Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: WxZe29Ek+H8iadW55OB22E0i+ZgUJnNzi7qot8qaHR4=
Subject key identifier: 7E:51:47:CA:1A:C5:60:08:CC:74:0E:78:6A:84:84:28:64:4A:B2:FC
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 01A13F029F5A89D4A26B309268F1C2BC4207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 10:01:38 +0000
Manifest this update: Thu 15 Oct 2026 10:01:38 +0000
Manifest next update: Fri 16 Oct 2026 10:01:38 +0000
Files and hashes: 1: 4pvzkyd81z5apygQK8vaJvAnbgI.roa (hash: MyU3Vlx3nSujsQMgN+1tqcR+k9UJKWDtwwM9zel9Hmg=)
2: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: J3R8FtqiVUlt5d+WEQqnuOKNfQUZaGjQGwcjt+0buEY=)
3: JtNLS6T33Iz4vUIQlrXh2Qn6brY.roa (hash: N9H/VOJgXqokBoKRK1wd1YbpfMsGShL1Jc64VDN5pRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:9f:5a:89:d4:a2:6b:30:92:68:f1:c2:bc:42:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Oct 15 10:01:38 2026 GMT
Not After : Oct 16 10:01:38 2026 GMT
Subject: CN=7e5147ca1ac56008cc740e786a848428644ab2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:e8:7c:e3:4d:00:17:00:34:ef:1a:e5:51:
5b:bb:69:c9:a0:63:4e:16:90:3d:fc:93:92:8c:58:
06:80:3f:fe:c0:19:e2:d4:3c:99:12:82:fd:19:0a:
28:13:a7:3f:7e:13:27:95:73:e9:7b:41:0c:e5:c1:
84:65:6b:9a:fd:e1:09:fd:da:e1:48:d8:84:60:e8:
20:ac:12:73:5e:36:11:5e:96:f1:3c:96:c4:b4:e5:
ea:2d:8e:0b:8a:7a:71:8e:0d:c8:59:84:95:0c:37:
ea:8d:87:1d:5c:3c:cf:e9:07:3c:66:a6:dd:26:c6:
b1:c4:7a:fb:8a:ed:d2:e9:49:9d:93:95:ff:ba:f9:
c3:be:50:01:9d:98:ca:4a:9f:ef:55:03:6f:e6:ff:
04:fb:42:72:95:b0:d4:61:1b:67:c1:45:a6:df:c9:
85:ab:a0:fb:c4:fa:b1:b6:a4:80:6b:f5:8f:20:d2:
19:af:00:9f:6c:b8:8f:a0:88:e5:8d:c8:5f:bb:76:
86:d2:e4:57:e0:37:c5:03:c7:e4:42:e2:fb:f9:b0:
b9:a1:33:d5:9e:62:a5:36:80:ae:f8:f4:d0:c9:0d:
5e:26:2c:53:16:88:07:21:03:a8:89:f9:03:3d:73:
20:06:fc:87:b3:ff:0c:f7:6c:82:8f:83:a4:02:70:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:51:47:CA:1A:C5:60:08:CC:74:0E:78:6A:84:84:28:64:4A:B2:FC
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:4b:6a:26:df:e6:3c:24:ab:cc:21:80:24:cf:07:21:9f:14:
2d:2b:d3:87:64:c1:fb:91:7c:45:ab:4e:69:ac:f0:c1:98:86:
75:37:86:33:c4:d1:0a:b6:a6:9d:74:a8:31:d2:42:c5:4d:6c:
88:0a:5a:fb:71:fc:75:ec:5f:72:5f:ce:1e:08:79:a5:c4:ee:
0e:72:a8:fa:8b:d2:2f:2b:c2:d5:8d:a3:d8:58:88:4f:b2:f0:
b4:1e:1d:c3:dd:fe:92:e6:10:db:99:66:11:80:16:33:7e:74:
3f:47:8f:61:1a:1b:5e:cf:70:7f:78:0d:4a:d9:ac:63:2e:c2:
df:47:2d:07:4c:f1:c9:eb:d9:05:2e:99:34:a6:b8:bd:65:ee:
dd:8c:d1:db:56:bd:ec:4b:41:51:a0:fe:e9:5b:b3:a9:52:20:
ad:d1:79:0c:c3:66:76:08:cb:f6:2d:22:7f:96:6e:67:75:ce:
eb:4c:a3:89:5d:b8:cb:da:97:f2:87:9e:4b:d6:71:1e:97:b9:
13:96:d7:e7:8f:08:db:f2:3f:90:14:d8:e4:38:cb:90:54:69:
d6:a1:4b:87:82:0f:a4:2a:f2:a7:df:dd:84:74:63:a2:e5:ea:
4d:ad:01:0f:19:ca:3d:83:60:0d:b7:0c:aa:ba:f4:03:21:1e:
7c:2c:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:59:27 2026 by rpki-client