Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
File: AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft (raw, json)
Hash identifier: iTT+jde4RocGc1cwRbx1mFL7iQfs1s1tf4BQN9pN9K8=
Subject key identifier: CB:CE:02:19:58:17:1C:4C:B5:F0:F4:28:0F:E6:95:F8:0C:CB:95:C4
Authority key identifier: 00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
Certificate issuer: /CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Certificate serial: 019DA5674753745C6BE0D91833D5CA3E0412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
Manifest number: 0285
Signing time: Sun 19 Apr 2026 11:01:42 +0000
Manifest this update: Sun 19 Apr 2026 11:01:42 +0000
Manifest next update: Mon 20 Apr 2026 11:01:42 +0000
Files and hashes: 1: AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl (hash: 9AsPpCtkDb4EV+fWYl3kfWau0Lpw9lTL8rumTNC6f4Q=)
2: TlGLs-ZqoCYcTCIJOkxtEh99Kp8.asa (hash: vIICmhEdB9777okYSyHBv9wIM9j2JAlWk+yTt8NlhuA=)
3: XanHRUj2-HyDyPZ77hmHcGeG2lg.roa (hash: ugHcdlNxi9RfyCrcntqXJ3Nl+aNon55mzqLGxiiLo0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 11:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:47:53:74:5c:6b:e0:d9:18:33:d5:ca:3e:04:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Validity
Not Before: Apr 19 11:01:42 2026 GMT
Not After : Apr 20 11:01:42 2026 GMT
Subject: CN=cbce021958171c4cb5f0f4280fe695f80ccb95c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:67:ca:9f:2f:36:dc:8e:67:4a:cf:bd:86:
70:6d:db:99:45:a8:25:92:a4:a8:25:2c:70:c5:a0:
13:59:dd:c2:fa:9b:61:59:33:4b:ee:27:b7:4e:f9:
6b:e7:c4:60:81:d7:5c:f0:57:b3:80:ad:80:72:48:
af:cb:82:28:15:18:05:da:eb:72:3e:c0:65:58:7c:
fd:88:d9:22:36:06:54:c5:69:a6:4c:b2:80:dd:e1:
ea:dd:7e:90:46:0a:19:88:4b:e3:65:b8:28:06:af:
ef:39:3e:46:46:c4:29:00:1b:60:4f:ad:ae:6a:47:
96:43:08:93:2a:37:29:91:ea:c2:6f:5c:9c:41:9b:
80:cf:78:be:d2:fd:e3:e6:28:a2:ec:1e:6f:5a:e0:
94:96:75:3d:1d:c3:62:d2:11:3a:d0:30:30:7e:8b:
e2:67:f0:59:12:0d:4b:57:c3:c3:df:f7:63:34:95:
f6:b0:33:18:8a:54:98:70:9b:5f:2a:54:95:fa:62:
3a:28:8b:10:13:16:0b:28:41:c5:65:9a:f2:7c:d0:
b4:5a:dc:c5:ac:b4:dd:01:b2:a5:76:d2:6a:39:20:
b7:37:17:37:3c:fc:19:aa:21:32:61:29:61:a3:38:
66:d3:0c:1c:9a:af:6a:e2:2a:74:7a:46:5f:55:7e:
df:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CE:02:19:58:17:1C:4C:B5:F0:F4:28:0F:E6:95:F8:0C:CB:95:C4
X509v3 Authority Key Identifier:
keyid:00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:16:2f:00:79:b7:d4:51:3f:f8:29:ae:9c:d0:87:63:fa:a2:
af:95:9f:46:81:b1:b8:2d:a2:c5:bb:72:f0:bc:bc:ec:1f:84:
4c:e1:37:17:c3:ec:1b:51:32:e1:f9:1f:e5:31:f5:c2:ad:c6:
c2:c3:39:a5:7d:94:09:95:93:64:7d:48:3c:b8:a3:28:c5:e8:
36:0b:3b:a8:62:73:29:6a:3a:f3:ef:95:c6:b5:21:8d:27:51:
61:81:f0:7e:25:40:03:57:dc:73:48:30:d0:b1:c9:d4:5a:e0:
5b:c0:69:92:f9:4c:a5:25:3e:c5:32:a3:21:a2:48:ca:9c:cd:
8e:ab:d7:84:8a:44:e0:08:06:b5:5b:dd:39:a9:d7:8a:13:5d:
87:68:63:b8:d5:42:57:c9:49:4f:cd:d8:64:5f:07:44:90:29:
97:4b:72:c6:05:89:13:6a:c2:89:c1:4d:d7:6d:f7:f0:55:f0:
d4:70:87:d0:27:a1:27:ac:ff:30:12:00:08:df:d8:df:a2:7c:
6c:10:95:dd:c1:42:3b:be:a2:da:6b:20:65:50:f7:eb:0e:ca:
22:a6:eb:09:91:65:93:85:ff:a7:45:86:90:96:f6:4f:f2:aa:
aa:a0:63:f5:8e:80:88:bd:c7:d3:9c:5f:fd:ce:6a:9e:9f:18:
70:0e:23:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:10:39 2026 by rpki-client