
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
File: ACY1rIzpE_p8zV123YYuJIxxy_M.mft (raw, json)
Hash identifier: lgO8N8prCbxj49I4mo840FIKAtKQhyTWTjFPqxyELL8=
Subject key identifier: 2E:F3:CF:FE:7A:73:81:2A:A7:67:33:1F:EB:2C:BF:97:09:9C:08:FB
Authority key identifier: 00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
Certificate issuer: /CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Certificate serial: 01A13E26712463F4E04B4ACCD1CA3C0E1B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
Manifest number: 0A15
Signing time: Thu 15 Oct 2026 06:01:09 +0000
Manifest this update: Thu 15 Oct 2026 06:01:09 +0000
Manifest next update: Fri 16 Oct 2026 06:01:09 +0000
Files and hashes: 1: ACY1rIzpE_p8zV123YYuJIxxy_M.crl (hash: BWrhey2xaiIjAWHsH5sduIptZAfpIdLdrJtlv6TAxwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:71:24:63:f4:e0:4b:4a:cc:d1:ca:3c:0e:1b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Validity
Not Before: Oct 15 06:01:09 2026 GMT
Not After : Oct 16 06:01:09 2026 GMT
Subject: CN=2ef3cffe7a73812aa767331feb2cbf97099c08fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:89:62:09:b7:a8:ac:cd:72:52:69:5d:c8:
9b:67:35:ae:4a:97:b9:91:86:44:48:de:eb:f5:56:
9d:2a:cd:49:74:5a:e9:36:a2:1f:58:1c:a2:15:b2:
87:e0:9a:3f:c0:20:99:09:b0:b8:f2:27:aa:fe:c9:
9f:c8:c1:57:c9:f1:a5:a9:c8:ee:50:92:c3:84:e7:
33:7b:eb:c0:0f:59:62:9a:9d:2c:6e:83:70:b9:87:
dc:8b:a1:31:40:e5:14:19:33:43:f9:ff:44:93:80:
93:78:3d:fe:fd:e4:be:10:45:92:7f:75:f8:48:d7:
68:e8:fa:f0:3b:f2:c6:20:d5:38:97:64:57:5c:20:
05:54:89:1f:e9:b1:0c:be:34:e4:09:64:63:d4:9a:
73:60:21:58:4b:b3:c9:d6:a7:76:e2:71:5c:81:87:
78:6c:6a:c3:ab:a8:bc:08:70:9e:85:ef:5d:a3:00:
48:af:cb:60:9c:33:da:07:db:06:44:cb:f0:a0:92:
32:80:79:2e:a3:5d:46:3a:96:74:0b:74:f1:e3:dd:
78:2d:22:80:4b:2b:62:56:b7:c7:78:99:03:11:bd:
01:81:8e:8a:1c:f3:9b:d2:9a:7d:40:1e:8b:87:83:
8a:cb:c4:1e:dd:ad:e4:e7:c7:18:8c:49:ef:52:23:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F3:CF:FE:7A:73:81:2A:A7:67:33:1F:EB:2C:BF:97:09:9C:08:FB
X509v3 Authority Key Identifier:
keyid:00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6a:67:00:5c:8b:da:8b:df:26:fe:f3:8f:f9:4e:fa:fa:07:
49:1c:b1:6d:9b:c4:9a:74:aa:02:59:93:67:ac:55:18:0d:31:
ee:7c:bf:19:48:fa:97:7c:01:63:70:42:93:24:fe:7d:8d:b3:
f5:35:cf:67:39:df:2f:4c:ce:68:da:20:a5:07:86:4c:cf:38:
6a:99:85:00:66:38:dc:7e:30:15:cc:85:cd:9f:db:bd:a6:b6:
4f:de:a6:59:ef:85:91:3d:dc:6f:c1:dc:15:b9:f5:db:a7:0d:
c8:bb:be:d8:b7:66:38:de:99:7b:59:2c:65:69:55:05:cb:90:
c4:1b:8e:80:7e:3b:0e:a8:6a:6a:b8:d6:a8:26:4c:12:36:fb:
5b:9e:a3:ab:8a:d6:46:03:78:dc:d1:5b:6d:64:b7:cd:f7:a2:
be:d3:04:65:77:94:ee:4b:a6:75:c0:8f:71:e5:03:ed:3c:ee:
fb:88:0c:31:d7:3a:be:09:38:70:8c:d0:03:c7:d7:6c:f5:31:
f3:16:2b:c4:fb:f8:b7:68:28:9b:df:6a:89:fd:de:8a:17:d1:
66:f9:a5:26:85:6e:ca:65:28:aa:29:06:f7:4f:e3:68:6c:a8:
8e:d2:31:a1:84:44:1b:8c:33:15:b7:61:61:6d:b9:02:92:87:
3f:25:5b:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+JnEkY/TgS0rM0co8Dht+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjYzNWFjOGNlOTEzZmE3Y2NkNWQ3NmRkODYyZTI0OGM3
MWNiZjMwHhcNMjYxMDE1MDYwMTA5WhcNMjYxMDE2MDYwMTA5WjAzMTEwLwYDVQQD
EygyZWYzY2ZmZTdhNzM4MTJhYTc2NzMzMWZlYjJjYmY5NzA5OWMwOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIqJYgm3qKzNclJpXcibZzWuSpe5
kYZESN7r9VadKs1JdFrpNqIfWByiFbKH4Jo/wCCZCbC48ieq/smfyMFXyfGlqcju
UJLDhOcze+vAD1limp0sboNwuYfci6ExQOUUGTND+f9Ek4CTeD3+/eS+EEWSf3X4
SNdo6PrwO/LGINU4l2RXXCAFVIkf6bEMvjTkCWRj1JpzYCFYS7PJ1qd24nFcgYd4
bGrDq6i8CHCehe9dowBIr8tgnDPaB9sGRMvwoJIygHkuo11GOpZ0C3Tx4914LSKA
SytiVrfHeJkDEb0BgY6KHPOb0pp9QB6Lh4OKy8Qe3a3k58cYjEnvUiPOuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7zz/56c4Eqp2czH+ssv5cJnAj7MB8GA1UdIwQY
MBaAFAAmNayM6RP6fM1ddt2GLiSMccvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNZMXJJenBFX3A4elYxMjNZWXVKSXh4eV9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYzBhZWUtOWUzYi00ZDIxLThiOGYt
YjRlOTE5ZjA4MjVjLzEvQUNZMXJJenBFX3A4elYxMjNZWXVKSXh4eV9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hYzBhZWUtOWUzYi00ZDIxLThiOGYtYjRlOTE5ZjA4MjVj
LzEvQUNZMXJJenBFX3A4elYxMjNZWXVKSXh4eV9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGpnAFyL
2ovfJv7zj/lO+voHSRyxbZvEmnSqAlmTZ6xVGA0x7ny/GUj6l3wBY3BCkyT+fY2z
9TXPZznfL0zOaNogpQeGTM84apmFAGY43H4wFcyFzZ/bvaa2T96mWe+FkT3cb8Hc
Fbn126cNyLu+2LdmON6Ze1ksZWlVBcuQxBuOgH47DqhqarjWqCZMEjb7W56jq4rW
RgN43NFbbWS3zfeivtMEZXeU7kumdcCPceUD7Tzu+4gMMdc6vgk4cIzQA8fXbPUx
8xYrxPv4t2gom99qif3eihfRZvmlJoVuymUoqikG90/jaGyojtIxoYREG4wzFbdh
YW25ApKHPyVbwA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:21:51 2026 by rpki-client