Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: zi5JzmH7rSYXtfvTsmY5EuGcbcyCjeYone2eUie/3wQ=
Subject key identifier: AF:A6:9C:6E:4B:F9:A6:64:C1:27:97:51:2E:A6:22:1D:0B:5D:C3:EF
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 019E30E0D4BC16D2DBB158A2377B26A1095A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 13:01:41 +0000
Manifest this update: Sat 16 May 2026 13:01:41 +0000
Manifest next update: Sun 17 May 2026 13:01:41 +0000
Files and hashes: 1: 4pvzkyd81z5apygQK8vaJvAnbgI.roa (hash: MyU3Vlx3nSujsQMgN+1tqcR+k9UJKWDtwwM9zel9Hmg=)
2: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: vqELFfqNPZhmYHFLNgfo+ke3vhSGMSXkYk3Liok1euo=)
3: JtNLS6T33Iz4vUIQlrXh2Qn6brY.roa (hash: N9H/VOJgXqokBoKRK1wd1YbpfMsGShL1Jc64VDN5pRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:d4:bc:16:d2:db:b1:58:a2:37:7b:26:a1:09:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: May 16 13:01:41 2026 GMT
Not After : May 17 13:01:41 2026 GMT
Subject: CN=afa69c6e4bf9a664c12797512ea6221d0b5dc3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:af:41:89:e3:de:06:c6:be:f3:62:f8:75:ba:
05:4d:bd:dc:fa:3a:a1:33:1f:fa:68:d3:1b:1d:d3:
fc:da:c7:79:b3:79:7a:52:5b:69:39:06:c4:32:21:
d9:1b:9c:87:b1:b9:40:c8:13:c4:f7:d7:10:44:68:
7b:a7:80:31:14:82:00:20:19:b9:28:60:bf:6c:ee:
09:79:40:a0:64:27:34:d6:81:9a:20:e7:3c:75:89:
eb:32:28:11:31:8a:a5:00:ad:a6:76:4f:40:c6:f8:
d1:03:84:42:ea:c0:00:7f:fe:7c:dd:45:b2:f3:2c:
4a:59:ac:68:95:f3:40:9d:fc:32:cd:89:d8:a7:dd:
c3:fc:55:69:48:3c:86:7a:a0:3f:e1:00:0f:fd:bd:
45:c5:cc:c9:77:c5:cd:7f:07:03:b8:63:f6:c3:e9:
0a:4c:29:3b:1c:ba:33:c1:5a:03:95:d8:b7:9e:27:
3e:41:dc:6b:86:57:65:cf:15:e1:74:87:d8:ea:44:
e3:d1:e2:b8:77:c8:44:49:d1:a6:38:8a:fc:a3:49:
dd:c3:6b:a6:43:ee:47:11:95:74:d5:20:d8:9c:5d:
49:78:a0:98:fb:86:f3:aa:86:5b:f8:26:3b:c3:e5:
78:a3:8e:2a:c7:f5:85:aa:31:fe:70:4c:7a:c4:de:
df:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A6:9C:6E:4B:F9:A6:64:C1:27:97:51:2E:A6:22:1D:0B:5D:C3:EF
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:34:cf:8e:71:9d:6d:88:18:76:16:c1:1b:3a:b1:6c:89:33:
ad:fb:a3:9c:c6:85:eb:ee:1e:76:5c:c7:1c:48:b6:a0:20:40:
48:90:73:2c:e4:a4:c3:4d:45:73:cc:6c:a4:a3:1d:ac:d5:52:
08:21:8b:73:7f:f0:95:f4:7e:74:a5:71:af:87:b7:2e:23:73:
97:dc:62:a5:c2:bc:a4:f5:22:80:cd:10:94:7e:c1:40:c6:03:
82:9c:ea:f5:37:78:9a:d1:b5:0a:92:94:f2:1d:23:50:74:1e:
df:e0:1d:73:96:07:79:95:24:f4:d7:51:de:b7:8f:88:42:a7:
e0:1b:5d:a4:22:14:ef:c9:a7:36:59:a2:cc:a1:17:34:91:7f:
66:01:3c:0b:3f:18:cf:69:fb:69:fb:c2:16:f3:4e:b7:cd:a8:
d4:56:c1:d4:19:72:89:c7:f4:69:b8:40:38:38:1c:f4:e2:88:
4f:ff:91:c9:fe:5d:45:31:62:46:de:d0:7d:3d:f8:16:5a:d2:
db:0a:85:b3:b1:24:75:7b:cc:e2:38:1f:05:a5:2a:82:c7:98:
fb:82:39:4f:a0:ad:07:80:9a:97:2d:ac:41:ab:17:9c:9f:a7:
2b:18:de:ff:f1:82:1a:0b:f0:93:2d:97:bf:cb:45:de:7f:bb:
02:3e:ca:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:35 2026 by rpki-client