Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.mft
File: sAm-idR1R1b5z954-sGjYnrAyBc.mft (raw, json)
Hash identifier: 0MZudPjlW3lTI7rtxPlWGbjr+FrUeQMajYRksOGZ1tg=
Subject key identifier: 9E:F9:6A:A4:8D:04:9A:66:16:2E:A1:39:0B:30:11:74:AB:6B:85:1C
Authority key identifier: B0:09:BE:89:D4:75:47:56:F9:CF:DE:78:FA:C1:A3:62:7A:C0:C8:17
Certificate issuer: /CN=b009be89d4754756f9cfde78fac1a3627ac0c817
Certificate serial: 01A0C85861BCBF4C67A1044020AD50AE0E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAm-idR1R1b5z954-sGjYnrAyBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:30 +0000
Manifest this update: Tue 22 Sep 2026 09:00:30 +0000
Manifest next update: Wed 23 Sep 2026 09:00:30 +0000
Files and hashes: 1: TKICB8YOdD6bdiIav5yEIcN-jFE.roa (hash: g+d7zzQluUE41eE7PBez/FLekTdLQ2Gdgu4OxTMnlfU=)
2: sAm-idR1R1b5z954-sGjYnrAyBc.crl (hash: Rwd3lPMw556yF/fjIXVMSQXr2uJDCHUQTZ1IU4nsXTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAm-idR1R1b5z954-sGjYnrAyBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:61:bc:bf:4c:67:a1:04:40:20:ad:50:ae:0e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b009be89d4754756f9cfde78fac1a3627ac0c817
Validity
Not Before: Sep 22 09:00:30 2026 GMT
Not After : Sep 23 09:00:30 2026 GMT
Subject: CN=9ef96aa48d049a66162ea1390b301174ab6b851c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:c0:82:b7:4e:0a:e3:9c:a4:29:db:89:f9:
60:50:17:30:d5:a5:ae:58:21:89:f8:26:db:98:04:
0b:68:86:4b:23:b0:70:46:64:01:c0:8d:4f:96:c8:
d1:6f:e2:e7:7c:24:0e:0e:d7:d3:fc:f5:dd:54:5d:
df:c2:14:fe:60:71:ba:c4:33:2a:78:d1:17:95:43:
44:ab:76:fb:5d:fb:61:75:ba:e9:b6:54:3a:ea:7a:
31:61:8e:33:aa:9b:bd:d6:15:13:b3:dd:31:e2:55:
22:bf:e7:74:f0:ec:e9:9d:79:be:81:b2:cb:e2:70:
06:21:d1:dc:1e:e4:34:51:66:65:70:63:0d:52:77:
cf:cb:6a:62:e8:18:96:57:1c:59:2d:74:54:cd:d9:
fa:67:d8:9c:0d:1e:17:bd:9b:15:9c:91:3c:89:d9:
65:05:1c:7a:2a:7a:50:c5:93:51:3e:97:d0:c6:e1:
ca:bd:dc:6e:bb:69:44:1f:a6:70:98:46:bf:e0:5b:
c4:da:15:76:c9:cc:8b:4d:24:d3:d3:b2:4b:92:63:
3c:40:59:22:34:04:40:11:d1:5a:5e:c6:53:32:73:
62:c7:d1:6f:a3:31:e5:53:ac:d1:7d:78:b8:d5:c1:
43:f2:44:01:40:ff:46:46:ab:a8:35:b0:d3:cf:30:
fa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F9:6A:A4:8D:04:9A:66:16:2E:A1:39:0B:30:11:74:AB:6B:85:1C
X509v3 Authority Key Identifier:
keyid:B0:09:BE:89:D4:75:47:56:F9:CF:DE:78:FA:C1:A3:62:7A:C0:C8:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAm-idR1R1b5z954-sGjYnrAyBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:20:26:fc:eb:f7:9a:89:ea:a9:ff:4b:46:24:76:c1:76:ea:
8b:39:64:cb:56:68:a3:3b:1f:24:b9:9f:fd:a7:5f:c2:92:d5:
69:e9:7a:2d:0b:7d:b4:3e:d0:56:23:a4:c4:dd:02:bc:20:1e:
7c:72:a4:57:dc:cf:f3:53:6c:ee:ed:6c:25:c3:d4:4d:7b:8c:
ab:85:71:0a:b7:f2:11:13:40:34:02:d5:1f:d9:0f:d1:1c:a9:
3c:80:f5:55:7d:80:7a:2b:f4:9d:c3:c7:53:92:62:32:cf:88:
fc:a9:61:2a:93:61:0a:b0:3a:71:38:d8:d3:87:73:34:63:52:
e1:5e:eb:18:72:8c:f8:3e:a2:14:de:fa:46:36:6e:42:48:c1:
05:3d:d4:dc:df:49:71:1b:73:e4:e3:b9:13:f5:9a:c5:0e:3c:
bc:56:28:08:66:89:e9:4e:85:78:f8:0a:68:79:39:14:7d:3b:
3b:9a:7e:d5:36:9b:83:79:a4:69:8a:25:a6:20:66:8c:9d:26:
0e:1a:a0:ea:4a:61:39:9c:1b:8b:8a:a5:76:1b:1a:75:97:67:
1d:6c:42:4d:46:18:86:3d:31:2c:93:5f:41:99:32:c9:05:a8:
b2:66:40:8a:13:65:c2:8e:1a:03:41:f3:13:3f:4d:0e:3a:98:
73:3b:ef:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:35:55 2026 by rpki-client