:39:4c:0f:dd:32:c5:c0:7f:fe:15:a7:f3:d6:c6:
11:d1:d8:24:9d:fc:14:30:f3:53:7a:71:0b:b6:a1:
00:06:29:a8:31:79:c1:2b:ea:70:d4:a8:e3:a1:90:
0c:57:03:66:25:0f:34:fb:9b:14:11:6f:c2:e3:3e:
0a:6e:b3:aa:a5:31:1c:bb:8e:cf:fd:15:0e:04:dd:
0b:c1:da:66:6b:d8:43:86:e6:e6:85:34:95:97:e9:
e8:db:91:7e:15:b2:89:bd:e2:f7:fe:f9:48:d2:c3:
44:a7:62:60:34:90:07:fa:ad:3a:47:d2:da:56:f3:
1f:7b:fd:68:eb:f1:cf:8f:94:e6:21:49:5e:c6:53:
99:e9:ab:32:41:84:eb:c1:52:f3:c2:2b:8d:62:f2:
fd:d6:d2:b4:31:5a:21:3b:93:16:d8:3c:9f:74:ed:
db:9f:5a:97:02:1f:3a:9d:4b:c0:67:07:3b:6a:68:
88:d2:cb:31:9f:69:61:9e:a6:d6:24:b8:86:19:c3:
22:00:7e:a0:fe:af:c4:64:fb:8b:11:87:7a:4e:31:
4f:03:08:2f:4c:89:e1:78:9c:f9:47:ae:3a:20:f3:
23:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:19:E3:A9:D9:AB:E3:84:F1:8C:B0:A9:D1:FF:50:60:7F:0E:41:85
X509v3 Authority Key Identifier:
keyid:00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:af:04:ed:a2:56:25:62:8a:7b:26:a8:a1:79:97:f2:7e:07:
39:0b:ef:fd:f5:14:0f:6e:8f:68:8a:b8:12:10:a0:85:7e:93:
7c:79:23:45:6a:84:a4:74:95:d5:c7:68:e3:ac:1a:e3:98:81:
ca:dc:6d:ce:10:74:84:15:e0:cb:39:62:30:06:de:9f:c3:6d:
4d:46:0e:72:50:4e:10:ba:cc:3e:4e:c6:25:5a:86:82:0f:9a:
be:ba:1f:d1:1f:a5:b7:66:04:a6:89:31:17:a9:ae:c0:45:92:
4a:bd:b1:e5:46:fe:d4:40:88:98:6f:a7:1b:39:72:2d:fe:16:
70:fd:4d:92:c0:5a:84:21:8c:c9:6a:9e:e8:5a:00:a7:b2:e6:
54:5b:ba:68:c7:6c:ed:f9:75:e5:a0:b5:df:20:13:ce:be:85:
32:23:13:b2:b1:cf:f7:df:eb:04:15:73:45:a2:cf:17:d2:df:
11:42:10:18:ee:7f:c1:08:f3:51:34:ec:3f:54:a3:cb:17:3a:
90:a0:90:d0:5f:cf:a4:86:3e:19:90:5f:f4:f1:ad:2e:f5:d2:
b3:32:b0:49:04:7a:3d:26:5c:36:4b:e0:e1:56:7a:54:fb:79:
ce:f0:31:c1:4f:3f:89:40:7e:fa:bd:f9:88:05:c9:3f:88:74:
5b:a5:0d:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVAosG47nDxmNtawGZ5PxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwY2QxMzdhNzUwMjNkNjcyZTlmMGUxNDQzY2IwZThjZjUz
YjAzZDMwHhcNMjYwOTI0MjAwMTQ4WhcNMjYwOTI1MjAwMTQ4WjAzMTEwLwYDVQQD
EygwMzE5ZTNhOWQ5YWJlMzg0ZjE4Y2IwYTlkMWZmNTA2MDdmMGU0MTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ5EC2YUJATpkW8+cpY+5ndgLLEc
txN9UB2rQUt/OUwP3TLFwH/+Fafz1sYR0dgknfwUMPNTenELtqEABimoMXnBK+pw
1KjjoZAMVwNmJQ80+5sUEW/C4z4KbrOqpTEcu47P/RUOBN0Lwdpma9hDhubmhTSV
l+no25F+FbKJveL3/vlI0sNEp2JgNJAH+q06R9LaVvMfe/1o6/HPj5TmIUlexlOZ
6asyQYTrwVLzwiuNYvL91tK0MVohO5MW2DyfdO3bn1qXAh86nUvAZwc7amiI0ssx
n2lhnqbWJLiGGcMiAH6g/q/EZPuLEYd6TjFPAwgvTInheJz5R646IPMjPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMZ46nZq+OE8YywqdH/UGB/DkGFMB8GA1UdIwQY
MBaAFADNE3p1Aj1nLp8OFEPLDoz1OwPTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mODMxMzYtMTg2ZC00OTA0LWI4MWMt
Yzc5ODgxZjMxNWUyLzEvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mODMxMzYtMTg2ZC00OTA0LWI4MWMtYzc5ODgxZjMxNWUy
LzEvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArK8E7aJW
JWKKeyaooXmX8n4HOQvv/fUUD26PaIq4EhCghX6TfHkjRWqEpHSV1cdo46wa45iB
ytxtzhB0hBXgyzliMAben8NtTUYOclBOELrMPk7GJVqGgg+avrof0R+lt2YEpokx
F6muwEWSSr2x5Ub+1ECImG+nGzlyLf4WcP1NksBahCGMyWqe6FoAp7LmVFu6aMds
7fl15aC13yATzr6FMiMTsrHP99/rBBVzRaLPF9LfEUIQGO5/wQjzUTTsP1Sjyxc6
kKCQ0F/PpIY+GZBf9PGtLvXSszKwSQR6PSZcNkvg4VZ6VPt5zvAxwU8/iUB++r35
iAXJP4h0W6UNFg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:20:44 2026 by rpki-client