
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
File: Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft (raw, json)
Hash identifier: Bt8+TdW+x4yBuKKq06CQjFgaBDVkIDDwTsG78MsL+n8=
Subject key identifier: FA:7C:D5:40:A4:CC:BE:AA:86:F2:37:96:A6:64:E2:FF:EF:CB:84:AD
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Certificate issuer: /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial: 019D36E5146BBC72081FDE9EA31E51C960A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 00:01:15 +0000
Manifest this update: Sun 29 Mar 2026 00:01:15 +0000
Manifest next update: Mon 30 Mar 2026 00:01:15 +0000
Files and hashes: 1: Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl (hash: SXuprNmOMCBwptCSa8CylLqH9rjRYBq6tjXV3BeobjQ=)
2: tLACRLHJMNO7pkHg2BdbS9oOBUU.roa (hash: 9tUxOLxvWwiq+19ZOnFgqeZk3zELbv4Ra0UrW4JTYYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:14:6b:bc:72:08:1f:de:9e:a3:1e:51:c9:60:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
Validity
Not Before: Mar 29 00:01:15 2026 GMT
Not After : Mar 30 00:01:15 2026 GMT
Subject: CN=fa7cd540a4ccbeaa86f23796a664e2ffefcb84ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:75:1c:79:5d:42:f4:32:4d:08:7d:14:56:
c6:d7:c5:ca:89:1a:c8:3a:55:b1:2d:d5:07:dc:5d:
58:a1:7e:36:7f:1c:89:dc:26:60:97:86:15:7a:ed:
16:fb:d9:f2:b9:c4:5a:ad:3c:bb:ba:f2:0f:be:0f:
64:50:a9:0d:11:7e:c8:d6:64:b3:b1:97:00:b7:1a:
ce:bd:95:6f:e7:b8:00:b8:a5:41:96:d9:f9:df:4f:
ca:44:e5:5a:b3:85:33:3d:0e:fd:80:ad:38:72:82:
2b:05:af:62:82:32:9b:f5:48:9c:f6:7c:93:15:d3:
95:35:24:5f:3d:0c:0e:f9:a0:be:69:62:e7:0e:87:
30:51:3e:19:3d:0c:ab:66:dd:8d:eb:83:17:b9:18:
66:4a:6e:d1:ed:fe:39:ad:49:48:75:81:1b:b4:de:
32:26:95:c9:6b:be:e1:56:0a:01:ef:23:46:f8:5c:
5c:63:71:e0:08:a4:4a:04:9d:8b:91:60:63:80:9a:
68:2a:45:12:d4:95:09:d8:8d:ef:c0:62:52:74:9c:
e9:f8:3f:21:ae:9e:ba:50:64:eb:02:5c:25:56:ae:
60:3a:ed:6d:73:bd:87:1b:fc:51:66:88:d6:a4:fe:
0e:e0:6e:97:b0:e5:f3:ca:16:b8:04:ee:8e:3d:35:
98:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7C:D5:40:A4:CC:BE:AA:86:F2:37:96:A6:64:E2:FF:EF:CB:84:AD
X509v3 Authority Key Identifier:
keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:71:50:19:96:db:f6:82:9d:c5:3c:25:32:b4:82:f4:b3:43:
45:e4:28:10:17:e6:05:fb:d4:21:28:19:14:95:2d:f1:7e:f4:
4d:5c:a9:ba:57:1c:90:2d:4b:33:82:0c:ad:04:56:9f:3f:f1:
07:61:9b:18:92:e4:05:34:0e:88:cb:e3:27:8e:52:88:de:3f:
7a:dc:0b:10:65:68:76:58:04:a7:4f:3b:09:78:1d:c6:3f:e4:
37:d2:b8:de:7f:57:65:6c:40:e6:f6:8f:f1:95:3d:9f:26:9b:
1c:4c:25:56:0c:62:a4:09:3c:a8:46:8d:f4:dd:1c:ee:b6:6b:
09:8f:a6:da:d4:41:11:fb:12:e2:be:ea:69:5b:8a:e7:fd:9f:
36:64:8f:4c:0f:88:63:4e:30:31:3b:2d:4d:93:cf:39:75:3d:
da:7f:1a:e3:da:4c:f2:ff:8b:8b:28:e0:5f:71:ca:fe:c3:27:
4e:52:9d:61:78:f0:8f:9b:a3:9c:ee:06:81:2a:ff:ca:c7:d3:
2a:17:c1:54:b7:ec:28:5f:ff:72:5a:c0:7f:c6:4a:2c:58:95:
6a:0c:e9:83:04:2a:e6:fb:23:f8:e3:23:50:45:a8:08:76:47:
6d:01:7b:58:36:28:ee:b1:c7:1b:59:7f:3c:51:40:d6:7a:c0:
4d:91:20:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:21 2026 by rpki-client