Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
File: AmEbTqouCzf3LMCKySlhmB6rsh8.mft (raw, json)
Hash identifier: MuxSTZPeExGGr4rBBmWFMerjlzonelCUOIfKFcf5VoI=
Subject key identifier: 17:5D:BF:E0:BA:B6:B7:5D:E0:52:3D:46:72:1A:62:F1:1E:C4:27:C0
Authority key identifier: 02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
Certificate issuer: /CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Certificate serial: 019FA9754734BB939539E1BF208EA8FA6A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
Manifest number: 1964
Signing time: Tue 28 Jul 2026 16:01:03 +0000
Manifest this update: Tue 28 Jul 2026 16:01:03 +0000
Manifest next update: Wed 29 Jul 2026 16:01:03 +0000
Files and hashes: 1: AmEbTqouCzf3LMCKySlhmB6rsh8.crl (hash: 3Vk2u6U0SMXxv6lw5YZijqtOjvOdxz8G03gGECFo7yI=)
2: PO0oGhcAcu4rnMxqB7i3EgHcfmk.roa (hash: TAhgr8iisePtAicuDOb6xnSpMggHAcTbal551KlXsKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:47:34:bb:93:95:39:e1:bf:20:8e:a8:fa:6a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Validity
Not Before: Jul 28 16:01:03 2026 GMT
Not After : Jul 29 16:01:03 2026 GMT
Subject: CN=175dbfe0bab6b75de0523d46721a62f11ec427c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0b:08:d3:59:00:2e:c2:2d:37:88:af:ce:c1:
f8:ed:95:66:4e:ac:ff:bb:5b:71:d0:9d:d9:65:28:
f6:f4:3d:56:de:a7:36:75:8e:91:07:2b:58:7a:dc:
0f:93:66:10:d0:d2:bc:e6:65:ad:70:90:c3:58:4a:
4f:7e:55:f4:d6:db:78:57:fe:bc:71:08:04:33:95:
bf:8b:0c:ea:8e:ce:3b:d8:dd:25:c7:18:88:76:2d:
91:8c:22:02:60:a9:cc:42:5a:26:63:03:63:2b:eb:
f9:7e:1a:35:43:82:87:c4:4d:f2:bb:9d:f0:2a:b3:
71:61:52:21:87:33:66:76:35:7b:bb:38:05:a6:a3:
37:62:0d:ce:35:22:ba:c5:78:2b:7b:61:c0:a9:a2:
a3:c8:e8:1c:3c:6c:c1:dc:0c:b1:32:db:11:1e:70:
20:2f:bf:90:6f:54:98:fb:b3:04:ba:ec:3f:7f:e6:
13:02:7c:99:56:51:ab:4f:9f:01:8e:6d:e8:cd:2e:
54:e7:6c:66:3a:01:5d:b3:6f:17:fb:44:7d:78:8f:
4c:56:30:df:16:dd:aa:6a:40:4f:71:5e:ef:07:fd:
fd:4e:af:e9:2c:60:a9:4c:64:18:eb:10:49:94:24:
54:5d:7a:74:9e:9b:28:89:89:37:1b:59:8c:63:59:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5D:BF:E0:BA:B6:B7:5D:E0:52:3D:46:72:1A:62:F1:1E:C4:27:C0
X509v3 Authority Key Identifier:
keyid:02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d6:94:14:2d:e0:05:c7:43:76:0e:a3:fa:1d:aa:04:98:ce:
0f:19:55:07:14:87:1e:f0:f4:93:47:d5:90:a5:8d:6a:75:7e:
45:14:d4:5c:02:35:38:e5:90:ce:d8:67:7e:93:57:f3:89:e9:
28:3d:6d:65:8c:23:e2:d8:59:48:e9:92:b5:c9:b7:49:6c:57:
11:df:8e:58:64:d1:6f:79:94:5d:db:c5:f2:34:ea:9f:e7:3e:
40:ea:10:88:52:d6:ff:4a:3e:35:1e:aa:f9:27:59:74:d2:37:
13:eb:55:0e:9a:57:b7:0c:16:d8:c4:bd:71:c3:5d:29:03:2a:
cd:56:fa:fc:42:f4:75:d4:7b:e4:cc:07:0a:a5:4c:f7:74:b8:
e5:fc:a7:f6:25:ca:26:bb:c9:67:27:36:e7:8c:8a:0a:02:e3:
50:4e:8a:f5:3f:05:92:b4:2d:fd:5c:53:db:90:e4:d5:38:c2:
04:dd:ea:27:70:72:b6:57:73:5a:0b:51:f4:e2:3e:48:88:e5:
86:bc:4a:70:2c:8f:de:cc:61:46:90:06:ed:76:a1:a1:c5:dc:
c9:78:f4:64:a8:de:c5:5a:35:60:14:1d:65:c8:40:12:d7:60:
85:28:75:8e:91:a0:b8:26:a5:84:a2:5d:89:b7:50:14:cc:c2:
b4:96:67:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:18:37 2026 by rpki-client