Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
File: ACzThauQKWJxijm7ez7JmqQE5cA.mft (raw, json)
Hash identifier: 2kBj7tj1jiuz5vD5RwX8Ro22bwJLtllF1J3arOTOKos=
Subject key identifier: 55:40:83:CE:DE:2F:D1:A8:49:30:D4:96:7A:63:64:F1:33:40:F5:44
Authority key identifier: 00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
Certificate issuer: /CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Certificate serial: 019F19431A68E83F444B91BB65657598BD2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
Manifest number: 0D19
Signing time: Tue 30 Jun 2026 16:00:55 +0000
Manifest this update: Tue 30 Jun 2026 16:00:55 +0000
Manifest next update: Wed 01 Jul 2026 16:00:55 +0000
Files and hashes: 1: ACzThauQKWJxijm7ez7JmqQE5cA.crl (hash: hkZFL+OLquFn7OTM18k7OC3X2UbvjC/1UF0DZbvOtyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:1a:68:e8:3f:44:4b:91:bb:65:65:75:98:bd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Validity
Not Before: Jun 30 16:00:55 2026 GMT
Not After : Jul 1 16:00:55 2026 GMT
Subject: CN=554083cede2fd1a84930d4967a6364f13340f544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:2f:4a:45:48:53:0d:0d:69:cf:ba:8c:c3:
cd:4a:2a:c6:8e:87:6f:5d:76:2d:b0:0b:7c:10:d3:
52:d7:67:7e:cb:46:2d:bb:30:3a:71:ed:a4:2e:77:
fc:a2:a3:06:bc:27:1c:05:89:cb:83:d2:42:13:9c:
b3:f5:8b:8f:4c:9d:b0:f4:e2:30:aa:9c:81:9f:31:
1e:10:28:94:42:fd:79:4d:90:4e:79:a4:73:60:2c:
f0:15:81:10:a1:5d:7e:06:89:2f:f5:08:e1:2d:88:
27:c9:09:1e:3a:e5:40:91:81:1f:7d:58:d8:19:56:
7b:84:9a:45:25:f5:ed:c0:8f:96:f0:cc:43:50:c1:
f5:0a:b1:9e:b9:61:88:4c:48:7b:b8:58:7a:51:65:
87:58:8b:90:ff:d8:9a:11:52:75:42:df:22:08:97:
2c:8a:2c:f2:66:5b:7d:42:35:4b:5e:4e:dd:90:0e:
0b:46:5d:59:17:6e:67:aa:bc:0b:6e:6d:9b:37:53:
80:b0:ee:4e:9f:2f:27:14:2a:51:42:73:b5:a6:67:
65:cd:e4:d7:94:2a:97:97:61:35:a6:0e:da:ca:6b:
23:19:0b:90:4c:70:79:ef:77:3d:89:26:10:e4:1d:
f2:71:99:20:f1:21:3d:c1:4c:32:de:cb:be:78:9a:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:40:83:CE:DE:2F:D1:A8:49:30:D4:96:7A:63:64:F1:33:40:F5:44
X509v3 Authority Key Identifier:
keyid:00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:64:48:ee:96:83:81:50:db:c3:46:c9:2d:55:84:bd:cf:5e:
0b:1d:32:6f:29:f3:59:dc:3b:2f:95:5a:f1:ff:c0:a3:d6:9d:
4a:12:bc:e5:33:aa:f8:ca:11:e3:6a:53:61:df:ea:64:f1:06:
d4:b0:dd:8f:0c:5e:b3:f9:37:99:74:3d:4f:29:8f:6b:ad:96:
f2:40:84:40:a6:b2:a0:07:af:95:8f:d4:04:8d:17:35:c5:03:
46:55:54:e3:7f:74:37:59:ee:11:a5:fc:84:bc:e4:68:76:eb:
0d:4d:c9:dd:fc:01:28:d6:b7:b5:30:10:8b:d4:4f:f3:03:54:
5f:3f:69:da:93:0e:fc:bb:d9:b1:50:bf:3e:b5:0b:1f:ae:e5:
56:96:be:11:2a:3d:07:45:b5:c2:9f:28:65:e3:c3:9e:03:89:
d7:4b:60:e4:9f:6d:c5:2c:0b:4c:b9:5e:48:60:0f:31:c5:f6:
ae:84:1e:e7:59:e1:da:1a:aa:b8:aa:b3:5e:be:eb:ba:1b:a7:
a0:f2:ab:a9:a3:94:c3:a5:f4:3c:89:2d:4f:57:6f:44:93:27:
f8:c3:b9:4f:36:fd:90:9b:83:5c:5b:4e:c0:33:63:9a:fc:dc:
02:46:23:5a:1b:2a:91:4e:d8:96:73:90:be:20:b3:0a:2c:a2:
8d:6f:ba:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:23 2026 by rpki-client