Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
File: AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft (raw, json)
Hash identifier: BJKdZEzMGLVpFNZXBkOdrXZ0HONBvJWU89neq+3Lug0=
Subject key identifier: 76:E2:C0:16:54:F5:47:F0:1C:2C:6E:BE:39:D1:6B:57:F2:C0:7A:0B
Authority key identifier: 00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
Certificate issuer: /CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Certificate serial: 019CA86A1E6F0FD1639E64473B5306C7F3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
Manifest number: 0202
Signing time: Sun 01 Mar 2026 08:00:52 +0000
Manifest this update: Sun 01 Mar 2026 08:00:52 +0000
Manifest next update: Mon 02 Mar 2026 08:00:52 +0000
Files and hashes: 1: AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl (hash: QOiX0W7Fluoge6FFjtyS4pEL64hqkG54RUF0wKPoZqM=)
2: TlGLs-ZqoCYcTCIJOkxtEh99Kp8.asa (hash: vIICmhEdB9777okYSyHBv9wIM9j2JAlWk+yTt8NlhuA=)
3: XanHRUj2-HyDyPZ77hmHcGeG2lg.roa (hash: ugHcdlNxi9RfyCrcntqXJ3Nl+aNon55mzqLGxiiLo0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:1e:6f:0f:d1:63:9e:64:47:3b:53:06:c7:f3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Validity
Not Before: Mar 1 08:00:52 2026 GMT
Not After : Mar 2 08:00:52 2026 GMT
Subject: CN=76e2c01654f547f01c2c6ebe39d16b57f2c07a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:40:85:26:df:0d:2f:ec:13:21:4c:e1:31:
15:64:36:d1:39:13:91:ba:32:e4:ba:cc:c3:d7:30:
cb:ff:0b:04:87:04:0b:39:2d:3d:69:27:e5:21:4b:
6d:bf:9c:66:95:ae:23:a3:0d:08:2b:44:5a:29:63:
58:ba:53:2e:47:9a:30:4f:43:b8:58:ec:74:99:c8:
a4:45:15:b8:39:5d:ad:fb:12:c1:86:76:74:ec:d4:
b9:1d:18:ce:e4:54:31:5b:a4:34:ee:14:2a:b6:64:
77:0d:59:90:75:ea:39:b5:d1:8d:79:c9:8c:76:07:
67:f6:a5:0f:c2:e2:22:5f:41:df:74:03:b7:2e:e7:
a0:86:93:38:5d:2f:aa:a3:7c:0d:91:ac:01:b8:81:
ed:2a:50:9e:0f:ca:ab:eb:23:c1:ff:3f:6a:09:23:
c0:65:39:7b:19:47:49:fc:53:34:77:39:b2:ce:bb:
22:5d:99:0f:e5:db:89:cc:f0:e1:5e:da:73:12:e7:
68:ee:a5:af:fb:ff:df:89:8d:30:bc:60:e0:2a:7e:
84:af:06:d5:f2:a5:b3:4b:04:b3:34:1e:b2:fe:f0:
ac:63:03:20:d4:e1:16:4f:c9:73:0c:72:6b:ac:aa:
78:8a:25:f1:50:65:fa:32:ed:55:cd:8d:51:9a:37:
78:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E2:C0:16:54:F5:47:F0:1C:2C:6E:BE:39:D1:6B:57:F2:C0:7A:0B
X509v3 Authority Key Identifier:
keyid:00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3d:ca:f8:d0:c4:bb:e5:b3:af:31:ae:12:cc:b1:8e:31:44:
1e:9e:c3:5a:4d:22:64:ff:3d:bc:30:8e:84:2a:b5:e9:a8:57:
e9:58:61:da:e8:47:00:1e:92:a7:a5:05:30:db:95:f8:cf:fd:
b6:ed:57:ae:79:24:88:87:2f:a3:7e:16:24:d5:e2:e2:1c:63:
ca:46:14:05:47:28:e9:05:94:1a:d1:0d:1c:d6:b3:54:12:5e:
71:5d:8e:3e:fd:6f:44:48:e0:f5:e3:a0:44:2a:a9:d6:8f:8c:
20:27:8e:d2:d4:ce:08:95:c3:91:9e:05:e8:92:52:e6:1b:ad:
77:cf:e3:11:76:4c:10:05:5a:45:06:a6:6e:c7:70:bc:ed:0d:
77:56:47:52:a1:11:b9:57:42:ea:c7:75:10:c7:b9:d0:f1:52:
ed:da:dc:0b:8d:7a:23:bf:73:7d:b2:94:d4:07:a0:42:c2:0f:
09:32:69:8f:4f:e8:5a:82:37:af:c4:49:7b:51:64:99:24:e0:
be:16:6a:63:96:8e:3a:36:c0:ac:08:4c:c1:ee:77:ec:76:7f:
5b:06:07:76:6e:79:5f:2c:a3:43:bd:e0:97:07:22:64:a2:13:
9a:49:bd:61:ee:45:4b:8a:d5:b7:32:58:61:5d:ca:1f:d4:99:
ff:62:99:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:11 2026 by rpki-client