Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
File: acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json)
Hash identifier: CoowOo2XmynbcZaCXn87BNdcoZPlgc27pmt758csAZQ=
Subject key identifier: B3:1A:84:F8:7D:21:53:A2:C8:BF:96:1C:65:56:E1:7E:B6:A7:D3:C4
Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Certificate serial: 01A17438FCA539869A4B79466550C20843C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
Manifest number: 1AC0
Signing time: Sun 25 Oct 2026 18:00:53 +0000
Manifest this update: Sun 25 Oct 2026 18:00:53 +0000
Manifest next update: Mon 26 Oct 2026 18:00:53 +0000
Files and hashes: 1: 6GMqaoNuem-rKgHvy1GiWJWKilw.roa (hash: nwMP8vU+agP8Pszmp+8gcADemNbpqE9xOsflD5H9lfw=)
2: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: 3ZlmCpYZE5sKCIKslmGuXkashj+cOobayS80j+Er1Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:38:fc:a5:39:86:9a:4b:79:46:65:50:c2:08:43:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Validity
Not Before: Oct 25 18:00:53 2026 GMT
Not After : Oct 26 18:00:53 2026 GMT
Subject: CN=b31a84f87d2153a2c8bf961c6556e17eb6a7d3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:78:fd:74:ab:c0:fe:55:5e:36:31:1d:65:
04:30:8c:55:a9:dc:a0:8a:9c:3f:94:d6:2c:d4:f1:
d0:be:de:45:57:d8:59:d3:34:be:4f:ef:19:f7:dd:
32:c7:a2:f6:ca:26:51:c5:db:b1:ae:73:b9:f0:ec:
22:bc:6e:c5:32:2f:ed:f2:ae:f5:cf:fb:9a:08:0d:
3d:51:47:9d:7a:7e:92:4a:80:24:71:1e:84:d8:1e:
3a:48:53:95:99:ae:01:dd:9a:60:29:22:39:41:3c:
b1:2c:99:f4:3b:fc:98:df:54:f3:1f:40:4e:8a:58:
02:58:2d:8d:11:54:2a:47:50:ed:e9:e0:60:c1:04:
7f:c8:ab:ad:8f:97:93:44:64:ea:0a:33:da:b2:6b:
7b:c3:9f:ef:5e:f0:db:85:83:e9:d8:c3:19:3b:ce:
04:e6:95:61:2d:b7:30:4b:49:ba:10:df:38:5a:c9:
8a:e5:3f:e8:48:4d:c9:72:1f:a8:da:ff:36:b5:19:
16:85:6d:8e:80:77:14:31:93:02:57:bb:1c:19:24:
2c:5e:4d:f8:35:35:77:b1:c0:b8:fe:e7:b1:34:7f:
8b:20:ae:64:34:c3:c2:2e:9b:44:88:c3:f8:62:71:
df:f6:7d:00:cf:42:b5:33:69:40:01:88:a3:7d:82:
9c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1A:84:F8:7D:21:53:A2:C8:BF:96:1C:65:56:E1:7E:B6:A7:D3:C4
X509v3 Authority Key Identifier:
keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8a:9c:32:f0:2f:44:84:6f:6a:da:06:85:45:c1:4e:3e:44:
50:0f:19:1b:b3:a7:47:12:45:3f:38:f5:cc:40:96:e2:d6:44:
69:45:51:13:3d:0d:1f:f4:93:0f:2e:a1:2e:a3:ce:46:b9:23:
57:91:e0:0f:ca:8b:16:42:72:84:0f:9e:ee:75:2f:70:13:62:
82:ec:fa:f9:92:53:20:cf:3d:5e:4a:5f:cc:83:90:0d:1d:ed:
db:26:62:38:35:cd:07:63:54:d9:86:9c:d5:50:46:20:71:62:
a5:a6:09:89:ab:d1:c6:ac:3d:67:a5:af:df:b2:91:a0:69:33:
2f:a8:69:95:2e:2e:a8:af:ac:61:a0:a7:a3:ef:2a:db:15:b1:
2f:0d:cb:a0:f0:db:e4:d9:5d:08:aa:4e:25:68:38:07:35:8c:
c1:9b:97:a0:fe:e0:68:b3:5a:fe:74:5c:4f:8f:2e:3e:fb:0d:
70:89:aa:d2:ac:c8:b6:95:a6:bf:23:cc:26:10:6a:db:e0:13:
cf:a1:39:26:76:af:73:68:cb:57:24:cf:48:37:23:28:76:e2:
d3:0b:47:de:c7:b7:0e:4d:ec:82:10:9a:1a:3a:96:18:ea:45:
e6:a2:36:86:fe:ca:bc:5a:d6:41:06:f7:b9:f4:d3:96:2a:3b:
8e:a4:51:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:07:27 2026 by rpki-client