Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
File: AmEbTqouCzf3LMCKySlhmB6rsh8.mft (raw, json)
Hash identifier: SYVZKO/BVtQonSbTBKebMscQolZI1Cg9VJtmFAJ7Nu0=
Subject key identifier: D0:5D:7A:50:78:71:B9:75:70:22:CB:72:32:10:CF:50:48:AD:5B:74
Authority key identifier: 02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
Certificate issuer: /CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Certificate serial: 019D984FB9C73E3AEF32BAC2D118B081BE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
Manifest number: 1852
Signing time: Thu 16 Apr 2026 22:00:54 +0000
Manifest this update: Thu 16 Apr 2026 22:00:54 +0000
Manifest next update: Fri 17 Apr 2026 22:00:54 +0000
Files and hashes: 1: AmEbTqouCzf3LMCKySlhmB6rsh8.crl (hash: KX5u0x/I+Utbjvlm2n/1qgGAGqnRcUEeOoDgD8cRUjo=)
2: PO0oGhcAcu4rnMxqB7i3EgHcfmk.roa (hash: TAhgr8iisePtAicuDOb6xnSpMggHAcTbal551KlXsKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b9:c7:3e:3a:ef:32:ba:c2:d1:18:b0:81:be:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Validity
Not Before: Apr 16 22:00:54 2026 GMT
Not After : Apr 17 22:00:54 2026 GMT
Subject: CN=d05d7a507871b9757022cb723210cf5048ad5b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:97:f7:de:c5:78:9a:b2:cd:44:bd:1e:bb:ef:
8c:64:d7:74:9b:56:bb:10:1e:70:77:58:c0:c0:74:
4f:96:30:14:e4:ea:81:46:da:1f:b8:ff:0f:3c:02:
f1:05:70:20:6a:58:f7:16:35:35:d5:d2:50:90:27:
54:48:f6:ed:bc:ea:1d:16:c3:4c:bd:f9:c5:8d:57:
c9:db:93:b4:b8:0a:4a:83:0d:e1:85:29:f2:4e:2e:
3c:04:7b:35:9f:22:8e:d5:3a:db:f6:1c:99:98:0f:
73:49:ed:a4:ac:42:42:31:b4:aa:4b:62:f6:31:ff:
55:74:55:32:ec:d7:dd:8d:41:21:fe:dd:27:5f:31:
ec:09:66:a7:16:19:ce:0f:2d:5b:e4:ec:00:b2:2c:
8d:c5:33:5d:66:13:39:d7:1a:3f:c5:53:d8:e8:de:
14:71:ab:5e:69:28:11:4b:8c:19:71:1b:ce:b9:98:
4a:71:5e:a6:55:2f:9b:ae:60:3d:ff:b3:87:6c:b4:
76:26:e9:de:10:78:4a:7c:aa:b3:40:04:3e:64:63:
d9:c6:d3:20:ef:d0:b3:5d:2c:5d:91:aa:f2:90:39:
69:68:9d:12:85:1f:4e:be:8f:f5:da:f8:af:12:c0:
26:02:0d:c9:98:2a:2b:68:ca:85:e0:16:c1:5e:b1:
c1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5D:7A:50:78:71:B9:75:70:22:CB:72:32:10:CF:50:48:AD:5B:74
X509v3 Authority Key Identifier:
keyid:02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:63:4f:8a:8c:b8:e9:e9:21:1e:e5:eb:6b:92:25:a6:a7:07:
8f:a2:12:17:25:5f:65:24:38:2a:ec:ab:43:24:fc:8d:01:b4:
79:db:f9:da:ec:71:c3:ba:83:39:2d:e4:37:5f:77:6d:c6:34:
48:f4:b8:ab:cc:14:c3:f8:a4:ea:d8:c1:e9:9a:9f:24:49:66:
0e:f2:f7:27:10:82:cf:f6:99:50:af:9b:54:b7:c9:f9:bf:8a:
81:14:14:d2:1f:8e:bc:0d:bc:dd:36:6d:21:1a:97:f3:50:7b:
99:b5:d8:54:a7:34:9c:f0:ea:30:07:61:62:3e:2c:39:54:3a:
d7:2a:9a:f4:01:3a:f2:27:e0:ea:98:4b:60:20:fd:d5:11:16:
ce:a6:6c:9f:85:fa:2b:35:f5:03:dc:e9:94:6e:a7:14:fb:f3:
0f:f1:d1:43:f4:fe:b3:ad:00:69:71:f8:53:62:6a:5f:93:bf:
1b:ce:92:04:aa:95:9c:a5:2e:01:95:c1:1b:ac:3a:5e:e9:6e:
56:74:e7:18:fb:0c:d4:ec:69:11:bf:da:3a:52:69:ed:cd:a0:
2a:b8:30:a5:68:52:b5:c7:5d:60:a9:18:75:55:fc:fa:62:14:
56:89:81:ce:2f:3c:02:f3:29:4e:28:2e:ad:54:26:38:82:0c:
b8:6e:13:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:39 2026 by rpki-client