Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier: t74reYn3wMTZIoH4I+yIhZFgqOCS0z/mZbs3tkKJRTA=
Subject key identifier: 18:2C:3D:E5:10:99:AD:2B:5E:C8:F9:A3:B2:DD:7E:42:94:1E:87:07
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial: 01A177DEC991EC4F3C86C445D056640D4076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number: 094D
Signing time: Mon 26 Oct 2026 11:00:51 +0000
Manifest this update: Mon 26 Oct 2026 11:00:51 +0000
Manifest next update: Tue 27 Oct 2026 11:00:51 +0000
Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: sGCbA7ROG9GFe+m52NCMzL+O/CR7gZ2W0gJaWMvjN8U=)
2: W2i76MrSQ6wt7tAiZdLDluFBtFM.roa (hash: x2yrgDtcnU02x3m/qpzHhyg+W4mYTMS/IQSYEXZQTTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:de:c9:91:ec:4f:3c:86:c4:45:d0:56:64:0d:40:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Validity
Not Before: Oct 26 11:00:51 2026 GMT
Not After : Oct 27 11:00:51 2026 GMT
Subject: CN=182c3de51099ad2b5ec8f9a3b2dd7e42941e8707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:32:c0:92:b5:38:f1:d0:16:c3:84:80:50:06:
3a:45:e5:4d:1c:3c:f8:66:2a:8c:b4:80:3e:4f:b9:
cc:63:36:b8:47:00:20:b0:1e:14:05:38:f2:ce:21:
0f:bf:61:6b:59:39:e2:a2:0d:5b:1d:80:a6:d4:fc:
f9:80:e9:a4:93:00:5e:bb:79:00:0a:85:45:08:fe:
d1:ba:94:52:c3:61:4d:fb:e9:31:ac:4f:44:94:a6:
99:eb:9f:3b:a0:a9:77:e6:2f:d8:3f:42:81:e8:e3:
60:72:71:f2:5b:77:4f:f9:99:5d:88:98:56:4a:01:
74:13:9e:81:24:41:65:10:d2:00:1d:3d:b3:69:aa:
4a:4a:5f:3c:b6:6b:a0:bc:64:c2:1f:29:a7:96:39:
ad:86:e4:79:46:63:a8:d7:77:0e:ae:48:c7:d0:c4:
ef:ed:71:66:d4:34:0a:75:79:44:8f:4e:d9:be:b4:
df:70:f0:0b:d9:1b:58:24:66:89:72:54:34:b8:5d:
ec:a3:ab:c8:cc:ca:92:09:24:ca:6a:f9:f0:31:bb:
64:7d:4f:f1:d9:d6:53:84:36:ef:b9:c0:5a:40:a3:
8c:c4:60:dd:62:4c:56:53:33:34:d4:aa:c4:5e:7d:
42:f9:7c:c2:09:50:0b:f8:98:db:18:07:14:f6:e4:
4d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2C:3D:E5:10:99:AD:2B:5E:C8:F9:A3:B2:DD:7E:42:94:1E:87:07
X509v3 Authority Key Identifier:
keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6f:2e:d1:e6:54:1b:f8:e9:10:91:27:a6:0c:5f:67:10:4c:
0d:ed:19:8c:39:69:22:8b:2e:40:38:2e:1a:91:e3:e9:30:fc:
80:2c:9c:cd:b4:7a:68:d8:6b:24:78:8e:6e:05:1a:cd:69:06:
5a:8e:50:1f:d5:37:52:f9:f9:d9:0e:75:94:d6:d1:69:be:ec:
51:69:02:d5:25:99:d5:cc:70:9b:0b:ed:59:4b:35:55:03:bc:
9e:88:7c:18:20:06:79:80:58:22:be:0c:8e:20:fd:e0:a2:02:
8f:35:7c:07:65:3a:4b:78:52:fd:be:73:36:a0:47:49:f6:ac:
5c:77:4a:d3:5a:f3:d0:5b:b9:84:34:87:a5:44:b0:14:42:b3:
c6:3d:cd:7a:20:2a:0a:68:3d:d2:9c:01:7e:91:b0:96:5f:d0:
9e:4a:12:e0:68:bc:49:0b:5f:d2:ac:91:77:12:49:e2:20:30:
f8:3f:79:bc:2e:bc:01:2a:a8:12:a8:d4:2b:0d:48:c0:9b:04:
54:0c:cd:fc:54:63:3f:9e:69:4f:6c:27:f2:91:10:04:fb:74:
76:32:f1:a6:bd:7a:d7:04:7d:e6:da:63:32:28:29:db:1a:13:
27:e9:e4:15:a0:31:20:03:e4:ca:7d:30:85:ff:0c:e0:d4:67:
95:2a:3a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:01:41 2026 by rpki-client