Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.mft
File: acA7C-qHQIZh8Lc459C51ou9TkY.mft (raw, json)
Hash identifier: 3Y5a1oO170ERs3yJvWU4HLRVO8cElq/OE8ANQ/UFf80=
Subject key identifier: 09:CE:BC:D8:B1:11:8C:D4:CA:8D:E6:A6:AA:9D:80:8C:DB:E0:3C:02
Authority key identifier: 69:C0:3B:0B:EA:87:40:86:61:F0:B7:38:E7:D0:B9:D6:8B:BD:4E:46
Certificate issuer: /CN=69c03b0bea87408661f0b738e7d0b9d68bbd4e46
Certificate serial: 01A08BD678A053FBF3A4BF45C08D251C16EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acA7C-qHQIZh8Lc459C51ou9TkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.mft
Manifest number: 97
Signing time: Thu 10 Sep 2026 15:01:23 +0000
Manifest this update: Thu 10 Sep 2026 15:01:23 +0000
Manifest next update: Fri 11 Sep 2026 15:01:23 +0000
Files and hashes: 1: WP1pAPn1gT-3pBILANNDcC6Hht0.roa (hash: 4KjNR2kyaEteKZKlG9S1UesNiA2a4f31T3kLjP3m3Dg=)
2: acA7C-qHQIZh8Lc459C51ou9TkY.crl (hash: H1lrX5hSLGp17Pq7R4PPX4NrR1Ft4vXZMPchtehZzNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/acA7C-qHQIZh8Lc459C51ou9TkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:78:a0:53:fb:f3:a4:bf:45:c0:8d:25:1c:16:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c03b0bea87408661f0b738e7d0b9d68bbd4e46
Validity
Not Before: Sep 10 15:01:23 2026 GMT
Not After : Sep 11 15:01:23 2026 GMT
Subject: CN=09cebcd8b1118cd4ca8de6a6aa9d808cdbe03c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:e4:74:1c:26:41:fa:11:17:9b:ab:67:3e:
46:07:86:93:9d:98:d5:d6:b5:dc:52:7c:9e:fc:ad:
c3:8e:df:cd:6e:57:01:c6:88:74:21:6c:b1:6b:e3:
75:02:cc:b2:73:2f:40:e3:94:62:1a:75:ec:f4:4f:
ba:e9:97:ab:29:0a:11:eb:47:17:19:1b:55:2d:1b:
ca:a0:64:40:e1:8e:57:34:50:88:56:14:fa:50:09:
4f:a1:30:3e:9f:e5:e5:66:fe:8d:35:20:5b:7b:f0:
a4:c8:48:3d:cd:b2:66:90:3b:63:1c:10:1b:50:08:
f3:c7:bf:57:91:c4:b4:cd:63:cf:66:dc:d7:84:52:
ce:e1:ab:03:76:5b:84:6c:fa:af:f6:89:a4:ee:b3:
45:21:41:02:99:1f:9f:2b:d9:6d:66:42:2d:e4:37:
0d:dd:02:e0:a7:f2:cc:be:58:16:2e:a0:5a:f6:89:
9c:dd:5a:3f:52:6d:5c:be:6e:29:be:7f:36:74:25:
ae:52:5e:d6:8e:ee:6e:2c:4b:14:0a:cc:3f:3a:7c:
e8:d7:bc:6d:51:cd:07:eb:1b:3f:a5:42:a0:f9:9f:
49:ba:d9:19:34:b1:34:32:49:75:3f:51:38:8a:55:
7e:37:c2:c9:7b:c7:e2:f4:5e:45:75:87:bf:fe:ec:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CE:BC:D8:B1:11:8C:D4:CA:8D:E6:A6:AA:9D:80:8C:DB:E0:3C:02
X509v3 Authority Key Identifier:
keyid:69:C0:3B:0B:EA:87:40:86:61:F0:B7:38:E7:D0:B9:D6:8B:BD:4E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acA7C-qHQIZh8Lc459C51ou9TkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2f:56:3d:a7:a1:d1:e6:a7:35:34:fd:bd:ab:3b:6c:89:9b:
7e:dd:24:a6:a6:5c:90:57:18:a6:a1:b6:ad:3d:0c:c5:4b:ab:
b0:58:1e:5f:29:eb:04:4a:31:16:24:e3:06:c0:fe:64:29:69:
95:fa:24:85:51:da:08:25:6e:2c:eb:8e:df:bc:79:6b:1d:c9:
dd:d4:48:88:1c:52:de:93:2c:24:dc:81:12:9c:75:a5:43:0f:
07:89:c9:ab:de:33:1a:6a:fb:72:2c:c0:83:7c:2c:41:1e:6e:
6e:9d:d4:89:0b:b5:89:7e:1e:6b:62:b4:1a:be:01:77:94:64:
06:6b:6f:c7:01:20:4e:f3:03:10:7e:e8:ba:7b:ff:4b:7c:93:
b2:b7:30:af:77:78:7b:bf:b0:a3:7b:1d:67:1d:99:d2:70:e0:
e0:25:92:1f:dd:86:44:74:33:3b:15:d4:57:06:bc:76:2f:45:
3b:56:5a:31:36:37:ec:ff:4d:87:e3:77:12:5a:a2:56:88:1a:
28:2a:89:e2:7e:8b:68:a2:6f:9b:60:ca:89:64:81:dc:0e:6e:
66:bf:ad:0e:be:30:6b:d8:27:e1:e1:4c:74:af:1f:86:98:ec:
84:99:9b:d6:a2:68:9b:b2:85:eb:b0:3f:4f:6a:c7:8f:7f:84:
80:3c:8e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:13:46 2026 by rpki-client