Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
File: AclpL7GkCf800a87grjj2mRnXDI.mft (raw, json)
Hash identifier: Rg16B5fzdA5//8FTCjqJeuBdFHpQTdTxrn6y6402abQ=
Subject key identifier: F8:97:BA:54:AC:DB:86:17:51:17:3C:92:10:41:C2:AD:46:3D:82:D6
Authority key identifier: 01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
Certificate issuer: /CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Certificate serial: 019F190D1C8D7E2F690B5DEA04626D718497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
Manifest number: 0EFD
Signing time: Tue 30 Jun 2026 15:01:57 +0000
Manifest this update: Tue 30 Jun 2026 15:01:57 +0000
Manifest next update: Wed 01 Jul 2026 15:01:57 +0000
Files and hashes: 1: AclpL7GkCf800a87grjj2mRnXDI.crl (hash: Y1S7/LlCg13Fb7BcSA/VaBZl0KV0sQVnLsG1x+JJBwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:1c:8d:7e:2f:69:0b:5d:ea:04:62:6d:71:84:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Validity
Not Before: Jun 30 15:01:57 2026 GMT
Not After : Jul 1 15:01:57 2026 GMT
Subject: CN=f897ba54acdb861751173c921041c2ad463d82d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:49:53:e8:a6:b4:4c:3b:c7:19:b3:64:86:
33:23:b0:46:72:6a:ae:bc:6d:b5:6d:d3:5c:93:db:
3c:62:8d:10:36:5b:1f:d8:9c:bd:80:10:fe:57:96:
32:0a:e2:1e:fb:65:fd:7e:ef:58:f8:50:06:4f:05:
ae:1d:80:e0:fb:e2:79:13:8c:14:ca:76:a2:09:78:
6f:56:a5:dc:ae:e9:db:2a:fd:05:30:03:14:61:f2:
ea:07:a4:2f:a8:7e:e1:35:5b:36:93:98:b9:13:ab:
93:22:ab:6a:a9:35:81:38:3c:14:6f:06:36:56:f7:
df:41:6c:8a:08:16:70:8a:a8:0c:8b:97:51:3d:f3:
47:19:31:0a:09:ae:af:6f:96:8a:7a:15:65:c1:fb:
5d:2e:12:e1:0f:e8:dc:66:25:f1:a6:54:cf:9b:9b:
f1:e0:26:75:87:6f:30:5e:63:46:11:e9:13:cc:1e:
0a:35:75:e4:d0:8a:5d:8d:a3:fd:2c:82:f3:ec:01:
7c:0e:6e:c0:c1:8b:20:58:c9:13:55:92:b0:c5:92:
58:ba:e8:c4:6f:cc:13:0c:64:f2:4b:2b:40:b1:37:
99:8c:49:30:c8:e8:f6:ad:46:2a:23:de:c0:a0:c7:
b7:8c:37:de:12:f5:51:b0:bf:8f:f4:ff:4e:a3:4b:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:97:BA:54:AC:DB:86:17:51:17:3C:92:10:41:C2:AD:46:3D:82:D6
X509v3 Authority Key Identifier:
keyid:01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:d8:40:12:51:91:a2:a3:7f:d0:d0:cb:4f:ab:83:d4:11:63:
98:13:f2:78:90:20:13:62:45:db:12:63:f9:41:ec:4b:10:c6:
d0:2f:53:66:b5:5b:0c:35:52:6e:90:2a:23:dd:70:18:eb:a2:
e8:d0:7d:58:4e:e5:7c:56:99:ce:db:8b:5c:fb:d7:b3:4b:7d:
f1:81:1f:91:4a:69:2a:08:c6:59:31:fd:43:6b:73:82:88:2a:
c0:4c:18:56:01:c1:a4:a0:3e:af:3d:7a:53:b1:64:41:1b:de:
f8:d3:d4:72:ea:7f:e1:f0:9d:17:72:6e:b7:ed:b6:40:75:1f:
dc:34:bd:1f:71:17:51:b9:f2:4b:06:c7:5d:51:7e:d8:83:59:
19:0c:8f:dd:0c:75:ff:4a:4d:6e:24:3a:f2:97:6d:ea:4d:8a:
a2:ef:3f:47:d8:5d:11:58:51:22:de:29:86:5b:16:14:70:b9:
5e:49:c7:a8:8d:f9:ff:08:0d:75:28:d5:54:40:27:e6:4f:8e:
f7:ca:7e:02:5b:85:c5:ed:82:63:01:bf:91:0a:1a:aa:84:43:
f0:fd:f3:1a:8a:5d:ce:fd:e2:18:44:22:55:c5:d4:03:b0:67:
f1:ee:6b:0f:16:fb:67:89:41:8e:e1:6f:3f:b3:f7:63:c4:a6:
c4:82:a6:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDRyNfi9pC13qBGJtcYSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzk2OTJmYjFhNDA5ZmYzNGQxYWYzYjgyYjhlM2RhNjQ2
NzVjMzIwHhcNMjYwNjMwMTUwMTU3WhcNMjYwNzAxMTUwMTU3WjAzMTEwLwYDVQQD
EyhmODk3YmE1NGFjZGI4NjE3NTExNzNjOTIxMDQxYzJhZDQ2M2Q4MmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzopJU+imtEw7xxmzZIYzI7BGcmqu
vG21bdNck9s8Yo0QNlsf2Jy9gBD+V5YyCuIe+2X9fu9Y+FAGTwWuHYDg++J5E4wU
ynaiCXhvVqXcrunbKv0FMAMUYfLqB6QvqH7hNVs2k5i5E6uTIqtqqTWBODwUbwY2
VvffQWyKCBZwiqgMi5dRPfNHGTEKCa6vb5aKehVlwftdLhLhD+jcZiXxplTPm5vx
4CZ1h28wXmNGEekTzB4KNXXk0IpdjaP9LILz7AF8Dm7AwYsgWMkTVZKwxZJYuujE
b8wTDGTySytAsTeZjEkwyOj2rUYqI97AoMe3jDfeEvVRsL+P9P9Oo0soJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiXulSs24YXURc8khBBwq1GPYLWMB8GA1UdIwQY
MBaAFAHJaS+xpAn/NNGvO4K449pkZ1wyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82MzBmZWMtZGQ1Ni00NmFjLWEwMzgt
ZGRiODkwZDc4ZmU5LzEvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82MzBmZWMtZGQ1Ni00NmFjLWEwMzgtZGRiODkwZDc4ZmU5
LzEvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6thAElGR
oqN/0NDLT6uD1BFjmBPyeJAgE2JF2xJj+UHsSxDG0C9TZrVbDDVSbpAqI91wGOui
6NB9WE7lfFaZztuLXPvXs0t98YEfkUppKgjGWTH9Q2tzgogqwEwYVgHBpKA+rz16
U7FkQRve+NPUcup/4fCdF3Jut+22QHUf3DS9H3EXUbnySwbHXVF+2INZGQyP3Qx1
/0pNbiQ68pdt6k2Kou8/R9hdEVhRIt4phlsWFHC5XknHqI35/wgNdSjVVEAn5k+O
98p+AluFxe2CYwG/kQoaqoRD8P3zGopdzv3iGEQiVcXUA7Bn8e5rDxb7Z4lBjuFv
P7P3Y8SmxIKmJw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:50 2026 by rpki-client