Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
File: am_dL9Qvq_hycglSRo0pY0xoydw.mft (raw, json)
Hash identifier: jmZd7z3xFUVlcwOmAy1M9S7IIVG0/FooMdsOxRAIhvs=
Subject key identifier: D0:70:E3:56:D3:D5:0D:3B:96:6E:21:66:ED:29:7C:32:84:14:E4:B6
Authority key identifier: 6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
Certificate issuer: /CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Certificate serial: 019CABA2344C3C10A5C461DD18E0B8AED390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
Manifest number: 0BAA
Signing time: Sun 01 Mar 2026 23:01:00 +0000
Manifest this update: Sun 01 Mar 2026 23:01:00 +0000
Manifest next update: Mon 02 Mar 2026 23:01:00 +0000
Files and hashes: 1: CxN7huJiaKTfbN61kn_Ws0rde3s.roa (hash: mJe0ydmDBggkld0RLjkFJN+3gsiDt8X95dpMffB1Pek=)
2: GLQLUgepyCnC830dR-Mhxz1aKnE.roa (hash: COa6OVZL38VvIej39q7ojfibMnWwOKcdA2nZbsEdfHY=)
3: am_dL9Qvq_hycglSRo0pY0xoydw.crl (hash: g46VPiZgLLitfXTYchd4XQKqHCBm+CGicUVtt5nt2uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:34:4c:3c:10:a5:c4:61:dd:18:e0:b8:ae:d3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Validity
Not Before: Mar 1 23:01:00 2026 GMT
Not After : Mar 2 23:01:00 2026 GMT
Subject: CN=d070e356d3d50d3b966e2166ed297c328414e4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:a3:f2:c5:21:4e:21:8a:fc:a7:13:32:c3:
0e:af:43:2e:1c:ab:a9:d4:06:0e:a8:5f:7d:4c:c1:
5b:e3:0f:e5:60:47:58:55:eb:e6:9d:b3:7a:c0:9d:
cd:f5:c7:e4:f9:b2:f5:34:65:f9:e8:d0:0c:c2:50:
8e:5a:ac:76:67:6d:51:9b:3f:69:5c:1c:be:b2:01:
4f:df:1d:37:d7:8d:ba:33:c3:75:00:3e:fb:e1:a3:
38:e6:c6:de:dc:ab:94:80:11:45:41:fb:2d:59:18:
e3:6d:3f:07:ba:11:c1:c1:bb:a0:3c:f8:a1:42:45:
36:8e:47:86:15:28:25:4b:c0:f0:50:c4:ad:d7:b5:
47:02:ed:79:f7:76:8c:61:5f:61:71:3c:e7:09:3e:
a5:16:87:99:88:7d:28:fd:ff:7b:40:b5:c8:c4:c9:
6d:4a:c2:f2:8a:eb:97:10:19:af:5d:54:b1:d2:04:
64:84:25:16:8f:6e:f5:27:07:71:e3:e8:8b:bb:f0:
ad:2a:1a:ec:6f:f2:a7:c1:48:51:5c:66:d3:33:46:
2e:63:10:a8:0e:51:cb:97:9d:a6:c1:3f:20:01:55:
42:ce:99:c1:f7:b9:97:7f:6c:74:50:b8:fc:07:c4:
e1:b0:c0:5a:d7:7b:8e:9f:0f:b0:93:72:3c:a5:80:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:70:E3:56:D3:D5:0D:3B:96:6E:21:66:ED:29:7C:32:84:14:E4:B6
X509v3 Authority Key Identifier:
keyid:6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d4:05:c1:fc:09:5e:b4:d2:12:1a:79:87:fd:00:97:e0:dd:
f4:65:5a:95:c6:dd:e2:37:0e:25:a2:57:19:a2:23:95:a4:db:
d6:ed:17:38:42:d8:aa:21:8c:40:b2:1a:10:c6:3c:3a:65:46:
78:4b:c6:31:cb:6a:ff:94:8a:83:e3:e6:6d:74:54:2f:68:d2:
4f:67:b3:5d:ac:b3:95:47:0d:ec:2e:d8:ad:a7:b0:70:fd:3c:
4d:3f:23:75:39:75:72:ee:04:d9:fa:10:e8:82:c1:87:d4:e9:
12:0c:e9:9f:9e:de:b3:b5:63:7b:f8:5b:33:15:a7:52:fc:87:
25:0e:4f:3a:3f:94:9d:25:aa:27:8e:56:30:50:bc:be:f8:d9:
53:95:88:37:fc:d1:a5:f3:25:50:cc:e5:8d:34:cc:ce:fa:14:
d0:39:3c:e4:ce:87:21:db:f4:31:ab:46:9f:c3:87:a2:53:2e:
c0:0b:55:92:bf:87:b8:de:9c:c9:27:2b:cd:46:0c:9c:c3:a9:
09:d7:af:0a:2b:a4:2f:fd:04:17:f3:dc:a9:43:5f:59:9f:e4:
53:55:21:31:e1:1a:6f:69:6c:10:42:26:dc:4c:a7:cb:be:7f:
33:f5:2d:50:f1:0f:ec:6c:ce:15:db:5c:9d:b7:46:61:87:45:
ee:37:31:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrojRMPBClxGHdGOC4rtOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNmZkZDJmZDQyZmFiZjg3MjcyMDk1MjQ2OGQyOTYzNGM2
OGM5ZGMwHhcNMjYwMzAxMjMwMTAwWhcNMjYwMzAyMjMwMTAwWjAzMTEwLwYDVQQD
EyhkMDcwZTM1NmQzZDUwZDNiOTY2ZTIxNjZlZDI5N2MzMjg0MTRlNGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Cj8sUhTiGK/KcTMsMOr0MuHKup
1AYOqF99TMFb4w/lYEdYVevmnbN6wJ3N9cfk+bL1NGX56NAMwlCOWqx2Z21Rmz9p
XBy+sgFP3x031426M8N1AD774aM45sbe3KuUgBFFQfstWRjjbT8HuhHBwbugPPih
QkU2jkeGFSglS8DwUMSt17VHAu1593aMYV9hcTznCT6lFoeZiH0o/f97QLXIxMlt
SsLyiuuXEBmvXVSx0gRkhCUWj271Jwdx4+iLu/CtKhrsb/KnwUhRXGbTM0YuYxCo
DlHLl52mwT8gAVVCzpnB97mXf2x0ULj8B8ThsMBa13uOnw+wk3I8pYAJ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBw41bT1Q07lm4hZu0pfDKEFOS2MB8GA1UdIwQY
MBaAFGpv3S/UL6v4cnIJUkaNKWNMaMncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW1fZEw5UXZxX2h5Y2dsU1JvMHBZMHhveWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kNWNjNGEtZDI2Ni00MGU2LTg4Zjkt
ZDkxNDg0ZWIwYzM4LzEvYW1fZEw5UXZxX2h5Y2dsU1JvMHBZMHhveWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kNWNjNGEtZDI2Ni00MGU2LTg4ZjktZDkxNDg0ZWIwYzM4
LzEvYW1fZEw5UXZxX2h5Y2dsU1JvMHBZMHhveWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdQFwfwJ
XrTSEhp5h/0Al+Dd9GValcbd4jcOJaJXGaIjlaTb1u0XOELYqiGMQLIaEMY8OmVG
eEvGMctq/5SKg+PmbXRUL2jST2ezXayzlUcN7C7YraewcP08TT8jdTl1cu4E2foQ
6ILBh9TpEgzpn57es7Vje/hbMxWnUvyHJQ5POj+UnSWqJ45WMFC8vvjZU5WIN/zR
pfMlUMzljTTMzvoU0Dk85M6HIdv0MatGn8OHolMuwAtVkr+HuN6cyScrzUYMnMOp
CdevCiukL/0EF/PcqUNfWZ/kU1UhMeEab2lsEEIm3Eyny75/M/UtUPEP7GzOFdtc
nbdGYYdF7jcxhA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:43 2026 by rpki-client