Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
File: ACzThauQKWJxijm7ez7JmqQE5cA.mft (raw, json)
Hash identifier: N6er0vRyJp44XXw9knR6amGPhkMqNao/gkB6DvyLS4o=
Subject key identifier: CE:B4:B0:53:D5:55:33:28:F6:09:ED:79:30:DB:74:DE:18:72:1C:97
Authority key identifier: 00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
Certificate issuer: /CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Certificate serial: 019E2F970F365E2336F6EEFB69A2B4D45190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
Manifest number: 0CA0
Signing time: Sat 16 May 2026 07:01:29 +0000
Manifest this update: Sat 16 May 2026 07:01:29 +0000
Manifest next update: Sun 17 May 2026 07:01:29 +0000
Files and hashes: 1: ACzThauQKWJxijm7ez7JmqQE5cA.crl (hash: Vn5dlhe7Z5So+gqu1/93HKRXvO8H0oCjmiGeUgmScV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:0f:36:5e:23:36:f6:ee:fb:69:a2:b4:d4:51:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Validity
Not Before: May 16 07:01:29 2026 GMT
Not After : May 17 07:01:29 2026 GMT
Subject: CN=ceb4b053d5553328f609ed7930db74de18721c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f7:8f:4e:55:d4:68:47:87:4c:8e:f8:c4:b3:
ec:03:cd:25:26:a7:03:e3:1d:65:fb:65:86:37:28:
0f:33:41:74:17:e1:e3:49:3c:90:0a:30:5f:a5:4b:
13:9b:83:db:c1:c0:76:9c:69:84:32:69:b3:19:34:
e4:f4:82:98:d0:fd:41:71:40:cb:01:03:20:ca:4d:
e0:1c:79:73:9d:30:9b:16:38:32:10:5e:b8:c1:a4:
8d:88:bc:df:c4:97:5f:ab:cc:14:00:ed:34:f7:7c:
ec:7e:57:b5:e4:79:b6:af:80:ff:ba:da:9c:f3:45:
1e:e1:dd:a7:e1:d9:e3:10:f9:4a:a3:9f:77:f3:35:
88:0b:d9:65:e9:ae:4b:04:48:62:77:21:04:6c:9f:
9b:bf:4b:e8:4c:af:e5:42:4f:d2:8e:5a:9f:68:22:
19:4c:b0:fa:f2:b4:ba:97:b1:75:08:84:03:50:c4:
96:18:7c:7a:b9:c3:2c:8c:f1:b8:04:66:3c:15:1a:
d4:5d:56:6f:e0:ce:e0:80:bb:8c:36:b1:64:5f:90:
04:22:1f:29:60:fa:59:a5:d9:50:65:a5:1b:b0:a2:
91:c3:9c:4b:ac:31:ca:41:3b:f9:2e:69:2c:df:37:
e7:94:26:45:c4:a8:f4:f7:f8:6c:14:76:59:10:c7:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B4:B0:53:D5:55:33:28:F6:09:ED:79:30:DB:74:DE:18:72:1C:97
X509v3 Authority Key Identifier:
keyid:00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:06:83:06:59:1c:e0:36:98:b6:33:a9:69:c9:fe:f2:8c:7e:
8a:a3:84:75:87:12:d3:43:73:9e:ff:e2:1e:a2:a6:74:57:28:
d0:7b:32:c1:ba:46:92:c6:1c:a4:3e:cc:a1:de:e5:a9:67:c3:
f8:3c:34:32:12:98:9d:a3:8b:41:9b:d4:31:7b:ec:f2:50:e1:
94:4b:33:ba:9c:20:59:5e:f0:a7:03:18:b7:25:8f:3f:35:1c:
d2:a6:2b:62:38:33:15:3d:a6:6c:b3:47:03:0d:a8:36:27:81:
55:0b:b7:a7:78:55:ea:66:98:fe:12:0e:8b:26:55:06:7f:bb:
94:45:81:00:13:db:a5:56:f6:c8:de:a8:3c:d3:34:3d:0d:07:
09:8e:bd:eb:99:f9:16:71:75:8f:d6:e4:f6:37:2d:67:c4:5a:
a8:e8:0d:87:a4:87:a8:91:0b:a7:d0:64:2a:a9:24:a0:1a:7c:
67:ff:26:fb:65:36:ba:53:7b:ce:48:df:d1:6f:db:4a:b0:25:
70:b4:8c:24:6c:83:02:4b:4a:e4:44:66:52:92:0a:f4:b6:fb:
a2:21:03:5b:85:68:31:de:71:02:ae:b0:85:ed:6a:64:8f:cf:
0c:6b:8e:e7:31:93:6b:df:7e:51:ea:f9:8e:8c:c0:71:a1:80:
73:88:f7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:16 2026 by rpki-client