Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: kttwRBHNB8CIcJNkUEm1hAyOURvRWkRqrDGSYt84P+o=
Subject key identifier: 24:EA:1D:B2:34:63:B7:96:B3:8E:EC:29:65:11:73:18:ED:3A:96:3D
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 01A13D137C321E7A3B9792C93B59FE8AB98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 154F
Signing time: Thu 15 Oct 2026 01:00:49 +0000
Manifest this update: Thu 15 Oct 2026 01:00:49 +0000
Manifest next update: Fri 16 Oct 2026 01:00:49 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: gx2r27x5GeYqVuZdfONh2Ld+qLD4coHxDPmRmChkAIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:7c:32:1e:7a:3b:97:92:c9:3b:59:fe:8a:b9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: Oct 15 01:00:49 2026 GMT
Not After : Oct 16 01:00:49 2026 GMT
Subject: CN=24ea1db23463b796b38eec2965117318ed3a963d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:bb:73:0d:f2:c8:6f:59:12:db:b9:8b:73:
1d:d7:79:de:57:e0:2c:8c:c5:b4:b5:1f:1f:a6:0e:
e0:db:11:5d:36:8c:fa:52:cd:70:de:d2:94:45:d3:
7b:62:d2:6c:a1:95:ff:e3:52:8f:39:1c:37:de:18:
fe:90:5a:26:8f:6e:88:0a:b0:30:a6:2f:d6:39:16:
92:41:a0:a5:a2:f5:d7:2d:6e:f2:4f:84:ec:86:43:
e4:ab:8a:30:96:d7:47:25:db:f0:4d:79:ed:6f:7c:
1b:ee:a3:98:d8:94:1c:4a:33:12:ff:62:72:5f:11:
d9:f0:25:19:2d:85:e3:5e:eb:70:83:f5:68:33:87:
0c:1a:53:a2:19:83:40:ed:70:61:f9:94:5c:d1:b3:
bf:ca:83:a4:dc:f1:23:ee:ab:1f:45:8f:8a:8a:38:
e6:fb:b0:c6:fa:b2:99:ce:ba:27:42:7b:08:1a:65:
71:7a:34:4e:da:6b:93:aa:a1:b3:eb:aa:62:f8:3e:
48:6c:21:4a:ba:06:9b:d6:92:3a:5b:3c:26:99:5f:
77:4b:9b:d8:3f:57:7a:e4:b0:c9:7a:6b:bb:8d:61:
61:9c:ab:a7:c5:da:e7:51:ef:5f:9d:a7:7e:6a:81:
65:a6:35:b8:32:8e:8a:86:a1:98:3b:a0:91:7b:be:
00:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EA:1D:B2:34:63:B7:96:B3:8E:EC:29:65:11:73:18:ED:3A:96:3D
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:0c:1c:cc:9c:b2:f3:84:7a:8b:af:cc:80:0f:4c:b6:4a:7b:
8e:7d:d9:af:de:44:c7:9a:d8:bd:a4:85:84:2d:a1:38:58:40:
d5:6f:e3:3f:18:0f:12:86:b5:18:7a:3c:2d:e1:57:ee:e0:ee:
7d:d4:6d:92:28:e1:72:ea:56:09:c9:46:c3:0b:ef:81:cd:a6:
77:be:54:32:ef:68:93:22:50:28:c8:b7:68:4b:ed:db:99:2d:
db:8e:9b:17:77:84:f8:84:30:f6:ad:42:5a:df:b3:86:cb:34:
ee:c7:f8:2f:d2:99:58:d9:62:38:07:88:41:84:a8:0c:73:26:
b2:59:76:68:3a:d8:8d:7c:42:0c:bc:4e:c7:99:6f:72:e8:22:
ad:53:56:3c:fc:8b:7d:a1:75:d5:c6:e6:ae:e8:fd:92:2c:91:
71:b9:ff:83:f2:04:9c:92:aa:d1:42:e3:8e:d5:54:ef:ee:2b:
d7:f4:c6:20:ad:97:24:da:11:65:e1:66:ff:d9:9b:ec:a3:7e:
26:c5:f8:a2:78:21:19:55:70:82:04:a5:8c:c0:6f:70:7e:a3:
a6:cf:40:02:00:81:a5:ad:65:80:9b:b8:75:49:cc:e3:47:0d:
4a:c5:60:14:86:3b:49:56:f5:e4:4b:b7:8f:3f:85:84:08:14:
9d:47:44:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:14 2026 by rpki-client