Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier: uEmCyHpA+R3SruzI6ww4ZGtwjmsmBcoW4KYc1XaxlFc=
Subject key identifier: 44:0B:A5:72:B0:FF:8D:65:71:A0:5D:B3:FE:D2:05:BF:63:40:DA:E6
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial: 019F189E114B5DE187BE11FDAD8CD7F53793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number: 0EB9
Signing time: Tue 30 Jun 2026 13:00:39 +0000
Manifest this update: Tue 30 Jun 2026 13:00:39 +0000
Manifest next update: Wed 01 Jul 2026 13:00:39 +0000
Files and hashes: 1: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: Js4lkocCtAq1BBC9cB80Hb+nwIXU6JHzOl7A03Tx0Us=)
2: L81FjA0HBR4C3VRXIdzV9aijlDs.roa (hash: l6by3JK81dcZtTI2EAV3D8+hWiL6wJ47qGTRoCR1Fpc=)
3: Tb3ZP8jCF88QUUjfET9_-Hcpu9M.roa (hash: iQIVqlpU95wZ1Y2M7mnw2rHSBBZvM/n/nZYpuMemFV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:11:4b:5d:e1:87:be:11:fd:ad:8c:d7:f5:37:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Validity
Not Before: Jun 30 13:00:39 2026 GMT
Not After : Jul 1 13:00:39 2026 GMT
Subject: CN=440ba572b0ff8d6571a05db3fed205bf6340dae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:8a:ac:e2:c2:37:9f:eb:1b:eb:4c:60:a1:
9c:be:50:75:fb:49:a5:c7:e0:4c:61:15:9b:99:ed:
80:77:4c:d9:e6:4b:c4:b6:25:1a:12:a8:2f:0d:e2:
14:d5:58:78:6d:f7:2f:8d:87:4f:4f:d7:75:ad:c3:
e0:c8:8c:cd:f7:28:01:24:82:1e:b9:26:f6:dd:64:
e5:8c:bc:b4:02:b8:a4:5e:05:3a:9b:65:56:80:f2:
78:00:45:bb:48:7e:ea:94:33:d3:47:1c:00:44:5c:
0b:de:5e:43:71:6b:1c:1e:21:ef:8f:d4:e1:99:5d:
59:52:b3:d5:88:f9:b0:30:40:cd:ea:40:58:b0:e3:
1a:31:c1:15:81:93:2e:8e:ae:80:ee:71:85:66:4d:
9d:5f:57:66:9e:2e:2c:b9:ee:08:cf:11:4f:9f:6e:
c8:0a:af:9f:2c:a8:d0:2f:3a:8b:3e:cc:08:c4:0e:
1d:bc:92:5e:95:45:4d:63:7d:f2:6a:4b:2a:e6:d5:
17:9e:7c:b9:5f:d3:ff:3e:d0:ba:16:99:d5:f0:de:
12:04:97:2e:7d:06:bd:3e:b1:ac:66:70:73:6e:67:
30:66:4f:01:ca:ba:64:3f:b3:aa:1d:78:98:90:04:
54:ef:a3:87:93:e3:e5:d5:39:d4:6b:c3:45:fa:05:
1c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0B:A5:72:B0:FF:8D:65:71:A0:5D:B3:FE:D2:05:BF:63:40:DA:E6
X509v3 Authority Key Identifier:
keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:74:6d:26:44:a4:19:93:34:c4:e1:69:22:12:32:1b:bf:d1:
b5:a4:6a:6c:48:20:b2:94:ba:77:f5:d5:27:6b:9b:1c:93:50:
5c:ed:8d:8f:b1:77:60:01:4b:ae:28:87:f4:fb:fb:81:9c:a1:
d1:2b:3a:c4:1f:f1:f2:2d:36:0f:46:e8:ed:f1:2d:8c:42:c3:
0b:fb:2d:c3:b9:8b:b1:03:6a:c2:35:8e:dd:13:e5:f1:9f:9d:
78:88:b1:bb:30:18:87:90:75:f9:9f:3d:bc:f1:5f:b5:3d:ef:
75:d7:d9:0e:9f:73:f9:d2:3d:59:08:54:60:b6:ae:4e:80:1e:
02:dc:3b:6c:09:ad:40:fb:39:43:b6:dc:a6:2d:3b:ed:dd:a0:
86:7f:20:1b:f9:61:79:cd:3f:8c:ea:e6:12:18:21:bd:33:6b:
88:44:3f:b5:25:3f:13:af:3b:c7:ed:8e:19:34:34:7f:41:ef:
e9:a5:10:53:d5:b9:74:d3:a9:f2:48:0c:8c:f1:04:57:b1:98:
b5:c5:21:80:b2:78:a5:64:57:78:7f:9c:8e:05:c7:14:e4:de:
fd:02:8e:35:a2:bc:45:0d:4f:40:b2:2a:99:f5:e5:de:e5:67:
6d:72:db:47:10:3e:04:18:5c:40:c2:ca:37:73:b4:4a:d0:0e:
aa:e5:22:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:30 2026 by rpki-client