Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
File: AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json)
Hash identifier: gKXVUd4P4Bv+rAAXxhAov8L6v9NP2QqNBGLqz7NuAyg=
Subject key identifier: 48:6F:B6:A7:A0:8F:66:CB:84:E8:04:F4:F1:45:67:36:E0:34:C7:A2
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Certificate issuer: /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial: 019D38D3E0CABDC43C01EAB311C431CC96AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
Manifest number: 1860
Signing time: Sun 29 Mar 2026 09:01:42 +0000
Manifest this update: Sun 29 Mar 2026 09:01:42 +0000
Manifest next update: Mon 30 Mar 2026 09:01:42 +0000
Files and hashes: 1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: GKYyGB7R9soIHx0UMA0vnaNx7/srkoliiMdvZCFEnTg=)
2: qT2NrCiJquJtfq_3e7nF2gYWJ5s.roa (hash: eAGHZA4lhxkkeWMCuFkx9WVGsrMFd32m7CFLgSd01WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:e0:ca:bd:c4:3c:01:ea:b3:11:c4:31:cc:96:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Validity
Not Before: Mar 29 09:01:42 2026 GMT
Not After : Mar 30 09:01:42 2026 GMT
Subject: CN=486fb6a7a08f66cb84e804f4f1456736e034c7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:41:ee:da:b6:d0:81:1a:1c:51:0e:2f:2f:
23:1b:41:05:ca:84:14:2c:8a:2a:47:8b:d7:cf:2c:
33:4e:b2:8d:d9:22:84:41:3c:29:7d:57:c8:6e:30:
07:8c:78:65:ed:11:77:61:b0:72:b6:08:7a:d9:5b:
e5:ce:3e:9f:7e:d9:a0:2b:96:63:79:f6:b8:1b:a8:
b3:07:f3:7a:bb:8b:3a:2f:97:b9:1e:98:46:06:aa:
20:5b:78:aa:bd:f0:6f:ec:65:cf:fa:3f:2a:d0:72:
00:85:c0:f1:ad:a5:4a:36:8d:fe:7b:c8:9f:df:37:
ce:10:21:32:99:db:16:d2:26:8d:51:db:72:be:60:
66:8a:5e:80:a1:ac:18:7a:3d:28:6e:53:c2:b5:51:
67:f2:14:e6:26:76:ff:8e:74:6e:37:e0:06:23:20:
46:08:ab:13:60:eb:76:36:a0:ee:6f:f6:fd:7a:b5:
5f:94:9a:c9:bd:be:ab:c2:b2:da:d2:08:0c:d9:46:
a5:b2:a5:15:4c:c6:a6:3c:b1:e5:e6:35:03:8a:ac:
83:4a:f6:48:ca:41:a6:ee:31:f2:c0:bb:13:09:9e:
b2:d9:a0:38:15:b8:ed:75:2e:0e:0b:05:97:a2:c9:
64:87:df:02:e1:b0:b3:9d:45:99:1b:a8:c9:e7:54:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6F:B6:A7:A0:8F:66:CB:84:E8:04:F4:F1:45:67:36:E0:34:C7:A2
X509v3 Authority Key Identifier:
keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f5:c9:b9:b1:f7:df:07:ea:ce:06:c7:65:cb:c6:b8:f9:fd:
4c:7d:44:ab:51:a0:85:80:0d:72:bc:2b:d0:64:ce:21:f8:c5:
b1:e3:60:59:61:d5:2f:b6:ea:53:bb:1b:21:a6:09:d1:aa:c3:
d6:13:a4:03:85:b7:47:7b:ed:22:fe:5d:ac:13:9c:88:e8:14:
8c:55:40:bb:2c:12:0d:f4:de:bf:67:af:2b:87:80:ea:58:12:
5c:1b:35:9b:e1:4e:c9:32:59:73:8e:9f:c5:02:b8:fc:43:5a:
5c:e0:aa:9c:ba:62:6e:d4:c4:b7:8e:be:6f:7c:71:e2:50:aa:
99:87:f1:a6:bb:4f:bd:14:69:67:e5:e1:11:e5:a5:79:9c:ff:
4f:0c:78:bc:2d:3d:86:da:e3:14:5f:55:af:3b:09:dd:2c:a9:
ef:f6:13:36:ff:42:a0:d8:0d:2b:84:5b:3d:4b:ff:4b:7e:8d:
5e:8b:2e:07:bd:80:de:5a:67:ce:d7:76:85:bb:08:f0:3d:ce:
23:6a:de:4f:73:cb:3d:32:5c:90:12:96:54:6e:6d:8a:a8:ed:
0d:a6:e8:20:db:11:e8:46:64:9c:13:f6:e0:64:b5:4f:19:f0:
a1:cb:ae:e9:90:1a:e5:74:fb:1e:73:f8:b3:09:9c:43:20:b2:
dc:bf:89:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040+DKvcQ8AeqzEcQxzJauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMmZhNmUxOTA1NjgzODkwNWJjMzJiNTNhYjBkMTA0N2Q3
OGU0ZDQwHhcNMjYwMzI5MDkwMTQyWhcNMjYwMzMwMDkwMTQyWjAzMTEwLwYDVQQD
Eyg0ODZmYjZhN2EwOGY2NmNiODRlODA0ZjRmMTQ1NjczNmUwMzRjN2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb1B7tq20IEaHFEOLy8jG0EFyoQU
LIoqR4vXzywzTrKN2SKEQTwpfVfIbjAHjHhl7RF3YbBytgh62Vvlzj6fftmgK5Zj
efa4G6izB/N6u4s6L5e5HphGBqogW3iqvfBv7GXP+j8q0HIAhcDxraVKNo3+e8if
3zfOECEymdsW0iaNUdtyvmBmil6AoawYej0oblPCtVFn8hTmJnb/jnRuN+AGIyBG
CKsTYOt2NqDub/b9erVflJrJvb6rwrLa0ggM2UalsqUVTMamPLHl5jUDiqyDSvZI
ykGm7jHywLsTCZ6y2aA4FbjtdS4OCwWXoslkh98C4bCznUWZG6jJ51RA5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhvtqegj2bLhOgE9PFFZzbgNMeiMB8GA1UdIwQY
MBaAFAAvpuGQVoOJBbwytTqw0QR9eOTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQt
ZmJjMzZlNDM0OGY1LzEvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQtZmJjMzZlNDM0OGY1
LzEvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPXJubH3
3wfqzgbHZcvGuPn9TH1Eq1GghYANcrwr0GTOIfjFseNgWWHVL7bqU7sbIaYJ0arD
1hOkA4W3R3vtIv5drBOciOgUjFVAuywSDfTev2evK4eA6lgSXBs1m+FOyTJZc46f
xQK4/ENaXOCqnLpibtTEt46+b3xx4lCqmYfxprtPvRRpZ+XhEeWleZz/Twx4vC09
htrjFF9VrzsJ3Syp7/YTNv9CoNgNK4RbPUv/S36NXosuB72A3lpnztd2hbsI8D3O
I2reT3PLPTJckBKWVG5tiqjtDaboINsR6EZknBP24GS1Txnwocuu6ZAa5XT7HnP4
swmcQyCy3L+Jmw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:49 2026 by rpki-client