Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier: QfU+8+8dZ2MVehnLP5iL7bZlJTpeWj9fmnS8kz+1H8w=
Subject key identifier: 66:D9:A2:49:64:AE:1E:EC:05:0C:3C:95:2B:88:A4:DF:5A:EE:CA:20
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 019F0EBFB7540DD0C453A0B1157ED8312AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number: 19C2
Signing time: Sun 28 Jun 2026 15:01:12 +0000
Manifest this update: Sun 28 Jun 2026 15:01:12 +0000
Manifest next update: Mon 29 Jun 2026 15:01:12 +0000
Files and hashes: 1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: 9DHpFIfrNK6+4e3VA9r1HPbZSbBukF3mjn0DzsoYY/E=)
2: IrT1izJjsi0TfCcq2lqIbiIQJHI.roa (hash: XIoNtYAb0+rc5ayEFBobv3HeFMAQ6TE3neU0MVac3gs=)
3: nhnAoI7njIH6xYxCA5fwfo4HPKU.roa (hash: Cy5nsxKi/IjoTCyLrXrDmFreBrmeghR5fR9TOP9/eoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:bf:b7:54:0d:d0:c4:53:a0:b1:15:7e:d8:31:2a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Jun 28 15:01:12 2026 GMT
Not After : Jun 29 15:01:12 2026 GMT
Subject: CN=66d9a24964ae1eec050c3c952b88a4df5aeeca20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:f4:4b:f9:64:cc:0e:08:3a:66:b3:e7:38:
a7:ff:53:0a:ab:c4:a4:f3:74:5a:82:b0:dd:32:d8:
92:0f:4f:93:14:2b:b2:2d:41:12:a0:33:9c:87:de:
cd:55:63:cc:27:ce:31:ed:6d:ad:a7:0b:bb:6c:09:
a4:d5:99:76:70:58:e0:41:34:74:c8:b6:32:49:0f:
27:04:7e:cb:e2:71:d6:3c:5a:7a:ab:35:43:37:6b:
fd:c2:0f:69:b4:b7:74:48:4c:38:86:5a:26:a1:09:
1d:20:04:9d:dc:31:73:35:9d:7a:6c:36:6b:db:57:
59:4d:92:5c:77:60:fb:ba:de:d3:34:f8:34:bb:9d:
d9:ae:42:2b:81:25:c2:4f:68:f8:da:c7:bd:fe:80:
45:2d:c9:4d:f0:b2:8a:dc:a9:c3:eb:5e:4e:36:48:
e6:6b:5f:2a:f8:65:83:81:60:64:1b:cd:77:71:4b:
ff:90:44:c9:4a:2d:f1:31:75:7b:fe:ae:7f:00:38:
c1:9c:41:67:21:89:09:23:65:c3:85:7c:c7:32:cc:
70:43:ed:27:03:ea:db:bc:61:90:08:5f:79:cb:f4:
6d:3f:d9:43:25:7a:cd:91:c3:e9:21:a5:56:64:af:
c9:67:dc:9c:4e:c3:8f:ed:e9:35:31:20:93:58:f0:
d5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D9:A2:49:64:AE:1E:EC:05:0C:3C:95:2B:88:A4:DF:5A:EE:CA:20
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:33:7e:1a:f6:04:61:52:23:f6:a8:1c:bf:28:1e:e5:a9:d6:
f5:f2:1b:d1:f7:5e:29:2e:ac:ad:6a:35:08:d9:fe:78:c3:36:
5a:53:a5:12:f1:0e:d9:cb:ba:97:4a:84:93:7e:83:82:b9:fc:
e9:aa:14:91:f1:0c:13:56:c8:a0:6d:7c:25:91:20:21:ce:58:
51:bb:74:38:68:5f:30:7b:e6:23:62:be:08:8a:d2:ae:54:39:
a7:56:25:27:f2:f7:a1:b2:c7:4d:b0:86:9b:fd:8d:63:69:18:
0d:30:01:98:3f:c8:ff:bd:92:cc:2e:cc:b0:78:2b:0e:3b:2f:
0b:4d:51:6f:18:51:4a:2f:f8:b0:b6:a1:60:54:41:4e:b1:10:
88:6f:2b:d8:f5:73:ef:36:26:3c:80:6f:77:af:9e:6c:e9:b1:
6e:9b:83:0e:75:8c:6f:82:c1:29:37:8b:d0:f9:9b:6b:72:0e:
85:f1:3b:ea:7f:ba:fe:0e:74:d4:92:33:03:50:98:23:82:68:
db:f5:1d:6a:aa:0c:5b:3c:fd:c6:8c:92:f8:fc:e2:34:38:7a:
dc:de:43:03:0a:9f:85:96:d1:da:69:47:a0:87:6b:12:3f:d0:
6a:eb:93:84:96:27:ea:1c:0b:bd:fd:62:94:fc:1a:42:03:f2:
be:24:f6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:35:35 2026 by rpki-client