Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: zi7jIlUHxzSH+L9aZXkeErsFkhiY9vLdivzcFDIV/Lo=
Subject key identifier: 34:25:42:DF:0C:55:A4:B7:F8:86:D2:47:05:CB:67:AF:4E:60:6E:D6
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 019D37BFFFFC4EAAC783C18F65CCBE1FCD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 133A
Signing time: Sun 29 Mar 2026 04:00:22 +0000
Manifest this update: Sun 29 Mar 2026 04:00:22 +0000
Manifest next update: Mon 30 Mar 2026 04:00:22 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: 9UpohAU6/ZkHolz+VRU781MaIH+p8pNXSDfSJqZV0lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:ff:fc:4e:aa:c7:83:c1:8f:65:cc:be:1f:cd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: Mar 29 04:00:22 2026 GMT
Not After : Mar 30 04:00:22 2026 GMT
Subject: CN=342542df0c55a4b7f886d24705cb67af4e606ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:22:19:e5:bc:8e:24:a4:46:90:c0:66:53:9e:
9a:6c:04:70:ae:31:18:14:b3:8f:a1:6e:e2:73:ec:
30:67:88:92:da:ac:81:64:4e:92:ea:c1:0a:ce:7a:
d2:ae:26:cb:e7:a7:03:c2:7b:e1:13:fa:3a:56:f1:
f3:18:22:af:3d:8c:66:f5:27:ac:4d:c2:3a:71:1e:
7c:8a:60:38:b1:f6:31:a7:5c:98:54:1b:77:f3:92:
0c:9c:b0:10:67:4a:a1:4a:31:20:c1:bb:78:bf:cf:
c6:85:8a:5e:02:d4:48:94:ec:65:7b:8c:7c:08:6f:
60:40:52:fb:fc:13:6c:93:1f:fa:e0:cd:50:c4:f1:
73:c7:4c:2b:7a:ac:06:b5:4e:c3:b8:17:a2:9c:12:
92:6c:05:8f:33:fe:ab:14:64:28:a9:05:4c:c4:97:
dd:33:87:46:1d:11:87:63:57:da:3a:8f:2f:60:d2:
d8:89:fe:19:9f:90:59:40:f5:31:e3:a6:e4:74:2a:
93:07:28:6d:d5:05:05:f4:3b:e1:05:a3:63:0c:1c:
9d:d1:d5:40:92:80:d4:f2:9b:8d:a6:c4:01:c1:8e:
a4:6b:74:2e:70:c9:c9:90:d1:28:fd:63:fb:54:d7:
55:0f:05:d6:5f:06:1a:5e:ca:4a:2e:d7:2c:c4:4c:
e0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:25:42:DF:0C:55:A4:B7:F8:86:D2:47:05:CB:67:AF:4E:60:6E:D6
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:43:e3:75:88:ed:59:95:ce:05:35:10:2a:96:fd:48:a3:68:
c4:b8:75:63:2d:6f:58:b6:06:fd:6c:24:07:34:32:a3:f3:c8:
a7:d7:b1:f4:05:35:40:c6:8b:1b:39:52:45:cf:17:e8:04:f2:
bc:45:55:3c:5a:01:01:39:43:31:a6:01:6a:99:70:46:9e:af:
d4:aa:b7:0b:ca:59:ef:4f:13:28:a6:d3:f3:ac:ca:6b:48:88:
46:da:f4:30:60:a9:0b:28:09:3d:6d:64:8e:5d:19:4d:c6:ee:
aa:46:0e:5e:f7:75:a9:b6:be:1a:d0:99:7a:cd:95:06:1e:fe:
cc:ed:ad:2d:10:46:eb:d7:71:1f:f3:13:d4:81:53:04:3c:3b:
6f:7e:25:b3:af:bb:55:24:ca:91:e9:c0:79:5f:8f:fe:ae:8b:
fb:ff:f2:bd:43:c8:b2:dc:28:56:e6:56:3e:74:a5:17:8f:71:
ac:e0:f5:fd:6e:f2:bb:25:37:13:d2:4b:ad:4e:c5:24:66:be:
92:91:17:71:b6:22:dc:d6:5c:f0:bc:bc:ce:a5:9c:97:af:dd:
c4:22:97:b4:19:18:39:8f:e2:e5:d0:ca:a7:47:e2:50:30:d5:
51:d7:9d:63:75:f6:10:92:c5:19:7b:97:dd:47:44:52:c3:4a:
cb:7f:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:07 2026 by rpki-client