Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: t3y83u4R1Su7VLvekMRZ7Z4N6huZIChaC1ThLzSZHko=
Subject key identifier: 44:5B:C7:33:9B:2E:C4:AF:3D:02:4A:9B:E8:65:0B:FA:5B:D1:9D:F6
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 01A0C6D7AD61A8C42C65191681069B70FCEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 176D
Signing time: Tue 22 Sep 2026 02:00:18 +0000
Manifest this update: Tue 22 Sep 2026 02:00:18 +0000
Manifest next update: Wed 23 Sep 2026 02:00:18 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: HZJvPEgqLV66Rhg82kPqoUazFTydCxGBiVKcpY31w9M=)
2: Rhq1sSRTv0uhjPvLHpvW3CtDGlE.roa (hash: UX/Nini/8UeNEyL2NxKXe/jqFkFeqxqH/DiIg76RiTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:ad:61:a8:c4:2c:65:19:16:81:06:9b:70:fc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: Sep 22 02:00:18 2026 GMT
Not After : Sep 23 02:00:18 2026 GMT
Subject: CN=445bc7339b2ec4af3d024a9be8650bfa5bd19df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:48:8c:8d:97:fa:1a:3d:09:b7:a7:99:7c:8a:
bd:d0:80:0e:4d:27:2d:48:16:7b:56:0e:d3:8c:19:
5b:8d:42:1f:21:dc:94:97:a7:8c:09:c8:01:4a:bb:
7f:41:fa:fc:83:87:3f:14:e6:d0:24:47:9f:e5:a1:
09:ef:38:4e:c9:b3:6e:81:70:9b:5d:b8:73:3c:f0:
7d:f3:a6:a8:5f:53:0f:2c:c8:44:8a:f2:1e:89:20:
53:94:b9:14:97:d3:ba:62:4e:05:34:a8:78:95:c6:
07:07:cb:99:2f:35:fe:aa:6d:0e:cd:67:8d:ed:38:
b8:87:60:bc:29:7d:14:ac:c7:e8:38:4e:d0:5c:04:
9a:51:b4:03:cb:f2:c3:01:21:db:1a:8c:6e:45:33:
c5:67:fe:99:53:fe:f8:7f:84:66:e2:aa:a0:63:ad:
f6:4c:68:84:81:bd:80:b8:fa:d5:6b:0f:7d:4b:77:
57:7b:07:a1:34:60:db:42:24:ec:f4:1c:24:f2:40:
c6:d7:2c:92:32:c4:17:6a:6e:09:93:83:72:14:8d:
2d:79:ba:ea:c0:24:51:56:49:cc:e1:1a:e5:49:cc:
80:3a:01:cc:60:6d:f8:0e:33:00:ac:cb:a6:fa:1a:
6b:5e:7d:b3:0e:b2:a6:b5:bd:35:6b:aa:a8:c1:26:
12:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5B:C7:33:9B:2E:C4:AF:3D:02:4A:9B:E8:65:0B:FA:5B:D1:9D:F6
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8c:e4:14:8d:9d:6c:ee:69:99:50:33:06:90:de:09:b1:3f:
9c:3d:4d:74:03:b4:40:78:48:0b:38:a8:a9:85:15:a9:50:d0:
a0:81:02:39:90:68:9c:69:09:7b:5a:60:92:de:90:b5:6c:d3:
19:55:75:c8:54:f5:6f:30:57:f6:87:3f:d1:bf:0b:2d:4a:67:
63:f0:66:ef:df:16:88:ec:c2:35:af:b2:0b:5c:8b:f9:42:96:
7e:ba:48:8f:ed:b0:b1:af:64:9a:de:df:b9:99:c5:5e:f0:8e:
46:41:fc:4a:23:9a:b8:e1:61:4f:62:8d:54:ab:5e:a8:ee:fd:
1c:54:2f:d5:2d:fc:ba:cf:c9:77:dd:c2:25:e7:ec:de:61:5f:
04:78:99:ea:91:1d:06:0b:92:57:c5:cb:5d:81:85:a4:aa:94:
2f:3c:7a:66:c6:05:fb:a2:38:b7:6a:4c:7a:cd:78:39:21:7f:
6e:15:bb:bf:37:df:39:49:7b:23:49:89:f2:39:2e:92:87:04:
1b:be:bb:96:eb:1c:0d:0b:66:90:ed:a0:28:4a:60:b8:7a:fb:
51:3b:d5:fa:50:f1:6e:22:20:05:89:36:62:6a:28:25:3e:7c:
e8:f7:65:69:d4:e4:af:f1:1d:ed:0e:14:7b:db:b9:2c:b3:81:
9c:75:fa:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:48:48 2026 by rpki-client