Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier: qIJ1ipvw6wjAfdkgUPMOh+ZK4YUC8TEnPEgLffvgDns=
Subject key identifier: 8C:C7:8B:93:6E:09:39:5C:31:1F:97:84:44:EF:2A:86:40:BD:A2:6A
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial: 019D37C02110CCDC95D92FEE770286B3C6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number: 0DC0
Signing time: Sun 29 Mar 2026 04:00:31 +0000
Manifest this update: Sun 29 Mar 2026 04:00:31 +0000
Manifest next update: Mon 30 Mar 2026 04:00:31 +0000
Files and hashes: 1: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: +2bpsGUPzuLhPvY2WPQyUQnQ5keIbOifuH0QntX8fi8=)
2: L81FjA0HBR4C3VRXIdzV9aijlDs.roa (hash: l6by3JK81dcZtTI2EAV3D8+hWiL6wJ47qGTRoCR1Fpc=)
3: Tb3ZP8jCF88QUUjfET9_-Hcpu9M.roa (hash: iQIVqlpU95wZ1Y2M7mnw2rHSBBZvM/n/nZYpuMemFV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:21:10:cc:dc:95:d9:2f:ee:77:02:86:b3:c6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Validity
Not Before: Mar 29 04:00:31 2026 GMT
Not After : Mar 30 04:00:31 2026 GMT
Subject: CN=8cc78b936e09395c311f978444ef2a8640bda26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:20:e0:17:8b:24:1f:11:09:12:d1:d8:43:
dc:56:02:6a:e0:d6:71:a1:fe:e3:7f:02:21:56:c0:
0b:18:a0:43:e0:2d:64:d0:5b:33:ec:10:07:01:c3:
9f:46:ba:1c:c5:bd:2f:b9:e4:40:33:58:f0:fa:a9:
b3:e2:cc:02:32:a4:4b:3f:5a:9a:0c:35:3d:bd:06:
6d:9b:9e:36:f3:49:95:93:54:fc:c8:f8:63:be:d6:
48:7d:07:50:fc:a2:d6:01:d0:38:77:b2:5d:55:a1:
7f:fa:59:ad:04:e8:9c:68:5f:29:0e:b7:b2:14:2a:
6e:61:f6:2d:45:24:29:a6:60:07:6d:4a:c8:bc:e0:
19:03:cc:9d:89:59:c0:b4:e1:e2:e6:3c:d2:37:36:
69:87:4d:29:f8:cb:bb:6b:fb:22:94:55:0a:dd:64:
14:76:a9:46:e7:fb:1a:d6:54:03:99:24:a6:73:44:
b3:ff:aa:0d:d6:10:6d:ab:c5:c3:c3:0a:70:12:8a:
96:2e:56:fe:10:5b:8e:fc:48:e3:93:84:3a:4d:7f:
2e:72:43:c3:0b:f3:b6:78:49:86:99:28:1d:10:f3:
8c:82:e6:32:fc:6f:6b:f8:31:d3:39:88:57:83:14:
d0:b8:02:97:00:e3:2f:32:a8:5b:f3:3b:24:bb:07:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C7:8B:93:6E:09:39:5C:31:1F:97:84:44:EF:2A:86:40:BD:A2:6A
X509v3 Authority Key Identifier:
keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:05:99:e7:13:68:ce:32:e8:a9:a2:fe:7e:97:ff:81:16:fd:
68:95:98:5a:0e:43:cf:86:18:ab:87:de:39:2c:bd:5d:3f:34:
79:4e:55:9f:34:50:04:45:83:04:d6:6d:86:66:c3:0b:97:e7:
6e:0a:db:f3:48:d5:aa:19:1b:31:fb:58:37:69:96:88:0d:50:
dc:5c:6a:5e:4b:16:71:b4:5e:21:87:e8:4e:0e:5b:77:a4:2f:
d8:72:58:6b:c3:31:99:c7:5b:90:31:d8:7f:11:2b:05:15:bd:
a5:9b:64:21:7b:e4:28:72:c2:ef:56:16:99:b3:93:d3:71:ec:
6d:2e:5c:0c:df:a3:43:7f:ad:9b:71:a6:5d:b1:52:04:44:d4:
c8:f6:c0:b6:70:74:dc:b1:15:43:53:9f:1b:c8:da:0d:d6:8c:
42:15:16:4a:82:1b:ca:a1:53:91:5d:93:7c:5c:a1:da:a0:0d:
db:33:d2:c8:ed:01:58:d3:22:ae:31:fa:4b:73:d1:f9:42:a3:
c8:f1:66:b2:da:85:a9:8d:28:7f:27:1b:b2:86:07:78:59:e3:
d9:44:9c:d1:30:73:1a:8f:e2:03:9d:14:5a:08:87:5f:ee:c2:
87:fa:e2:87:ee:ec:23:3b:39:3c:cd:3b:de:58:17:34:d4:2e:
db:7c:8e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:13 2026 by rpki-client