Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier: v9UBB/ZLd70mmKP+gLkAPS65kreDI7ahsGw0Vq2gOdY=
Subject key identifier: 41:CA:C1:32:4A:2A:D7:2C:DE:20:CE:FD:EC:1A:D5:BC:D1:5A:93:38
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 019E25EF3845158CC71732360DF129C6330E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number: 1942
Signing time: Thu 14 May 2026 10:01:34 +0000
Manifest this update: Thu 14 May 2026 10:01:34 +0000
Manifest next update: Fri 15 May 2026 10:01:34 +0000
Files and hashes: 1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: Y4rW4Jfu8sY1Em+UjgWrDtVroBimax4pCccauYks8pg=)
2: yK3OV_z1Oi5TSHDQmvubHA7OpJU.roa (hash: aDKJN9R2ByiRD2q1KpK1lRoDZnaYg+5USd8f0/xrBDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:25:ef:38:45:15:8c:c7:17:32:36:0d:f1:29:c6:33:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: May 14 10:01:34 2026 GMT
Not After : May 15 10:01:34 2026 GMT
Subject: CN=41cac1324a2ad72cde20cefdec1ad5bcd15a9338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:fd:98:3a:60:4e:6c:72:da:54:29:8e:40:
c0:15:53:ec:7d:ff:d5:d2:4c:e5:c0:99:bb:af:cf:
12:2d:42:aa:9c:64:e0:10:ea:bb:ba:ca:c3:72:71:
3d:e2:35:a8:45:f8:c8:3f:0b:75:cd:f9:68:c4:8a:
ef:6d:82:85:33:39:64:53:a9:e3:8a:ca:19:0e:c1:
46:f1:2b:4c:87:52:75:91:8e:9c:ca:a5:0c:ba:02:
ff:e7:1d:85:d8:9c:bd:95:b2:fe:2d:97:ee:b4:f2:
4e:84:98:d8:3b:a4:0f:b8:61:07:23:6c:1f:e0:9a:
5c:ab:7d:29:ce:00:c9:71:81:f4:32:fa:f9:86:8d:
7f:76:18:ac:9f:63:1d:95:b8:8c:d5:f1:c3:a3:f0:
81:e4:87:42:ee:76:05:a5:23:9f:66:19:a5:dd:b3:
60:28:4b:0e:5f:de:88:8a:8b:26:82:b9:34:59:d8:
5d:04:ca:9a:ee:f3:29:ef:71:fb:6b:0d:55:cf:28:
dc:d0:d9:43:20:6c:be:28:0c:74:22:cf:ad:8e:53:
fd:73:c5:fb:b6:c3:d2:4c:3f:91:b3:f9:24:74:da:
59:3a:6d:b2:f7:89:bb:f2:40:42:c7:19:19:43:8d:
bd:50:0d:c5:f5:d8:14:b4:df:b3:ee:35:1e:64:e4:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CA:C1:32:4A:2A:D7:2C:DE:20:CE:FD:EC:1A:D5:BC:D1:5A:93:38
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:55:b8:b3:ce:5b:94:35:3a:39:91:41:9c:95:ec:b3:5d:1c:
b6:79:c0:09:34:08:9b:cb:d9:cd:74:ac:ad:ff:71:a1:13:09:
80:80:ea:84:c2:dd:b4:77:2f:7b:40:89:8e:18:25:8e:1d:a6:
86:d2:8e:9e:86:74:e3:94:9d:0f:10:c5:87:b7:2b:ba:5c:1a:
ab:5e:99:cb:13:82:58:05:99:39:f6:af:6c:68:fd:9c:e0:99:
3d:19:84:97:99:5d:95:bf:e1:7d:1b:ec:a6:95:93:57:e1:48:
ea:f5:0a:b4:2a:0b:84:5e:74:c2:15:7f:d0:05:17:1d:77:ae:
bf:bc:f5:93:8d:75:f3:13:cb:d9:f9:b6:04:c2:60:50:b1:ac:
22:4c:86:4c:42:2c:bf:67:10:12:db:c2:b4:b6:dd:01:ca:90:
70:bc:29:77:a7:a3:a6:5d:fe:01:98:77:44:ed:bc:7c:0f:9e:
11:63:e7:3f:f6:23:bf:27:e0:af:29:12:2f:b3:a1:3b:db:c8:
fd:36:c0:a6:42:86:68:c0:00:8b:40:88:c8:89:40:80:e1:23:
c3:81:53:42:d8:37:3d:41:c1:69:39:78:c1:3a:17:d6:24:12:
16:62:e2:63:2d:bb:cf:d4:9b:6e:29:71:2e:8a:38:b7:3b:a9:
28:06:37:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 12:56:47 2026 by rpki-client