Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
File: acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json)
Hash identifier: ezTLUYUXOtGUwKV3OJdvDsMBIa2k6BDNJ5NON2QP/fs=
Subject key identifier: 64:F1:8B:4F:6F:F2:07:68:27:02:BF:EC:73:51:26:30:61:AD:06:B6
Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Certificate serial: 01A06F8401EDC9E9DA4B88DC006CB16BB9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
Manifest number: 1A39
Signing time: Sat 05 Sep 2026 03:01:57 +0000
Manifest this update: Sat 05 Sep 2026 03:01:57 +0000
Manifest next update: Sun 06 Sep 2026 03:01:57 +0000
Files and hashes: 1: 6GMqaoNuem-rKgHvy1GiWJWKilw.roa (hash: nwMP8vU+agP8Pszmp+8gcADemNbpqE9xOsflD5H9lfw=)
2: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: HxsFX7hCpCKKj84py1SsLMJvifNVlrwc9qd37WuUEcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:84:01:ed:c9:e9:da:4b:88:dc:00:6c:b1:6b:b9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Validity
Not Before: Sep 5 03:01:57 2026 GMT
Not After : Sep 6 03:01:57 2026 GMT
Subject: CN=64f18b4f6ff207682702bfec7351263061ad06b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:81:39:3e:c2:9f:75:98:60:b0:10:05:45:
1e:b1:66:da:46:8c:79:b4:ad:8c:44:b9:be:79:2b:
01:ae:fd:90:44:77:40:d2:52:57:18:01:94:b9:8b:
53:69:15:8d:94:1e:6a:a1:ae:ca:b9:f5:22:fc:32:
c3:6b:1a:3f:c5:0c:cb:e6:fa:b3:9b:50:43:8a:98:
90:8f:68:d5:5f:41:ba:72:15:dd:66:c8:d8:8a:61:
83:a6:ce:6a:be:34:74:69:c2:de:03:2d:c2:57:e8:
b7:75:59:a2:fe:09:0e:b4:ea:a3:02:57:54:13:6d:
aa:79:58:fe:a3:fc:dc:60:a5:ff:52:75:87:16:ec:
9c:87:9c:ac:aa:ec:db:d5:4a:c1:d6:b2:c8:85:cc:
70:73:21:d1:4c:1f:a3:91:9d:17:2d:a7:f3:e9:37:
d3:f2:23:26:75:5d:a3:8c:97:cb:37:c7:75:4c:e8:
c2:7c:9c:e7:68:f4:df:d5:fa:c5:c3:98:c4:1e:11:
ac:91:09:5d:fc:ea:c3:7c:e0:df:6e:f3:cc:22:db:
70:2f:de:2b:ba:e9:c2:e7:08:b7:43:0d:8b:16:5d:
c9:56:f9:5c:c4:11:6d:32:8f:d6:9a:11:77:82:8b:
5b:e2:17:c3:98:ab:3a:9f:4f:48:22:3b:b2:09:9e:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F1:8B:4F:6F:F2:07:68:27:02:BF:EC:73:51:26:30:61:AD:06:B6
X509v3 Authority Key Identifier:
keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ba:b9:77:b6:9d:96:32:f0:f2:f1:34:29:37:5c:19:82:db:
71:3f:1f:a2:0d:30:56:76:f6:12:26:ab:9c:85:69:b6:d7:a2:
25:23:2e:4b:9d:a2:c0:32:36:e7:07:22:da:69:8e:d8:75:93:
07:d8:f3:fa:97:eb:d5:87:e1:61:85:57:2b:08:d9:1b:fe:4b:
26:04:1e:85:31:54:47:31:27:6f:cd:a9:24:28:3b:65:0d:41:
3c:3d:6f:fa:aa:aa:fa:82:8c:23:3e:d9:84:c0:9f:b6:6e:2c:
68:8e:da:8b:dc:03:98:2d:34:b4:2d:e8:d4:b6:48:13:f3:9c:
b4:c3:0f:92:b4:58:80:f7:cd:9c:9b:a4:a5:82:61:3d:01:92:
92:39:ab:e6:51:5e:cf:2c:14:20:2f:56:4c:b2:11:2f:ca:c1:
fd:aa:a3:c3:1e:0e:24:da:7d:d8:10:c1:d7:15:2a:3b:8b:32:
96:41:1c:91:05:f5:5c:4f:48:02:58:17:bc:3d:f1:60:dd:03:
56:05:15:79:44:80:a9:c8:98:83:91:f9:72:1f:d6:d3:e3:ad:
7f:50:64:5c:d6:22:0c:31:13:ab:9c:a1:bc:1e:ba:c6:25:65:
7f:7d:fb:44:80:cc:06:b4:71:da:00:f5:f0:2c:87:d8:dc:85:
9a:58:de:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:08:19 2026 by rpki-client