Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
File: Ac8qcbLHv1QcbMBBUc0CB402mSY.mft (raw, json)
Hash identifier: RQ9KoKZPZf1FQId9ysMvhIUZmJkDs9jxa/NekAEA8Rc=
Subject key identifier: DC:86:6D:36:CF:20:0D:15:B0:3A:06:A1:98:19:D8:14:26:D0:43:6F
Authority key identifier: 01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
Certificate issuer: /CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Certificate serial: 01A08E323CF177841ECB905001EF7CB3C9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
Manifest number: 0750
Signing time: Fri 11 Sep 2026 02:00:52 +0000
Manifest this update: Fri 11 Sep 2026 02:00:52 +0000
Manifest next update: Sat 12 Sep 2026 02:00:52 +0000
Files and hashes: 1: Ac8qcbLHv1QcbMBBUc0CB402mSY.crl (hash: dMEV90TFgtdAGMmwePWADeRhn6Vcnr37kJ1u934XLao=)
2: de6SqIVP8alMMy8fNgVic-QA6hE.roa (hash: CQCnEBgMc/4fN4+tzBcs/X0zDyrAJoufFx6PaORgCqw=)
3: ldjE34Y5UHyQm9UPuMRXHapL2tQ.roa (hash: l2HlPn4UDyIXeMSyP3+IwTe3CYld8micBXtqct5ZxHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:32:3c:f1:77:84:1e:cb:90:50:01:ef:7c:b3:c9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Validity
Not Before: Sep 11 02:00:52 2026 GMT
Not After : Sep 12 02:00:52 2026 GMT
Subject: CN=dc866d36cf200d15b03a06a19819d81426d0436f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:31:96:70:b2:b6:f7:50:d4:7d:78:11:64:
7c:0c:66:7a:92:e0:cf:c0:a2:f9:a3:33:81:5e:36:
27:0d:08:6e:e4:dd:48:43:5b:d4:62:8c:25:cd:fe:
d6:d6:3c:7e:ad:28:4e:80:1c:4b:84:e0:e3:e2:e8:
b6:ce:31:73:54:10:f7:ea:aa:f1:09:b2:83:50:3c:
aa:85:8b:1e:dc:87:ea:8a:8e:b2:ab:60:0d:a0:3b:
32:ad:4a:86:46:cc:56:9b:7b:9e:5f:65:7b:fa:fc:
68:30:26:77:5d:de:c1:1e:8d:21:53:9c:1d:61:16:
0a:f7:a5:4a:4c:37:91:56:1f:d7:e0:59:73:76:93:
3b:ba:f4:a4:48:b9:b1:e0:6a:5a:d5:b4:bd:94:22:
6d:14:f4:6e:3b:28:27:72:40:f2:09:e1:32:6a:9c:
b6:cb:72:8a:a0:89:69:84:ad:14:f1:b3:5a:4d:e7:
04:71:32:7b:8a:fc:a1:96:96:c1:6c:ca:80:2f:fb:
04:1e:c3:50:38:e3:bc:68:93:57:54:0b:cb:82:7d:
17:4c:ae:9b:89:ca:f8:1a:43:f1:f4:3b:d6:09:3b:
68:30:08:27:cb:1c:1c:5f:2f:83:84:26:2e:80:87:
32:cd:7c:f8:eb:46:96:30:68:49:5e:91:38:ba:9d:
fd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:86:6D:36:CF:20:0D:15:B0:3A:06:A1:98:19:D8:14:26:D0:43:6F
X509v3 Authority Key Identifier:
keyid:01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0f:f0:0b:be:24:cf:c6:da:82:1d:c1:66:56:e8:11:90:be:
b5:59:5c:0e:4a:7c:e3:13:0d:45:1d:1d:21:a4:90:2d:7a:08:
db:13:d1:89:81:1b:62:73:e7:fb:c7:40:7b:98:1d:9b:7d:73:
0b:55:bc:96:a2:e1:2c:8f:40:cc:1c:15:ee:5b:9e:26:fc:ae:
92:8e:36:0d:36:85:e5:16:ec:14:d4:a7:3c:f1:08:30:b9:66:
c1:e6:10:fa:6c:77:4d:6b:35:52:e2:81:a3:b5:f5:eb:ae:9e:
c1:d3:7f:33:f2:ae:82:2b:1b:6c:ab:38:e9:88:5c:a2:e2:7e:
15:b9:27:31:1b:af:32:65:b7:19:85:6e:4e:0d:99:2e:ac:20:
be:37:ca:c2:fa:c1:d8:c1:cb:a0:cb:ce:b5:c4:74:1c:d4:b5:
a0:e8:dc:40:35:43:6d:0c:ec:34:dd:d1:ff:c4:8a:f6:74:36:
a8:92:e5:0e:a0:4d:e2:f3:93:11:bf:3c:77:61:81:07:fc:04:
90:44:c0:dc:e6:f1:01:58:5b:d2:da:0f:cd:5e:2a:9f:7c:27:
c6:bf:f9:08:c2:aa:8f:6d:e3:40:e1:90:6e:99:63:66:b9:28:
0b:e4:cf:0a:03:6e:60:cc:49:97:03:83:03:fc:4e:b3:c4:74:
81:12:3f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:37:58 2026 by rpki-client