Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: QWDiUYtMW3CDpwz/h2nefOZPUf/5LYArbvyY0kYldB4=
Subject key identifier: 0C:47:29:EE:F2:11:D6:A8:2B:38:9C:AA:75:65:11:D6:B2:0C:F5:35
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 01A0024B84DF0DBB674D1DCCE4C4AB5E9C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 22:01:38 +0000
Manifest this update: Fri 14 Aug 2026 22:01:38 +0000
Manifest next update: Sat 15 Aug 2026 22:01:38 +0000
Files and hashes: 1: 4pvzkyd81z5apygQK8vaJvAnbgI.roa (hash: MyU3Vlx3nSujsQMgN+1tqcR+k9UJKWDtwwM9zel9Hmg=)
2: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: gkmU68R7vXXTsWB2IAkC/4I7jDJp0OCxNkDoAAktyu8=)
3: JtNLS6T33Iz4vUIQlrXh2Qn6brY.roa (hash: N9H/VOJgXqokBoKRK1wd1YbpfMsGShL1Jc64VDN5pRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:84:df:0d:bb:67:4d:1d:cc:e4:c4:ab:5e:9c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Aug 14 22:01:38 2026 GMT
Not After : Aug 15 22:01:38 2026 GMT
Subject: CN=0c4729eef211d6a82b389caa756511d6b20cf535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4e:f0:b0:c9:c0:f4:b5:56:f1:96:2e:06:53:
d1:0e:57:df:11:59:a9:64:5f:ad:a7:25:b3:d1:a5:
8a:21:13:a2:7c:dd:65:11:ad:67:60:d7:50:9a:e9:
4c:5b:5d:51:1b:06:0f:97:73:1f:22:81:ea:69:38:
be:dc:92:0f:83:14:eb:fc:ea:27:a8:9c:37:e2:26:
e4:8c:30:f8:12:b2:a1:44:2e:60:06:b6:9a:28:6a:
4f:f1:3e:7a:1e:2d:59:57:71:97:f4:33:36:7f:1c:
3f:65:1a:eb:11:bf:74:0c:8f:85:bb:cf:aa:24:50:
50:25:ab:21:57:a5:cc:99:49:ff:9f:78:c8:11:0e:
bd:a9:7b:cd:6d:0b:38:19:7c:21:14:cf:55:b1:b4:
28:85:f8:1a:1f:49:e6:e7:e0:df:7b:3d:97:64:39:
44:63:21:43:96:50:6c:c4:22:1b:a1:fc:08:bd:40:
2a:fb:bb:68:a3:f9:28:41:2a:7d:99:2b:c9:d5:94:
4d:9c:0e:30:c6:02:4a:5d:a9:80:e2:13:96:da:64:
df:e5:3c:84:8c:70:da:63:cb:a9:da:19:3c:b3:ca:
3b:61:9c:cc:62:2a:fc:1a:23:11:d8:69:d7:77:13:
23:0c:14:37:a7:cc:ad:89:dc:eb:10:34:58:51:53:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:47:29:EE:F2:11:D6:A8:2B:38:9C:AA:75:65:11:D6:B2:0C:F5:35
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:73:9b:a5:ae:d7:3b:dd:1a:74:11:1e:bd:4a:30:59:b6:a5:
a3:ea:43:e9:48:6f:e1:ce:c6:7c:a6:f6:b6:e8:5e:4d:f7:44:
e9:35:da:9e:f5:aa:fd:f4:ad:fd:5f:22:69:6d:f3:d3:ab:f6:
82:39:fe:37:1e:e4:c0:f9:91:21:2d:df:a4:78:da:ce:b6:aa:
c1:5f:81:4a:3d:8e:7b:a8:cf:52:41:15:a1:36:1a:03:4d:e8:
5c:44:73:3e:26:24:c2:8f:fe:80:e9:21:03:dd:30:de:8c:d6:
db:51:a3:34:e4:94:08:bd:66:b7:e3:69:92:15:21:49:f5:c4:
13:26:c4:3c:c7:b7:e9:cb:8e:0e:da:e4:8f:31:8c:22:81:f5:
c2:df:df:be:90:8a:f9:65:43:6c:5d:aa:73:5f:8d:dd:89:79:
e2:40:31:62:c6:f8:62:47:72:e2:bf:d7:43:c2:a6:52:27:51:
26:54:46:1e:8c:40:2f:07:ea:aa:f3:e2:0d:45:09:2a:fc:5b:
d4:e0:9c:f1:b6:e7:3c:4b:dc:6d:da:2b:24:a9:5c:61:0d:42:
85:a6:4c:f3:77:a2:10:62:99:8b:e8:45:1f:f4:b6:89:77:80:
c1:4a:85:76:ea:ff:f4:3f:e7:06:ed:01:e7:e0:19:25:57:4d:
97:48:3d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:13 2026 by rpki-client