
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier: n86KKbriOfeuvOdLbXT1YO9KUlUFm5lqJ4UZpmVNzUQ=
Subject key identifier: CA:81:DE:1F:34:A8:49:A9:82:AB:CA:4A:96:0D:73:F9:97:02:01:2E
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial: 019D389C09610CE190E6E43077779905140E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number: 071A
Signing time: Sun 29 Mar 2026 08:00:43 +0000
Manifest this update: Sun 29 Mar 2026 08:00:43 +0000
Manifest next update: Mon 30 Mar 2026 08:00:43 +0000
Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: 2iPnFMf5eX68k1QYx4kK4WcmrKb31yO5PjBxRpefzpY=)
2: W2i76MrSQ6wt7tAiZdLDluFBtFM.roa (hash: x2yrgDtcnU02x3m/qpzHhyg+W4mYTMS/IQSYEXZQTTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:09:61:0c:e1:90:e6:e4:30:77:77:99:05:14:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Validity
Not Before: Mar 29 08:00:43 2026 GMT
Not After : Mar 30 08:00:43 2026 GMT
Subject: CN=ca81de1f34a849a982abca4a960d73f99702012e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:62:0e:d8:81:23:47:f8:7c:b6:24:a3:8f:
7e:a8:3c:3e:6e:b2:20:81:dc:54:08:da:e3:89:34:
52:43:6e:90:b3:7c:2f:d6:60:07:3f:59:49:8c:1f:
ca:ce:94:25:69:02:86:77:5b:34:91:d5:45:17:03:
d9:9a:3e:00:5d:11:6a:8c:8c:94:bd:f2:aa:f7:4d:
3c:e7:d0:00:cb:39:90:dc:6d:37:64:d8:af:f7:22:
fb:32:62:95:22:85:c3:38:ed:95:ae:55:f9:ad:c5:
19:cc:29:c1:aa:74:d8:ab:6d:04:d4:24:d9:19:0a:
ca:bd:d0:80:e2:ce:d7:c7:af:a6:df:f4:48:28:2d:
5a:46:46:28:05:fb:2a:14:16:d9:3a:33:0c:c7:e6:
fb:7a:b4:af:e1:57:29:2a:8f:05:3a:8a:54:fd:d4:
f4:2a:15:62:50:45:54:7a:f4:a6:95:02:2b:d9:e1:
17:21:a1:0d:da:7d:47:c9:76:4a:d7:bc:e9:0c:e3:
40:ef:3a:ed:a5:06:9b:92:35:ee:23:58:64:fb:9f:
1b:db:25:d1:df:82:1d:82:ea:aa:cc:f3:aa:da:b9:
61:97:d6:8a:2d:dd:15:60:eb:56:d8:4f:46:2f:c3:
32:5a:65:d0:50:07:22:09:7b:12:c5:5c:53:00:73:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:81:DE:1F:34:A8:49:A9:82:AB:CA:4A:96:0D:73:F9:97:02:01:2E
X509v3 Authority Key Identifier:
keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f5:7e:20:c2:6d:43:4a:04:67:c3:4e:4a:ed:23:48:53:40:
e3:d3:8c:f9:01:37:b1:b9:8d:b4:e7:b8:3d:6e:80:6a:cd:47:
81:43:0c:50:24:1d:5a:7b:22:77:8b:fc:3a:86:ae:55:1b:60:
4f:68:2f:63:01:2c:64:99:84:ab:4d:a3:79:a0:0f:29:e5:27:
75:7a:33:d7:90:06:06:04:4b:3c:71:a4:bc:a4:76:e4:6e:e6:
d8:1c:76:95:90:8a:5a:b3:e9:a2:4c:28:76:00:c0:74:6f:f4:
bd:a5:30:be:12:cf:e1:cc:c6:c5:4d:aa:32:da:56:53:20:d7:
74:43:65:25:f4:0d:14:1e:bb:a1:a0:1a:3f:6f:28:39:97:3c:
f3:3b:86:25:07:b6:8c:b7:a6:04:ac:48:cf:8e:11:18:63:01:
3a:36:26:85:09:8f:6c:0d:c2:07:9b:f7:89:51:cd:7a:df:64:
4a:7c:f5:00:16:08:b8:84:27:ba:49:f7:66:94:8d:9e:ff:43:
3d:ef:45:6c:a1:9d:9a:6d:25:47:93:e5:c5:4f:c3:e1:d8:45:
27:46:b4:7e:e6:72:10:a9:d6:61:fb:63:39:96:25:d7:fb:92:
5b:a2:be:5a:1d:b7:63:d2:ef:d2:2b:d7:e6:11:de:5b:05:61:
83:71:fc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:44 2026 by rpki-client