Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier: AQm5XEdk31WYy4c2AXjNa6WyVpkxd/cmuvUBwVjtsjA=
Subject key identifier: 3F:6D:71:49:42:E6:1E:80:C7:72:79:FC:47:96:74:B9:F2:D8:06:83
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial: 01A13F02D726D0E1BCC9EFBA29CFF4414C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number: 0FD6
Signing time: Thu 15 Oct 2026 10:01:53 +0000
Manifest this update: Thu 15 Oct 2026 10:01:53 +0000
Manifest next update: Fri 16 Oct 2026 10:01:53 +0000
Files and hashes: 1: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: ouF6FpyX5g/V1hkpsmRvaH+Y8pjnkMAjwTcx9NeMVuk=)
2: L81FjA0HBR4C3VRXIdzV9aijlDs.roa (hash: l6by3JK81dcZtTI2EAV3D8+hWiL6wJ47qGTRoCR1Fpc=)
3: Tb3ZP8jCF88QUUjfET9_-Hcpu9M.roa (hash: iQIVqlpU95wZ1Y2M7mnw2rHSBBZvM/n/nZYpuMemFV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:d7:26:d0:e1:bc:c9:ef:ba:29:cf:f4:41:4c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Validity
Not Before: Oct 15 10:01:53 2026 GMT
Not After : Oct 16 10:01:53 2026 GMT
Subject: CN=3f6d714942e61e80c77279fc479674b9f2d80683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:92:f2:66:54:6f:92:be:90:a8:07:6d:10:
d9:35:72:ac:5e:75:5a:ac:24:45:c3:a4:db:cd:b4:
11:3e:83:e1:0f:0c:a5:23:55:99:62:5d:46:f4:10:
64:67:51:b8:9a:84:36:54:30:ed:d5:e2:7e:e9:be:
ea:0d:2a:9b:d6:33:61:2f:ad:df:86:9f:12:91:04:
56:39:70:ef:68:bd:a8:4c:50:15:e4:3d:88:8b:da:
12:3e:24:67:5d:bd:e7:c7:eb:a7:a9:73:e2:1e:6f:
71:3e:64:d3:9d:61:4d:46:3f:2c:c2:ab:90:03:e7:
c6:52:c7:b5:a6:48:d9:27:8a:ab:87:68:49:c9:1b:
4e:af:76:d1:df:81:cf:8f:b5:06:21:a4:0f:f8:ed:
c7:bb:f6:d9:8c:14:ab:2f:e3:67:55:df:1d:9e:e9:
71:f8:34:30:d2:9a:ce:a0:18:bf:ae:42:69:63:34:
47:a0:72:50:f5:7a:a4:af:38:b8:87:f9:1d:2e:79:
d5:9b:0b:9a:2a:1e:bd:13:6a:7e:a9:37:a6:6d:f2:
b1:2c:83:f3:b8:04:a3:c0:b9:ea:2f:ec:60:6c:3d:
03:36:c3:3a:b5:43:4d:f0:dc:d2:79:7b:ab:28:11:
5c:c7:6d:23:fb:3f:2c:72:a2:b3:08:8c:42:28:6a:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6D:71:49:42:E6:1E:80:C7:72:79:FC:47:96:74:B9:F2:D8:06:83
X509v3 Authority Key Identifier:
keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e3:52:02:5b:79:93:c9:ff:dd:62:de:45:70:ec:7a:ea:a4:
bf:2e:17:37:e1:44:79:e5:21:a3:f0:a9:47:33:df:e1:c6:5e:
ef:4a:eb:f5:30:02:e3:00:2c:8b:27:96:f4:87:5c:26:78:0e:
41:b8:ed:95:dc:bb:e3:18:6c:b3:b8:a5:1a:cc:e1:92:95:9e:
8e:d9:3a:2e:f1:2a:98:be:0a:e3:cd:d4:88:5d:32:0f:b9:b2:
98:19:29:d5:25:39:3d:49:5c:eb:7e:bd:5c:75:21:36:83:b3:
ca:ba:93:c9:e0:22:7d:29:62:89:57:0c:94:4a:4c:34:70:a3:
ae:0e:be:15:08:86:35:ca:d5:69:e8:02:3a:c7:06:14:ce:45:
ee:3b:7e:2c:43:4e:31:34:e6:ca:5b:f3:b2:07:1e:db:28:c1:
b4:dc:e6:4c:fa:a2:43:d9:e4:61:b9:5d:62:59:e9:78:07:74:
7a:c3:e3:f1:f0:73:04:ca:f1:4c:ba:8e:e1:d6:d0:14:ed:4b:
b8:7e:62:e2:85:b4:99:52:88:ac:1a:a3:2f:84:fd:63:8f:7a:
58:c2:40:8a:5b:2d:8a:b3:ba:c9:f2:9c:59:cd:11:8b:46:5c:
78:18:97:d8:b6:45:47:5a:54:34:6d:d3:2e:84:3a:63:f8:f8:
16:b8:29:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:07 2026 by rpki-client