Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
File: Ac8qcbLHv1QcbMBBUc0CB402mSY.mft (raw, json)
Hash identifier: HGR3OyNKfxcWgcvjPv+9XBrlaTbAPuRCVmlERtoQk9g=
Subject key identifier: 5E:59:D7:3E:BA:B2:DC:33:1B:B2:51:C1:DA:34:2E:41:B7:85:66:8E
Authority key identifier: 01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
Certificate issuer: /CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Certificate serial: 01A1893FD7CDB710CA8B921910822A3ED0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
Manifest number: 07D2
Signing time: Thu 29 Oct 2026 20:00:24 +0000
Manifest this update: Thu 29 Oct 2026 20:00:24 +0000
Manifest next update: Fri 30 Oct 2026 20:00:24 +0000
Files and hashes: 1: Ac8qcbLHv1QcbMBBUc0CB402mSY.crl (hash: 4TmhVVY5ysPYd+wrWPZKxY6eCIKzysuuNDSQSGI+TOA=)
2: de6SqIVP8alMMy8fNgVic-QA6hE.roa (hash: CQCnEBgMc/4fN4+tzBcs/X0zDyrAJoufFx6PaORgCqw=)
3: ldjE34Y5UHyQm9UPuMRXHapL2tQ.roa (hash: l2HlPn4UDyIXeMSyP3+IwTe3CYld8micBXtqct5ZxHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:3f:d7:cd:b7:10:ca:8b:92:19:10:82:2a:3e:d0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Validity
Not Before: Oct 29 20:00:24 2026 GMT
Not After : Oct 30 20:00:24 2026 GMT
Subject: CN=5e59d73ebab2dc331bb251c1da342e41b785668e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f3:8f:1f:d1:41:68:e6:16:15:7c:f0:fd:6d:
69:9c:08:b2:80:1f:c7:12:13:7e:ca:34:71:55:fd:
4d:1f:44:0d:da:37:53:38:d2:65:50:dc:06:d0:29:
3f:14:24:c2:04:d1:02:eb:43:67:38:6c:12:84:53:
1d:af:74:df:e0:7f:93:8f:e7:19:22:b5:43:2b:a2:
02:03:34:5a:a0:82:59:bb:99:c2:32:fe:81:21:ca:
31:8a:df:9b:ab:75:0b:9b:d2:98:cf:a1:fb:ae:75:
5a:42:c7:7b:45:af:81:2a:91:a7:d1:2c:a8:6f:43:
9b:f2:14:21:ff:38:80:ea:6b:9f:45:2b:f2:16:ff:
8b:62:12:ce:8a:88:ba:60:27:da:ca:c1:eb:95:55:
a4:e5:ef:b0:14:c5:6b:6d:aa:1c:bc:f9:82:4c:0c:
3d:9e:67:23:48:1b:9d:94:1c:40:80:7e:ab:e2:9c:
2a:20:53:df:53:19:fd:51:40:da:57:8a:25:d8:26:
dd:ba:fe:bc:ff:51:be:e7:50:a0:b4:10:97:73:ab:
f5:35:74:b7:98:ab:c6:c6:ce:3d:07:ed:d1:ab:96:
d0:ed:8b:15:83:4a:8a:e4:e1:da:97:83:c3:b3:09:
cf:31:2f:83:c0:dd:21:c3:93:fd:d6:03:d4:2a:e3:
45:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:59:D7:3E:BA:B2:DC:33:1B:B2:51:C1:DA:34:2E:41:B7:85:66:8E
X509v3 Authority Key Identifier:
keyid:01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ed:e9:0c:96:19:07:97:bb:05:50:96:e1:2a:40:71:a7:62:
6c:72:2b:ba:f2:ab:97:a9:4d:53:91:7d:31:4e:df:b5:47:77:
c9:08:8b:42:0b:15:dd:dc:ca:60:2e:7a:4a:a0:6c:50:93:4d:
ab:46:1f:70:40:5d:c1:5a:a3:8f:8b:e1:cc:e8:94:7d:52:e1:
dd:b5:3d:e4:fb:46:e5:bf:87:25:89:fa:e2:a8:9e:77:0b:99:
36:5f:ea:8a:56:4f:61:e9:92:95:5d:50:f8:72:0e:d9:c1:77:
c0:97:3b:5d:70:c3:93:84:86:ea:d3:21:4d:eb:a2:d2:ac:26:
5f:64:b1:64:c3:e5:f4:55:25:e2:83:1d:45:8b:e3:ef:6d:85:
f2:22:a0:36:d0:2b:26:c5:60:8b:bf:09:4f:88:e5:4b:55:f6:
7f:76:63:0a:0d:44:b0:df:8e:e5:1c:87:6f:15:4f:49:9a:a0:
a2:82:9b:98:3b:89:ff:f6:ed:bd:9a:d7:cb:c9:74:b4:3e:d4:
2d:a5:c9:2b:90:3a:ae:b8:7f:d1:07:59:84:6c:0d:20:e8:ac:
73:57:c7:a5:7e:68:52:cb:72:a9:6c:f4:2b:55:32:d0:98:7e:
32:d3:44:b0:27:ea:8d:ea:0c:c3:b3:03:d2:cb:46:6f:79:66:
ba:4e:a8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:06:52 2026 by rpki-client