Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
File: ACY1rIzpE_p8zV123YYuJIxxy_M.mft (raw, json)
Hash identifier: 2bcQc36dI/Y8u9bhYOvsrtGZwx9NDOBNHi3Ttye+nGM=
Subject key identifier: C9:21:D0:97:1D:A4:6C:56:5D:A4:47:55:3E:27:DF:C8:64:52:A6:A7
Authority key identifier: 00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
Certificate issuer: /CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Certificate serial: 019D38D353D60AB5A5CCA8170BB4720B8732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
Manifest number: 0800
Signing time: Sun 29 Mar 2026 09:01:06 +0000
Manifest this update: Sun 29 Mar 2026 09:01:06 +0000
Manifest next update: Mon 30 Mar 2026 09:01:06 +0000
Files and hashes: 1: ACY1rIzpE_p8zV123YYuJIxxy_M.crl (hash: 0qYnd0j8x4ejQ6wUnWVApXZBhXW5uhd4V+71aYI8z50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:53:d6:0a:b5:a5:cc:a8:17:0b:b4:72:0b:87:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Validity
Not Before: Mar 29 09:01:06 2026 GMT
Not After : Mar 30 09:01:06 2026 GMT
Subject: CN=c921d0971da46c565da447553e27dfc86452a6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:e0:80:26:8e:98:54:e8:85:5f:4f:05:70:
61:aa:3e:e9:89:42:38:38:16:f9:87:0a:ca:e1:3f:
e7:a3:1d:13:b5:71:15:ce:7e:15:e0:7c:86:94:b1:
bc:0d:c9:79:0d:09:04:9e:90:d6:b2:8d:ad:d5:79:
05:31:c8:cd:01:10:d2:f9:58:67:9b:4b:6f:4c:73:
e6:58:12:07:4c:3f:fe:f2:35:eb:46:f2:5f:36:12:
ed:13:34:78:0b:c5:3e:af:52:fd:9f:26:5b:28:57:
7f:98:39:6e:5c:95:f9:8e:4e:c7:e2:f6:37:4a:5e:
ce:1d:e8:e7:19:de:3c:3c:d7:b3:5a:2d:c0:cf:e6:
18:ea:05:41:05:71:fe:68:5a:b7:8f:e8:d6:9b:6c:
47:02:c0:68:7b:43:cb:62:f0:d7:c0:a6:b5:f9:b3:
37:a8:3f:11:00:eb:c8:ce:a4:68:cd:42:25:53:fc:
4f:d6:eb:83:96:3f:03:c4:eb:05:cf:c0:02:49:a8:
2d:8c:6b:da:6c:b5:22:8d:3b:37:6e:05:36:53:9a:
e1:a4:6a:d2:c5:9d:24:d3:4d:2d:3f:6b:b9:ad:54:
c4:f2:57:2a:81:ea:20:c8:0a:bf:eb:e9:1f:ca:c0:
b2:d3:3e:c0:11:55:fa:23:64:09:1b:48:e3:e5:79:
fe:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:D0:97:1D:A4:6C:56:5D:A4:47:55:3E:27:DF:C8:64:52:A6:A7
X509v3 Authority Key Identifier:
keyid:00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:67:87:99:94:51:59:b1:63:94:b5:de:d3:15:4c:27:a1:f1:
bd:9f:4a:00:0c:42:70:bf:7a:18:8a:47:2d:da:14:6a:da:49:
2d:5a:ed:4b:59:4e:d0:f4:16:cb:2f:68:06:2f:84:7f:8d:4d:
19:e3:3d:7f:c4:13:0d:4e:9c:84:79:6a:16:c7:91:86:18:34:
1d:b6:8f:59:62:8c:9e:5a:95:86:d0:1d:79:68:47:ce:23:c8:
68:32:2b:40:aa:eb:a7:1a:be:1e:6c:42:c4:71:63:95:f0:97:
45:00:77:92:e1:a3:f6:4e:f6:c8:aa:50:6b:0b:90:4f:0c:4b:
3b:97:cd:b2:f5:c3:37:af:81:28:a7:76:6c:b0:0d:0e:ad:1b:
fd:02:f8:77:67:4e:7f:1c:0e:da:b0:25:bf:84:05:d7:fe:04:
92:a1:41:8b:32:9e:36:ec:77:bd:67:94:d1:7e:14:6c:63:94:
1d:6d:61:61:4e:68:48:ac:3e:b4:43:92:ad:9b:23:cf:d4:08:
95:fa:88:87:e3:ce:63:01:23:65:7b:c9:c3:19:00:f6:45:6d:
b8:1f:53:a1:a3:eb:ad:a2:fd:f7:f0:d2:00:5d:21:d6:22:f4:
cc:d6:16:56:6c:64:1d:54:66:15:8d:14:e9:07:9d:11:51:11:
80:a2:ef:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:14 2026 by rpki-client