Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
File: ACzThauQKWJxijm7ez7JmqQE5cA.mft (raw, json)
Hash identifier: 9JdWWfUpiF9hwCISelWRggvAlK24EnBYSN1J7JPCN9w=
Subject key identifier: 5C:4A:7A:41:28:F7:AE:2F:96:DE:FB:B8:5E:35:AB:0F:5A:E4:CA:28
Authority key identifier: 00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
Certificate issuer: /CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Certificate serial: 019D38662597DA1009EC07B8667213777E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
Manifest number: 0C20
Signing time: Sun 29 Mar 2026 07:01:51 +0000
Manifest this update: Sun 29 Mar 2026 07:01:51 +0000
Manifest next update: Mon 30 Mar 2026 07:01:51 +0000
Files and hashes: 1: ACzThauQKWJxijm7ez7JmqQE5cA.crl (hash: JKdmSXrAFzy3ft09xYPu2Z9wldRqG709e7ZWjk8zLIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:25:97:da:10:09:ec:07:b8:66:72:13:77:7e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Validity
Not Before: Mar 29 07:01:51 2026 GMT
Not After : Mar 30 07:01:51 2026 GMT
Subject: CN=5c4a7a4128f7ae2f96defbb85e35ab0f5ae4ca28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:b2:d2:61:3b:9c:f8:fd:0d:8d:87:7f:8c:
6e:d0:6a:4a:36:c9:37:bf:8d:91:b8:cf:e4:55:6c:
18:8f:7d:1e:ee:94:08:d4:71:8f:b8:03:8a:1f:64:
71:6e:50:2d:28:73:cc:f2:8a:06:0e:a5:d7:c8:18:
6d:6b:20:78:54:b3:75:20:24:09:63:0e:91:58:b7:
9a:22:80:07:37:8d:00:be:a1:53:66:aa:da:11:f1:
0f:0a:d5:7c:cc:51:66:2e:47:66:c5:07:44:46:48:
a8:0f:50:37:87:20:2f:1b:d8:6f:6d:3f:8d:25:73:
73:6c:12:0d:e4:05:c2:4d:c7:82:50:a9:ab:dc:ab:
9b:aa:2d:aa:16:ba:5a:33:6f:8b:24:d8:39:5d:2b:
c1:e9:44:d2:a8:0e:b0:ed:3b:8f:e9:7a:82:cd:56:
e5:d0:e7:9c:88:43:c2:97:f6:d0:e9:5c:b8:24:85:
ec:a4:7e:67:7e:3b:bf:e0:09:44:41:e7:fc:9f:6d:
26:c6:d8:f7:e9:6a:ef:61:55:68:b2:d3:d4:b4:b1:
f9:82:71:b5:87:64:96:b0:39:9a:b6:f3:86:53:51:
09:b3:05:50:b1:9c:0b:4b:d5:8f:56:95:85:71:11:
4f:1b:66:79:bd:2a:b0:81:33:0a:a2:de:cc:f5:ed:
c2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4A:7A:41:28:F7:AE:2F:96:DE:FB:B8:5E:35:AB:0F:5A:E4:CA:28
X509v3 Authority Key Identifier:
keyid:00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:02:26:77:af:93:68:b9:c4:1f:03:c6:85:12:78:d3:f3:f5:
10:a4:43:80:11:21:92:f2:6b:cd:f3:02:63:fc:4e:14:63:e7:
6a:89:20:01:bf:73:fe:30:e1:56:22:46:14:e6:4e:b8:36:29:
cb:60:68:c1:c9:2c:b0:a5:d9:e4:dd:bc:2c:40:27:a7:72:64:
c5:af:d5:e9:2c:ef:6a:5d:1b:e9:56:1c:b6:c1:27:5e:0f:c8:
f8:e0:1c:6a:13:7a:be:9f:c0:c9:7a:91:01:89:81:05:3d:83:
08:64:3d:80:22:d3:2c:59:b3:98:7c:84:6f:4a:f4:0c:7f:31:
18:6c:1e:64:eb:4e:91:70:8f:0f:c8:3a:2f:5c:87:d8:ce:46:
fc:9b:db:24:f7:00:24:bb:e3:92:e6:75:f7:b8:ae:7c:be:45:
b6:89:f6:1b:0e:a3:02:94:19:d7:1f:1f:d0:d2:5d:8e:19:5e:
e9:6c:3e:cd:38:7b:9d:75:5b:de:70:26:b0:97:aa:0e:ae:c6:
97:12:5a:2b:92:58:91:8a:89:4a:11:a2:aa:67:79:73:1c:d7:
ad:3c:04:6a:42:b6:5a:24:bd:1f:7b:84:4c:84:0c:15:10:ee:
49:c3:e0:cf:69:bb:ea:1e:d3:a0:f3:f7:73:e2:90:1c:33:f0:
d8:52:68:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZiWX2hAJ7Ae4ZnITd35nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMmNkMzg1YWI5MDI5NjI3MThhMzliYjdiM2VjOTlhYTQw
NGU1YzAwHhcNMjYwMzI5MDcwMTUxWhcNMjYwMzMwMDcwMTUxWjAzMTEwLwYDVQQD
Eyg1YzRhN2E0MTI4ZjdhZTJmOTZkZWZiYjg1ZTM1YWIwZjVhZTRjYTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD2y0mE7nPj9DY2Hf4xu0GpKNsk3
v42RuM/kVWwYj30e7pQI1HGPuAOKH2RxblAtKHPM8ooGDqXXyBhtayB4VLN1ICQJ
Yw6RWLeaIoAHN40AvqFTZqraEfEPCtV8zFFmLkdmxQdERkioD1A3hyAvG9hvbT+N
JXNzbBIN5AXCTceCUKmr3Kubqi2qFrpaM2+LJNg5XSvB6UTSqA6w7TuP6XqCzVbl
0OeciEPCl/bQ6Vy4JIXspH5nfju/4AlEQef8n20mxtj36WrvYVVostPUtLH5gnG1
h2SWsDmatvOGU1EJswVQsZwLS9WPVpWFcRFPG2Z5vSqwgTMKot7M9e3CRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxKekEo964vlt77uF41qw9a5MooMB8GA1UdIwQY
MBaAFAAs04WrkClicYo5u3s+yZqkBOXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUN6VGhhdVFLV0p4aWptN2V6N0ptcVFFNWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jZjVmMzAtZTdkMC00YWQzLTg5ODct
ZTIzNWQ5MGY2NDcxLzEvQUN6VGhhdVFLV0p4aWptN2V6N0ptcVFFNWNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jZjVmMzAtZTdkMC00YWQzLTg5ODctZTIzNWQ5MGY2NDcx
LzEvQUN6VGhhdVFLV0p4aWptN2V6N0ptcVFFNWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0AImd6+T
aLnEHwPGhRJ40/P1EKRDgBEhkvJrzfMCY/xOFGPnaokgAb9z/jDhViJGFOZOuDYp
y2BowckssKXZ5N28LEAnp3Jkxa/V6Szval0b6VYctsEnXg/I+OAcahN6vp/AyXqR
AYmBBT2DCGQ9gCLTLFmzmHyEb0r0DH8xGGweZOtOkXCPD8g6L1yH2M5G/JvbJPcA
JLvjkuZ197iufL5Fton2Gw6jApQZ1x8f0NJdjhle6Ww+zTh7nXVb3nAmsJeqDq7G
lxJaK5JYkYqJShGiqmd5cxzXrTwEakK2WiS9H3uETIQMFRDuScPgz2m76h7ToPP3
c+KQHDPw2FJoLA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:57:58 2026 by rpki-client