Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: 7/GlcRXzZoSEaSL2L/WnBYkZ6CwXEXO9mXmMt575P6M=
Subject key identifier: E9:AE:46:BB:7F:2D:21:A2:53:F4:0C:B0:D3:8F:E4:34:31:EC:5B:A7
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 01A17B167FBA767AE38F77F1861E0CAD0A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 145A
Signing time: Tue 27 Oct 2026 02:00:34 +0000
Manifest this update: Tue 27 Oct 2026 02:00:34 +0000
Manifest next update: Wed 28 Oct 2026 02:00:34 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: uRoH5gn8W7jSgs/n1N6lrXG3iswYIwHlYDPpuzCl+co=)
2: Ea0xhlOm2YvTSj2LUGD3BIPNRR4.roa (hash: xQErZJEOiu3EHRTQnTGckBJupDV77OKBDm1q8oFWOjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:7f:ba:76:7a:e3:8f:77:f1:86:1e:0c:ad:0a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Oct 27 02:00:34 2026 GMT
Not After : Oct 28 02:00:34 2026 GMT
Subject: CN=e9ae46bb7f2d21a253f40cb0d38fe43431ec5ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:4e:f0:3e:d1:a3:67:df:39:5c:b7:30:39:
08:bc:47:74:d9:dc:ee:a2:aa:9a:d0:30:b8:32:42:
f0:26:9a:56:31:7d:1b:a8:18:03:f7:8f:cc:93:ec:
6f:c5:37:34:11:34:07:66:ef:dc:35:80:b5:34:63:
8b:80:7a:e3:56:5b:c4:5c:6e:6c:49:1a:a2:21:97:
e0:61:92:70:ba:28:2a:ff:35:ee:93:18:5b:13:77:
36:a5:b4:a8:ee:99:e5:bd:fa:4f:59:57:f9:9e:1c:
bf:26:cf:64:65:17:de:a9:4b:61:50:55:51:a0:ef:
9c:76:67:95:b6:80:90:4d:1a:00:23:22:6e:d5:4c:
32:b1:d2:a4:a1:6c:c9:29:76:a4:36:46:65:cb:ba:
e7:b6:fa:f2:e7:fd:db:ed:c1:16:cd:77:68:a3:f3:
ef:43:75:29:b1:4c:59:b7:7b:d0:77:b1:29:e6:c0:
56:95:c4:47:68:bf:f7:0b:38:27:20:b6:8f:1d:82:
1e:cd:d1:1c:61:a4:fc:24:e5:a1:af:8d:06:a3:16:
75:35:30:b6:0f:93:db:60:b6:b4:36:30:64:03:9e:
ab:3e:5c:60:17:9d:68:04:a7:77:47:c3:71:fc:d4:
11:cc:86:a0:f3:ce:31:66:40:bd:1d:16:2c:9a:50:
43:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AE:46:BB:7F:2D:21:A2:53:F4:0C:B0:D3:8F:E4:34:31:EC:5B:A7
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:04:f1:93:1e:d9:35:16:25:fb:f6:be:a6:1a:7f:67:82:cb:
cc:40:4e:24:99:d6:2d:17:6c:80:27:ab:16:2c:3e:57:c3:1a:
38:2f:98:99:15:56:26:76:89:c0:95:2a:8c:19:d1:22:33:57:
75:81:bc:ae:7b:a5:3b:c9:d1:25:51:81:95:ac:10:dc:fc:8b:
83:66:aa:1b:38:d4:d2:02:ed:b5:25:6c:26:21:01:29:e4:65:
5d:30:6c:3b:ad:e5:d3:9f:7d:55:9a:5a:03:0a:17:26:f4:65:
e8:6c:09:47:fd:05:07:e8:2c:aa:ff:1e:f1:a5:c3:13:0a:96:
9a:cb:a3:c5:7f:03:b9:77:25:2f:1d:55:8f:9e:f8:14:7e:2e:
74:1e:9f:44:e5:3e:3f:e4:38:53:f6:82:73:5f:cf:c5:0f:af:
1e:a6:3f:41:f4:b0:55:de:c1:90:84:07:a6:5f:e8:7c:95:36:
53:43:b3:a2:37:12:7e:3d:95:59:ba:2f:98:f6:e0:cd:6c:47:
5f:7d:5a:5d:6e:40:67:97:1b:be:7f:56:f0:9d:7f:f1:16:86:
43:2d:35:b0:ad:68:a5:32:03:a7:e9:e2:df:18:86:b5:f3:44:
48:5e:31:bc:22:e9:8a:0a:75:5e:fd:a9:c2:cc:51:ff:57:a8:
a0:82:0d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:49:03 2026 by rpki-client