Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
File: p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft (raw, json)
Hash identifier: TvRHnkASq8x7OwVNasiWuJ/yx11gABUSqiFTwDuKrdA=
Subject key identifier: F2:16:0C:64:7E:7A:06:88:9B:64:A1:C9:13:E3:B6:4D:DD:F9:7C:9B
Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
Certificate issuer: /CN=a750263823402b83c11c5014d32666dcab111447
Certificate serial: 019D9AE3A3E00DE2B457F63B0570E185C242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
Manifest number: 0365
Signing time: Fri 17 Apr 2026 10:01:43 +0000
Manifest this update: Fri 17 Apr 2026 10:01:43 +0000
Manifest next update: Sat 18 Apr 2026 10:01:43 +0000
Files and hashes: 1: P-DBjLRAhGCsnhP5dVp_tFMnlGE.roa (hash: pkN8TYGuUVnxVvKzbBZ3PyoTyNpT5OufkpOv4OKwQDY=)
2: p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl (hash: c4aPWAdmRz6UpLQ2QdkSkHnJtECGfk0Ip6PNChUjKJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:a3:e0:0d:e2:b4:57:f6:3b:05:70:e1:85:c2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750263823402b83c11c5014d32666dcab111447
Validity
Not Before: Apr 17 10:01:43 2026 GMT
Not After : Apr 18 10:01:43 2026 GMT
Subject: CN=f2160c647e7a06889b64a1c913e3b64dddf97c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:6d:23:2e:14:58:f7:dc:3c:6e:ef:d7:7c:
13:2d:d4:c1:a1:ae:0f:17:2b:27:af:9b:66:1b:ce:
df:d0:fd:dc:4c:6d:cd:86:5c:83:fe:d6:92:86:74:
f3:0d:4a:22:a2:0f:3d:d7:1f:51:be:65:bc:36:5e:
3f:55:d5:03:a8:56:77:f7:b5:ea:7c:75:a4:c3:72:
f9:c8:8b:18:c3:fc:7f:17:18:d4:92:ed:f7:26:a1:
b2:f9:78:1d:f7:7b:6c:85:a0:1d:26:a6:89:cf:20:
e3:19:34:03:be:94:10:f3:9d:73:4c:7a:21:d3:54:
7c:2c:68:a8:95:a8:e3:16:64:be:71:d0:94:df:b7:
10:1c:ac:8f:42:45:d0:11:9a:6c:92:ae:b8:ef:97:
d9:8e:b0:ed:f8:36:8b:d9:5f:1f:d7:37:d8:4f:27:
42:ce:d7:59:ff:71:46:54:43:66:54:b2:4e:12:2a:
91:05:14:c8:32:e9:80:02:10:a2:ec:03:68:1c:44:
29:03:54:f3:d4:d6:7f:b4:4a:a5:ae:08:9a:bf:e8:
3e:ab:51:d7:60:f8:da:6a:d7:f5:78:21:0e:fa:00:
3f:28:dc:a5:85:18:e7:5e:6f:1a:62:8a:59:0a:a1:
cd:e1:76:d3:cc:f4:fd:1e:28:6b:67:f2:c7:5e:c2:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:16:0C:64:7E:7A:06:88:9B:64:A1:C9:13:E3:B6:4D:DD:F9:7C:9B
X509v3 Authority Key Identifier:
keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b8:22:9c:da:7f:11:dc:64:03:d0:b4:ce:f4:a6:12:7c:01:
3e:dc:e8:bb:ba:45:91:e2:eb:65:f8:b0:5a:dd:d2:86:52:63:
7f:62:5a:5f:91:53:3e:b7:24:45:6c:1f:ab:f6:22:05:4a:be:
27:d6:bf:25:d4:d2:12:d7:16:6f:52:32:dc:15:f9:f8:22:8c:
dd:96:f9:28:3e:11:d1:4e:c1:e1:7b:aa:7c:53:a5:ef:2b:b0:
85:c4:59:28:42:b2:48:0a:2c:3c:d6:6b:bb:50:ab:25:6b:c5:
80:6a:80:f9:d9:99:35:e4:4f:bf:52:0f:03:66:69:6a:3c:a1:
9f:0c:d2:92:10:ac:dc:48:fc:7c:d3:b5:40:15:77:99:e2:c0:
6d:3a:a5:19:d4:b0:cb:fd:1c:29:91:e2:67:ad:20:8e:3f:12:
f5:03:2c:e7:c8:fb:61:73:c9:47:b7:aa:71:48:58:94:83:ac:
a5:ed:cb:ab:20:2e:55:8b:66:9e:2f:c9:8a:bc:25:b8:82:ab:
4a:4e:4c:b6:96:f0:af:d1:cb:1c:6b:82:c3:c6:94:c9:18:64:
c5:3f:d6:05:75:60:90:d6:25:57:be:9d:be:37:4f:64:7d:b1:
47:22:1e:54:e1:33:3d:18:c7:5e:41:47:cb:48:4d:ca:aa:89:
32:11:e6:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a46PgDeK0V/Y7BXDhhcJCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NTAyNjM4MjM0MDJiODNjMTFjNTAxNGQzMjY2NmRjYWIx
MTE0NDcwHhcNMjYwNDE3MTAwMTQzWhcNMjYwNDE4MTAwMTQzWjAzMTEwLwYDVQQD
EyhmMjE2MGM2NDdlN2EwNjg4OWI2NGExYzkxM2UzYjY0ZGRkZjk3YzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvNtIy4UWPfcPG7v13wTLdTBoa4P
Fysnr5tmG87f0P3cTG3NhlyD/taShnTzDUoiog891x9RvmW8Nl4/VdUDqFZ397Xq
fHWkw3L5yIsYw/x/FxjUku33JqGy+Xgd93tshaAdJqaJzyDjGTQDvpQQ851zTHoh
01R8LGiolajjFmS+cdCU37cQHKyPQkXQEZpskq6475fZjrDt+DaL2V8f1zfYTydC
ztdZ/3FGVENmVLJOEiqRBRTIMumAAhCi7ANoHEQpA1Tz1NZ/tEqlrgiav+g+q1HX
YPjaatf1eCEO+gA/KNylhRjnXm8aYopZCqHN4XbTzPT9HihrZ/LHXsJcQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIWDGR+egaIm2ShyRPjtk3d+XybMB8GA1UdIwQY
MBaAFKdQJjgjQCuDwRxQFNMmZtyrERRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDFBbU9DTkFLNFBCSEZBVTB5Wm0zS3NSRkVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jY2I0ZmQtZmE2Ny00OGQ2LWE4ZmMt
OWEyOWYxZjQwODFjLzEvcDFBbU9DTkFLNFBCSEZBVTB5Wm0zS3NSRkVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9jY2I0ZmQtZmE2Ny00OGQ2LWE4ZmMtOWEyOWYxZjQwODFj
LzEvcDFBbU9DTkFLNFBCSEZBVTB5Wm0zS3NSRkVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbginNp/
EdxkA9C0zvSmEnwBPtzou7pFkeLrZfiwWt3ShlJjf2JaX5FTPrckRWwfq/YiBUq+
J9a/JdTSEtcWb1Iy3BX5+CKM3Zb5KD4R0U7B4XuqfFOl7yuwhcRZKEKySAosPNZr
u1CrJWvFgGqA+dmZNeRPv1IPA2ZpajyhnwzSkhCs3Ej8fNO1QBV3meLAbTqlGdSw
y/0cKZHiZ60gjj8S9QMs58j7YXPJR7eqcUhYlIOspe3LqyAuVYtmni/JirwluIKr
Sk5Mtpbwr9HLHGuCw8aUyRhkxT/WBXVgkNYlV76dvjdPZH2xRyIeVOEzPRjHXkFH
y0hNyqqJMhHmKw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:45:25 2026 by rpki-client