Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier: Rvtb6R62xKVsfvJoK8hhj9fCK8GZmntgq85jMDDdbis=
Subject key identifier: 4E:F7:C6:9C:89:96:70:3B:CA:F4:00:19:21:55:B5:41:B5:9A:B9:79
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 019D38656EDDEBD169A2B4E915F3F2BB5137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number: 18BD
Signing time: Sun 29 Mar 2026 07:01:04 +0000
Manifest this update: Sun 29 Mar 2026 07:01:04 +0000
Manifest next update: Mon 30 Mar 2026 07:01:04 +0000
Files and hashes: 1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: FVvpn4Wq0xBs5XgnFXH7cT6oL1ry1K6pLH6lZZ47ya0=)
2: ov_yPvQnjCBOxMDQ0fxhQYRGf24.roa (hash: 87TB6uHBD00xhJxzxPfF6P3fX0oGRc/an9mxW40Dcho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6e:dd:eb:d1:69:a2:b4:e9:15:f3:f2:bb:51:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Mar 29 07:01:04 2026 GMT
Not After : Mar 30 07:01:04 2026 GMT
Subject: CN=4ef7c69c8996703bcaf400192155b541b59ab979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:b5:d4:b6:11:08:c0:f2:dd:6c:31:29:e2:
9a:d2:7c:e3:b6:0d:3d:87:74:b0:e1:c0:f1:34:de:
a1:64:f1:02:dd:5d:57:69:c7:ef:50:18:c2:3d:35:
27:14:eb:21:be:6a:fc:f8:c6:18:1f:7c:a4:e0:77:
c5:83:6b:8d:50:5a:8b:aa:85:3b:cb:14:d4:1c:65:
b8:57:f3:e9:c4:9d:b3:97:fe:7e:44:2c:d2:73:c7:
64:8a:5a:67:68:6b:f1:7f:9a:34:cf:ad:a9:35:c1:
20:a3:80:2e:e8:89:e0:f3:27:f5:74:97:1a:02:39:
c6:ed:15:93:88:02:e5:d7:3e:31:79:02:0c:46:e8:
78:77:49:00:6d:f9:88:ea:c2:d4:77:2d:45:98:11:
7f:64:a1:78:40:74:95:59:7b:87:4e:b4:de:3e:17:
27:30:93:0e:d8:6e:18:85:9d:06:7e:f0:ee:f7:4f:
5c:0b:07:24:cd:ae:55:76:85:2a:17:9b:fe:94:3a:
56:7d:8f:b9:5e:c5:96:38:47:5c:92:99:0a:74:f9:
7b:3f:27:61:07:5c:52:49:b8:64:d4:c8:b2:f5:5a:
5a:c2:be:6f:a7:26:17:84:f8:fe:8b:2a:e9:90:75:
9d:de:d5:c9:e8:e5:32:4e:9d:06:c5:cf:c5:7f:08:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F7:C6:9C:89:96:70:3B:CA:F4:00:19:21:55:B5:41:B5:9A:B9:79
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:45:48:43:8c:22:fe:14:77:d3:cf:4b:05:8f:15:bd:ca:c5:
be:d1:bf:d2:cc:b1:d6:2d:f8:65:10:7e:f2:21:5d:b6:fd:24:
a7:7e:e7:cb:1d:42:47:e0:25:b8:70:1e:9c:ad:82:30:0e:cb:
56:0b:0c:10:9e:69:b3:3f:39:8c:41:44:8d:dc:d6:69:19:46:
a9:34:84:29:fc:1f:ad:d2:8e:5c:37:88:17:0f:c1:38:17:65:
23:7f:12:6a:ad:0d:76:01:b3:c2:46:ce:47:f1:7f:3d:14:86:
d4:e2:30:c6:89:b3:73:53:9b:8c:00:af:55:55:0e:81:42:58:
bb:94:a6:4a:f0:d0:01:e7:ff:5a:7a:6f:a9:44:70:18:c7:d0:
2a:6a:53:3b:30:60:58:c3:4b:5b:89:33:a7:01:2c:d5:e6:64:
dd:05:30:0b:ef:15:2e:9c:cf:0d:38:06:a2:f8:bf:2c:4e:ce:
a3:f7:20:ec:d8:c4:24:07:6d:ff:e8:d4:db:8c:4b:ce:bf:5f:
f7:9c:cf:40:8c:bc:92:9d:9d:2f:47:ad:3f:f1:49:3c:b5:79:
da:9b:1e:99:df:5c:b2:53:fc:26:64:26:e7:34:a9:10:82:c0:
4c:dc:a1:86:4a:66:3d:7b:d2:22:28:fc:6b:36:74:36:fd:f5:
0c:fb:ad:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:09 2026 by rpki-client