Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
File: p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft (raw, json)
Hash identifier: bO8v9iYOwsCxRm/uE50iQ2aUf+Y4kYOGhNhYXGiFM5k=
Subject key identifier: 45:CA:30:07:93:43:A6:40:CB:F9:F6:BE:9B:A9:92:E1:06:F2:B4:69
Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
Certificate issuer: /CN=a750263823402b83c11c5014d32666dcab111447
Certificate serial: 019CAB6B1C4C6FA281F7F1B0C7ED67A0E558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
Manifest number: 02E9
Signing time: Sun 01 Mar 2026 22:00:49 +0000
Manifest this update: Sun 01 Mar 2026 22:00:49 +0000
Manifest next update: Mon 02 Mar 2026 22:00:49 +0000
Files and hashes: 1: P-DBjLRAhGCsnhP5dVp_tFMnlGE.roa (hash: pkN8TYGuUVnxVvKzbBZ3PyoTyNpT5OufkpOv4OKwQDY=)
2: p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl (hash: 4yjuFKj9E80YjtIyhCdVFvk3jf8ileoJ9WagYgSKkaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:1c:4c:6f:a2:81:f7:f1:b0:c7:ed:67:a0:e5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750263823402b83c11c5014d32666dcab111447
Validity
Not Before: Mar 1 22:00:49 2026 GMT
Not After : Mar 2 22:00:49 2026 GMT
Subject: CN=45ca30079343a640cbf9f6be9ba992e106f2b469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:20:c8:3a:05:4f:5f:be:a4:3f:11:2b:8a:
b9:34:72:5f:ab:b1:e1:2f:80:f2:0f:6c:1c:d5:cf:
1d:e6:99:ef:99:37:d5:e6:d6:7b:4d:3f:65:67:e5:
df:d2:6a:63:ec:f8:d8:ca:d2:ba:55:5b:66:41:14:
61:fb:d7:00:3c:bd:c2:e2:5b:5c:0b:24:78:6f:5a:
a4:88:36:6a:28:c3:41:7c:cb:b0:87:b3:f4:bf:db:
64:57:ac:a3:39:2b:23:26:f5:48:48:98:66:41:a1:
90:ae:12:16:9f:a3:0e:14:2b:9f:25:ac:ab:d3:a5:
a5:5f:8e:1b:ea:31:3e:22:eb:e7:56:2d:08:35:3e:
51:c4:43:95:cc:77:68:a5:cf:4e:d6:6b:43:3d:9c:
f6:99:e7:a1:21:2f:25:7f:b9:b8:e2:0c:1e:99:1b:
e2:60:ce:77:b1:e4:bf:f0:89:53:e1:67:2c:ff:80:
be:99:c9:c7:93:81:9d:34:6e:83:b2:c4:13:b6:96:
d7:66:14:e2:4f:e3:41:13:44:bd:c3:13:52:18:f6:
dc:af:a1:a1:0f:3c:61:96:ad:20:be:85:bc:00:56:
21:1a:7a:ed:59:06:6a:2c:a7:6a:e6:30:3f:20:02:
8e:b9:ac:0f:71:16:2d:57:d3:57:e7:fd:bc:ba:be:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CA:30:07:93:43:A6:40:CB:F9:F6:BE:9B:A9:92:E1:06:F2:B4:69
X509v3 Authority Key Identifier:
keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:51:09:42:61:b6:cc:38:21:22:ec:72:1a:a8:b1:7f:1b:4b:
20:c3:25:72:a2:55:36:a2:a7:06:ba:0a:36:0a:43:39:9d:7f:
0d:e9:29:35:1f:a1:f5:6f:fb:fc:95:db:61:85:22:8d:17:50:
d8:a2:4c:6f:e1:64:61:14:74:58:72:df:d6:dc:b6:58:53:89:
7d:27:f8:f4:87:c7:93:5b:e8:46:ad:84:e9:b4:83:a3:5a:dc:
98:36:07:14:1c:df:c1:9a:9b:5a:11:90:7b:68:51:75:5a:38:
cc:ac:e1:bb:c7:71:37:c7:7c:6e:12:34:ce:eb:8b:b6:3c:45:
1b:fb:75:f8:8b:c4:c5:d9:1a:71:be:a3:7b:4d:f4:96:68:1d:
16:6f:84:56:90:f3:54:16:e5:b0:7b:d0:89:55:46:9b:e4:3e:
03:af:54:31:47:b6:82:ae:11:e7:14:dd:ff:fc:13:f7:2b:bf:
b9:8f:3e:6b:c6:8f:b3:a5:6c:64:e1:df:e4:3a:4c:a7:f1:79:
fe:20:0b:ba:c0:ab:5f:73:f1:76:3d:20:f6:b9:e9:0f:a2:7d:
0e:76:0e:22:d6:4c:4d:6a:da:38:e6:8d:3f:f9:b7:9c:e2:19:
bc:ab:b1:8f:f6:de:d6:d0:00:ff:4d:52:8f:67:74:91:0e:3a:
88:b2:55:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:23 2026 by rpki-client