Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier: GRPsDf3L1qKj26sLM2e1f4M7WU3YE4JwZVEecmFR/JY=
Subject key identifier: 3B:41:F9:43:2F:79:71:08:78:F0:10:6F:06:FE:54:C8:4E:A4:3C:53
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial: 01A08A556521DA65055F005954636D79E6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number: 08D2
Signing time: Thu 10 Sep 2026 08:00:47 +0000
Manifest this update: Thu 10 Sep 2026 08:00:47 +0000
Manifest next update: Fri 11 Sep 2026 08:00:47 +0000
Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: x6HXQcRYfU3cEN/yzEeVRUQPKHQn9D0KG/6AKd39K00=)
2: W2i76MrSQ6wt7tAiZdLDluFBtFM.roa (hash: x2yrgDtcnU02x3m/qpzHhyg+W4mYTMS/IQSYEXZQTTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:65:21:da:65:05:5f:00:59:54:63:6d:79:e6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Validity
Not Before: Sep 10 08:00:47 2026 GMT
Not After : Sep 11 08:00:47 2026 GMT
Subject: CN=3b41f9432f79710878f0106f06fe54c84ea43c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:0e:f0:cd:75:bf:ad:ed:f9:bf:47:a8:40:
22:32:0f:b5:41:5d:27:3f:51:c1:f3:76:60:68:0b:
5b:c1:9e:6f:16:97:2d:f2:8a:07:14:0d:a1:97:23:
13:5d:5a:dc:7a:b8:2e:f7:e9:b1:9b:4e:64:24:c7:
07:63:96:d5:29:b1:a0:66:1e:55:12:f6:1e:68:73:
20:21:84:2c:33:1b:a2:2e:5d:f9:2b:51:cc:c6:ab:
b6:ef:6c:00:0f:4c:74:00:02:0b:a1:b5:e9:60:08:
91:32:d5:29:37:ab:aa:a3:78:09:6a:e7:74:7d:1a:
2f:69:8a:8d:6c:15:63:e6:5f:76:e8:1d:12:45:8b:
fc:5f:2b:fa:c8:96:fd:a6:6c:89:4b:71:25:93:ae:
ff:cc:ea:af:8b:9a:7e:06:9f:ac:45:76:16:b7:74:
8f:98:89:9d:26:5d:61:9a:11:11:8b:bc:d4:89:8b:
b2:3e:de:36:22:67:8f:c1:42:de:fe:08:d9:6d:92:
13:38:1c:58:7a:27:7d:84:27:21:8b:5f:0c:83:16:
d7:f6:6a:b2:8a:eb:61:92:3c:34:0e:b8:7b:e8:71:
44:bf:41:56:b1:72:25:73:bc:21:d0:37:19:09:c2:
e8:53:11:81:f0:43:e2:bb:40:7b:78:98:18:dd:33:
13:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:41:F9:43:2F:79:71:08:78:F0:10:6F:06:FE:54:C8:4E:A4:3C:53
X509v3 Authority Key Identifier:
keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9a:7e:70:3f:de:6a:0a:51:c7:38:04:dc:48:83:8e:4b:dd:
87:71:47:04:10:32:f4:bd:11:e4:0f:14:97:7e:67:a5:61:c6:
58:8d:04:eb:0b:b9:f3:62:70:45:b1:82:31:d2:54:cf:10:e9:
8e:45:77:aa:f7:08:81:d6:22:02:61:91:28:6b:ce:2a:7e:7a:
51:e7:00:86:d6:9c:dc:76:a2:62:a0:11:b0:c0:9b:4b:7d:18:
85:2c:1d:7f:19:15:b2:0a:ab:ee:1d:9f:83:3c:bf:7a:24:99:
e8:cf:9c:ad:5f:78:99:1e:32:9d:7a:a5:8b:bb:7d:0e:38:80:
ca:fe:b2:1a:ae:41:78:16:fc:06:37:fc:22:6c:f9:a2:57:ac:
10:e7:36:58:a8:26:49:94:8a:5a:4d:5e:fe:c6:8c:0d:1f:6c:
67:fd:54:d2:97:fa:9f:ac:19:d6:c6:8b:62:23:43:55:30:15:
07:8c:1d:5e:b9:ee:73:5a:2f:70:fe:6a:c6:cf:9b:1e:98:7e:
4a:d9:c1:44:24:aa:57:61:ac:98:c8:a6:34:8d:e0:73:43:15:
31:18:d9:99:0e:41:c5:c3:5c:8e:51:a8:6d:e5:3d:0a:31:e1:
20:df:23:2d:5e:1e:be:93:b1:0d:59:4c:38:b6:78:21:31:b4:
cd:f8:9e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:08:04 2026 by rpki-client