Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: UOeP0gGu65dJQPaIBAVtQ3z+Ob4Z+vq0oeuq3hhlyoQ=
Subject key identifier: 22:DA:8A:F7:1B:92:9F:ED:02:88:92:0C:17:D5:5A:35:3C:38:D6:95
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 019E30E092DC9D93D7700B769BFBC94E8932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 13BB
Signing time: Sat 16 May 2026 13:01:24 +0000
Manifest this update: Sat 16 May 2026 13:01:24 +0000
Manifest next update: Sun 17 May 2026 13:01:24 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: lQP3OIYsH0i4vVgV5ZFPi+K4n0IxCFwt1QS5AwaIU30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:92:dc:9d:93:d7:70:0b:76:9b:fb:c9:4e:89:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: May 16 13:01:24 2026 GMT
Not After : May 17 13:01:24 2026 GMT
Subject: CN=22da8af71b929fed0288920c17d55a353c38d695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:09:66:56:e3:01:57:fd:3c:2c:65:68:1a:43:
32:f8:fb:b5:56:aa:17:9a:cb:5b:f6:b2:44:8e:6a:
5e:d5:df:7e:10:2a:19:ad:bc:cc:7e:d6:8d:79:a3:
da:f8:8e:26:0b:85:0b:55:8e:d0:1d:f6:41:d1:66:
33:fc:a8:ac:b0:6c:27:85:28:c7:ba:06:02:e0:08:
23:9c:2a:a8:9e:76:45:7f:0b:ce:6d:97:36:c5:48:
2d:b6:b5:67:44:e5:3d:84:74:be:49:c9:f2:4d:32:
26:f4:31:0b:77:77:b6:ec:a2:17:f0:40:c9:18:88:
53:ff:7e:a7:7d:f8:50:29:72:88:ca:80:51:cb:b4:
45:f3:fb:df:33:e5:bb:c6:a4:25:dd:19:2b:30:00:
24:e8:77:00:21:7b:bb:ef:6e:09:83:e2:c7:34:7d:
72:7d:5e:0d:15:15:1e:10:61:fb:7c:aa:d3:3b:d6:
3d:97:c9:e1:bf:4f:f7:ad:19:6e:5d:f5:d5:78:4d:
bf:34:6d:4f:1f:26:5a:dd:03:c9:d2:43:c6:0d:7a:
97:57:29:72:0f:78:cc:be:a6:39:15:81:c8:f4:09:
5b:99:9e:0f:7d:c6:71:51:05:14:82:c3:6a:aa:19:
fb:7b:58:63:d7:45:4c:bd:4d:fd:64:c4:fc:5a:51:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DA:8A:F7:1B:92:9F:ED:02:88:92:0C:17:D5:5A:35:3C:38:D6:95
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3f:11:27:34:ff:47:53:9e:98:dc:a8:b5:30:d6:0d:0e:b8:
09:f0:14:7f:9e:1e:d4:e7:a1:95:36:31:a9:b2:83:17:fe:65:
6a:67:4e:2e:dd:47:13:4b:a9:25:d1:2c:7e:36:8a:74:ab:22:
7e:61:ca:38:f0:d2:b0:70:15:0c:4d:8e:62:96:98:ae:77:b1:
aa:76:cd:93:cc:f1:18:4f:17:ca:b6:7d:c9:e3:e4:b4:50:97:
2e:d4:ba:57:74:88:b8:d0:a6:ef:ae:b5:38:58:e0:07:46:c7:
f2:f7:e8:2b:9c:36:5c:5a:50:06:db:97:ef:fe:48:ce:31:b5:
91:a6:0c:2b:bd:2e:04:60:b6:0c:3c:35:fa:38:a2:4e:3f:94:
d3:2f:65:10:14:2b:ba:1f:ee:cd:77:23:d0:a3:aa:99:a3:28:
ae:fc:f0:94:63:3f:4b:32:59:af:d0:67:d1:19:b8:ec:d7:5d:
89:5e:c2:f7:71:f4:39:72:2c:e5:b7:fd:e6:0d:5a:86:33:a2:
82:ab:22:04:ff:ca:69:7d:f9:33:bb:a5:3f:90:ed:8f:10:f0:
8b:f9:c0:f3:bd:b9:69:38:cd:59:a0:bd:ff:e8:86:1d:1e:77:
d0:ed:38:16:92:53:29:69:ab:b9:47:ed:6f:8c:b0:8d:41:93:
18:51:3c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:40 2026 by rpki-client