Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
File: AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft (raw, json)
Hash identifier: L5xTua4DupYSNc7vd3mRD3uRSso0rHBCeuFRAJfR6rs=
Subject key identifier: 20:F8:EB:A3:DD:07:76:99:95:94:66:7E:9A:13:11:F1:82:12:11:23
Authority key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
Certificate issuer: /CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Certificate serial: 019D3A8A66CD0833D9E64D36C6670C5E5024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
Manifest number: 1223
Signing time: Sun 29 Mar 2026 17:00:41 +0000
Manifest this update: Sun 29 Mar 2026 17:00:41 +0000
Manifest next update: Mon 30 Mar 2026 17:00:41 +0000
Files and hashes: 1: AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl (hash: drJPPrvUUlbNUR0ux0o2tWfUHGzunlQp3CLbFwmJV5c=)
2: xGSQtxBpS573s4zPyTFpERUQH7o.roa (hash: 0qhIt2oCl1BBlwABDamfzBFWIJOyQt4+H4muS8E2+74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:66:cd:08:33:d9:e6:4d:36:c6:67:0c:5e:50:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Validity
Not Before: Mar 29 17:00:41 2026 GMT
Not After : Mar 30 17:00:41 2026 GMT
Subject: CN=20f8eba3dd0776999594667e9a1311f182121123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:e0:1e:c8:38:c3:a5:00:41:bf:26:17:65:
68:ed:02:df:ac:4b:d4:22:25:27:ee:0a:a4:73:d3:
5a:8e:ca:44:89:82:e2:62:5e:a9:40:4c:26:77:3a:
81:1e:8f:84:db:58:5f:94:01:8e:c2:8f:2d:1f:2a:
b4:d0:46:e3:7c:b0:bf:77:a5:4a:ab:33:1f:78:8e:
af:03:c0:a8:03:6d:d5:a3:39:3f:7a:9a:3b:7f:02:
a5:9b:3f:f9:c5:47:3a:27:00:bd:e9:30:00:15:a9:
67:dc:47:cc:3b:e4:9f:88:e8:fb:a9:d8:14:9a:61:
c5:ce:81:3b:ef:b6:2e:10:fe:5d:37:73:f9:f3:e5:
a5:d4:b4:75:b2:8d:c6:30:47:b5:f8:5d:09:96:8b:
c7:f6:2e:65:5e:a9:e7:ee:0a:2c:2f:bb:de:b0:40:
e1:91:66:f0:ae:43:e2:d6:d6:b8:89:bc:b0:2d:47:
3f:47:dc:27:50:06:5b:e9:13:61:b3:a3:73:d0:d4:
85:d7:6c:2e:2f:a8:79:87:79:ba:8a:a6:ee:9f:33:
88:47:8c:ca:d9:df:59:ba:0f:27:62:3c:bf:4a:5a:
1b:13:5f:96:c4:3c:b3:3a:ff:d7:a9:75:88:66:53:
47:67:be:91:28:b9:a5:46:00:12:82:3d:c7:e5:88:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F8:EB:A3:DD:07:76:99:95:94:66:7E:9A:13:11:F1:82:12:11:23
X509v3 Authority Key Identifier:
keyid:01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c4:ee:36:cf:f8:f3:35:be:c6:85:20:91:e0:f4:57:a3:1f:
6c:30:3c:45:7a:fa:dd:58:87:88:b2:17:09:cb:a1:5f:b2:55:
4b:0e:0d:cc:03:f6:d9:3e:b7:e3:4b:a2:6e:89:ff:3d:d5:f9:
06:2f:11:b4:20:c7:55:35:53:9a:07:60:ef:27:ef:c5:0f:db:
b0:f0:fe:87:99:58:09:8f:b3:6d:1f:c7:e3:c4:c3:91:af:1c:
c9:a7:d3:57:59:a1:a8:eb:50:1d:7b:db:6f:4c:9d:fb:f6:ac:
56:1c:52:d6:68:e2:79:4c:f1:f6:f1:d9:75:39:1e:0a:59:a6:
6f:2b:dc:8a:dc:55:d6:34:fc:33:45:37:43:f4:1c:01:84:6d:
b7:34:d8:73:23:0e:b7:ac:5e:50:3b:7f:b7:4c:48:20:33:97:
5b:b3:2a:25:72:4d:5e:44:5a:e0:7a:a9:be:f9:ed:ef:67:e0:
ad:a1:0c:00:54:85:2c:e6:17:b8:65:fd:7f:09:ee:97:99:66:
04:c9:99:92:c0:34:bc:59:0b:b5:d4:08:3f:98:c5:59:3a:93:
b1:90:3a:04:66:65:f0:3c:1c:91:46:d6:64:de:b7:7b:d2:e8:
58:cb:c9:69:79:10:95:ef:ac:f9:48:6a:63:58:8b:58:4d:70:
e8:a1:8e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:45 2026 by rpki-client