Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
File: p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft (raw, json)
Hash identifier: fTSAHTXBoiIszR5uh2LNJvwy5uGwKxakbwzDBdXlifU=
Subject key identifier: 7A:10:20:D0:B3:16:DC:89:BD:15:C4:43:8E:54:74:4C:F7:3A:47:95
Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
Certificate issuer: /CN=a750263823402b83c11c5014d32666dcab111447
Certificate serial: 019FA93E0652BEE83007FDAC787F1EE1D2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
Manifest number: 0476
Signing time: Tue 28 Jul 2026 15:00:42 +0000
Manifest this update: Tue 28 Jul 2026 15:00:42 +0000
Manifest next update: Wed 29 Jul 2026 15:00:42 +0000
Files and hashes: 1: p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl (hash: vuoiHp3cJIzJy1IpceXzSkE7nbJBr5N/SQBV9U3E+o8=)
2: uIYw_8iiZTupx6FQ8I2_JU4U5OU.roa (hash: j0RS1RQJQSNrBv7ngDU2LKpRzV2MtQ6zJxmWtahtrSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:06:52:be:e8:30:07:fd:ac:78:7f:1e:e1:d2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750263823402b83c11c5014d32666dcab111447
Validity
Not Before: Jul 28 15:00:42 2026 GMT
Not After : Jul 29 15:00:42 2026 GMT
Subject: CN=7a1020d0b316dc89bd15c4438e54744cf73a4795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:97:da:d1:62:d9:a0:74:ef:e5:a1:84:d3:ef:
cf:e2:43:d9:20:97:d9:2d:15:13:ec:34:98:c2:56:
91:88:83:00:fc:52:26:bd:8f:1b:a4:ce:eb:03:76:
85:e5:97:6c:9f:14:02:9a:54:04:2f:f6:98:55:af:
3a:c8:c0:a9:d7:3a:88:c2:ee:43:bd:f3:b4:e1:28:
40:2b:8b:d1:8a:71:d4:a4:ff:fa:31:7a:71:6f:aa:
1f:0b:0c:4a:9e:41:26:0f:d1:b4:8b:4c:0a:9e:6f:
2c:cd:fa:c1:1a:ae:bf:09:de:65:41:ea:a8:d4:f9:
d7:c1:a9:22:32:b8:fc:85:61:10:ce:4b:cb:91:cb:
0f:22:10:84:b6:2f:80:d0:71:0b:d1:c9:5a:f2:23:
53:ae:8a:74:18:6a:d1:c6:53:9f:2d:c7:9b:2d:c9:
79:3d:f2:66:89:df:bb:8b:aa:c8:a4:09:0b:4a:68:
95:fc:9d:53:e2:e9:53:c1:57:eb:91:7f:9c:10:62:
dc:36:5f:f9:c9:fd:48:6c:d7:37:bd:09:a0:7d:37:
45:66:43:48:1f:75:77:f1:74:07:22:8f:20:8d:d5:
a8:ff:7b:87:f3:9c:ab:f4:f9:61:9b:8b:e3:0b:79:
e5:76:f7:60:92:c0:b7:a7:e9:08:7d:86:f2:3e:9a:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:10:20:D0:B3:16:DC:89:BD:15:C4:43:8E:54:74:4C:F7:3A:47:95
X509v3 Authority Key Identifier:
keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c3:20:ec:bc:1f:18:b9:d3:2f:b6:b4:5e:ac:ac:e1:c4:b3:
5a:c3:e9:7c:db:db:38:30:69:ef:55:92:fb:9a:3c:96:fe:3a:
aa:2a:c2:69:cb:f6:b7:c2:2d:ec:03:d4:5d:40:97:86:15:a6:
11:a0:c9:f7:f0:6a:fa:94:09:89:36:47:af:30:55:e0:62:4d:
08:27:4e:18:60:69:c8:87:32:7d:b2:9d:75:05:fd:76:82:22:
ab:2b:32:87:e0:a0:af:54:38:52:60:01:44:17:12:5a:5e:b1:
76:90:71:5f:46:3b:02:12:a3:07:14:04:d5:54:5e:be:ed:ff:
1f:57:7f:54:6b:32:ad:dd:bb:c5:b3:53:f2:62:17:17:b0:13:
52:55:6c:60:d0:46:31:15:dc:25:ab:8e:ed:45:a2:ce:e4:d2:
c8:d4:48:4a:4b:71:73:93:68:3a:ef:09:39:c6:44:1d:cc:fb:
fc:53:a9:98:b7:68:ce:83:3b:19:5d:9c:00:c4:fc:ff:1f:15:
23:08:82:53:85:a1:25:20:2c:9c:50:c6:ef:d9:00:45:89:8b:
3e:83:a8:83:9d:9d:15:e8:d4:5b:fb:70:00:c2:3b:4d:eb:4e:
45:11:82:30:8d:c9:fc:56:ce:f0:e2:7f:52:ef:84:6b:0d:ae:
52:e8:91:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:55:42 2026 by rpki-client