Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
File: AmEbTqouCzf3LMCKySlhmB6rsh8.mft (raw, json)
Hash identifier: o7PJIiJdOrKHt0TPw7AW4wm3PC+DfhpPjriN9gx5ji0=
Subject key identifier: DC:25:35:6D:79:AC:8B:57:1A:5E:28:07:4D:B4:6A:C1:6D:3B:F0:A5
Authority key identifier: 02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
Certificate issuer: /CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Certificate serial: 019CAAC6FAC990E5DB151A0204B2E35AC8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
Manifest number: 17D7
Signing time: Sun 01 Mar 2026 19:01:32 +0000
Manifest this update: Sun 01 Mar 2026 19:01:32 +0000
Manifest next update: Mon 02 Mar 2026 19:01:32 +0000
Files and hashes: 1: AmEbTqouCzf3LMCKySlhmB6rsh8.crl (hash: 1x+7bAy+hpLI9y1sizAfUFO1kkGzynsFvUZDIovpRXk=)
2: PO0oGhcAcu4rnMxqB7i3EgHcfmk.roa (hash: TAhgr8iisePtAicuDOb6xnSpMggHAcTbal551KlXsKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:fa:c9:90:e5:db:15:1a:02:04:b2:e3:5a:c8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Validity
Not Before: Mar 1 19:01:32 2026 GMT
Not After : Mar 2 19:01:32 2026 GMT
Subject: CN=dc25356d79ac8b571a5e28074db46ac16d3bf0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:cc:dd:10:11:3a:6f:12:f8:a3:6c:ef:56:
0b:ab:19:d2:e6:ba:0e:6c:fd:b9:86:06:f4:18:ed:
34:89:bc:68:5e:30:b2:c4:4d:d8:57:ad:f2:38:60:
11:93:b6:6b:96:63:34:ac:56:1a:25:96:99:a8:54:
2a:d3:a6:32:87:53:9b:92:0e:e8:d8:00:c7:bb:e9:
20:7b:68:15:8e:0b:74:81:92:02:93:ac:e7:e3:c0:
68:2c:c8:e3:30:c1:ff:2f:a1:1d:fd:cd:71:e5:f9:
44:af:a3:e9:93:48:69:b2:e4:29:ae:84:2a:b9:a2:
9b:02:e4:82:5f:a4:e6:b5:55:41:91:1f:13:0a:78:
05:c8:9f:54:fd:d4:60:64:7e:ba:35:36:b2:14:29:
fd:7a:0c:ed:63:d5:dc:60:6e:6d:cb:17:9a:8e:c5:
64:2d:54:9d:04:fe:55:6f:96:73:e3:b6:ba:37:1d:
b4:13:dc:91:3e:88:5f:78:5b:b4:c3:2c:4f:5e:7a:
55:61:3f:b4:30:b5:4a:bc:c7:3c:14:80:08:bf:ee:
78:b6:f8:9f:9e:fd:c5:1e:aa:dd:85:0c:02:1c:9f:
1f:37:d1:4a:1d:95:3f:90:c9:a1:5b:93:9d:d5:cc:
ac:da:ed:f2:76:f6:0a:be:2c:68:89:ff:26:f6:ca:
88:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:25:35:6D:79:AC:8B:57:1A:5E:28:07:4D:B4:6A:C1:6D:3B:F0:A5
X509v3 Authority Key Identifier:
keyid:02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:49:34:72:68:81:09:20:d8:b8:ea:2f:03:56:2a:02:de:62:
0e:72:3f:1b:bc:92:0a:00:16:af:a2:62:a6:26:7d:22:32:f2:
f5:60:c4:10:7e:75:45:df:2b:90:1e:e6:45:82:55:2d:49:8a:
28:06:c5:31:ad:00:6c:44:96:59:19:f8:f2:20:f7:9e:49:e3:
2c:b7:c3:8b:27:40:71:dc:e1:22:ab:96:ca:d0:3b:59:df:cd:
41:d0:f1:c9:55:90:e9:ea:aa:ce:7b:61:9d:f8:0d:71:bb:7d:
b5:df:63:d5:13:29:23:28:2d:af:b9:29:6f:a9:85:25:fc:da:
84:79:a9:71:34:e3:ad:aa:72:a1:a9:1c:a5:d2:43:14:7f:b6:
81:df:db:d1:6d:57:d4:5a:bb:7e:de:89:4c:06:b4:09:28:b9:
a6:d2:63:3e:75:97:e0:70:82:ae:ee:74:db:2e:ea:65:0a:3c:
70:28:c6:8f:68:db:4b:dc:65:48:df:8f:7d:6f:78:9e:70:db:
3a:ef:4a:64:bd:dd:44:2e:43:c9:21:d2:f1:b7:e6:4e:48:5d:
27:1b:a3:92:3a:59:df:fb:cd:a8:35:3a:ec:5c:97:37:fe:52:
60:83:d4:d0:cb:a1:62:2d:c9:17:77:c7:bf:b3:98:77:e2:57:
42:e4:de:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:48 2026 by rpki-client