Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
File: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json)
Hash identifier: iz9aSL8C+R+Jg7A3WRqueJ49OthsUzXoI/s85OgdpJw=
Subject key identifier: 31:39:02:EE:79:E8:15:0D:26:04:F9:7D:F9:B4:6F:44:F6:CD:76:8E
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial: 019D3789859870F12B1C851287D25F903733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
Manifest number: 0EBF
Signing time: Sun 29 Mar 2026 03:00:52 +0000
Manifest this update: Sun 29 Mar 2026 03:00:52 +0000
Manifest next update: Mon 30 Mar 2026 03:00:52 +0000
Files and hashes: 1: 2N3mFTgRGbmrw_7vATxV81Kq2dE.roa (hash: /FX8Wxrk3OXbha8szh70fBjGa2R8m1TJYbOuwC3Rhiw=)
2: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: GIcmL7Ltb/oZfmw9c95myydcPvs2B767RswtOCmUBQg=)
3: JfAxYSslNRgXCvxTlHkjURGg_tA.roa (hash: 1wkFd6nRFSOKqVQcfvyLq2KKje8vaNBC709RUWhAcGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:85:98:70:f1:2b:1c:85:12:87:d2:5f:90:37:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Validity
Not Before: Mar 29 03:00:52 2026 GMT
Not After : Mar 30 03:00:52 2026 GMT
Subject: CN=313902ee79e8150d2604f97df9b46f44f6cd768e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:91:62:ae:60:52:24:96:6a:76:fe:1c:00:
62:a7:83:b2:96:15:e2:17:24:b4:d0:8a:85:7c:7b:
3a:15:da:60:40:cf:89:da:cb:32:ba:c2:0a:b6:49:
a8:8a:c7:26:66:27:3a:97:e0:15:83:6e:21:cd:d8:
97:51:20:22:4b:d1:32:8c:f5:28:cb:3d:05:3e:db:
03:70:99:56:a5:2a:67:47:a0:38:1b:ea:c2:3b:24:
ed:cc:a8:8a:20:db:48:62:08:7f:19:e0:64:63:16:
be:da:51:66:a9:7d:e6:72:0c:1d:40:22:d8:06:83:
68:ee:b6:8b:61:ab:15:66:2e:60:06:d2:79:3b:2e:
d4:39:82:85:37:31:69:bc:f4:cf:c5:ff:c3:ca:56:
e3:39:53:14:fe:a8:4f:8a:88:2c:96:af:e3:e4:dd:
ac:89:dd:c5:44:66:a2:f9:c1:12:e5:2c:44:43:2d:
47:a8:23:f1:86:82:9d:55:af:87:d9:ac:07:cc:bb:
bd:2b:f4:43:ab:d5:a8:f9:43:02:1c:ff:19:30:a7:
69:07:9a:69:7e:de:71:45:89:6a:5f:8f:4e:e7:1e:
f0:89:60:13:fe:10:87:8a:01:cf:90:cf:90:4c:d1:
7e:4e:a3:9e:bb:8c:08:dc:c3:34:45:b5:9b:d4:37:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:39:02:EE:79:E8:15:0D:26:04:F9:7D:F9:B4:6F:44:F6:CD:76:8E
X509v3 Authority Key Identifier:
keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:5d:d2:b6:0f:81:44:43:8f:98:c4:d6:40:d4:5a:e6:0d:b2:
98:1d:a3:1f:82:77:57:83:08:fd:05:2e:f7:d2:5b:87:9f:45:
bc:3d:72:ab:f3:3f:e6:29:9c:b9:c8:5c:fb:9f:75:9f:bc:fb:
2e:c4:9f:34:d8:ef:28:4c:39:d5:68:16:fb:d6:cf:da:07:8f:
8c:6e:42:c4:24:d6:1e:f7:5a:bf:33:3b:8d:25:66:2c:19:d1:
7a:cb:23:98:ce:11:3b:63:06:9e:6f:a4:17:d0:65:7f:45:07:
6c:74:d6:e0:89:b3:4e:91:30:e4:6d:8d:d9:e2:60:30:9f:e9:
a7:39:e5:2d:85:5c:f7:b6:2d:ca:1d:b1:f0:af:ea:d1:ff:51:
7c:2f:7d:f9:08:c8:08:92:36:79:83:87:b0:07:7e:0e:fd:d8:
c0:a7:a7:ee:0a:85:59:45:d7:9a:c0:a0:af:d2:14:22:7f:79:
5f:fa:47:51:49:cf:18:9c:df:ee:76:4d:15:db:92:8a:c9:03:
c5:df:c0:57:c9:b8:d0:4c:d6:63:02:ee:22:80:d6:f5:3c:0c:
c5:ae:60:1d:ff:e2:d0:c0:47:6c:ac:2d:7b:86:70:fb:48:2f:
23:fa:1c:0f:9b:5d:a2:f8:19:54:ba:66:dd:63:e2:d5:9f:96:
8f:3f:81:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:52 2026 by rpki-client