Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: rJOLpJNuH6Hno6a7/2hNFN2flsr96K/AuorBpchuraw=
Subject key identifier: 52:65:AA:03:32:85:4B:3F:22:6F:51:85:34:7A:BE:4B:8F:21:E0:61
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 019CE4ECB783FBE0561956452FE6041CBC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 11FA
Signing time: Fri 13 Mar 2026 02:00:44 +0000
Manifest this update: Fri 13 Mar 2026 02:00:44 +0000
Manifest next update: Sat 14 Mar 2026 02:00:44 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: 8Rt35wHsUcDPC+Hfn1/6wu2+EfbUBf5GswD6Xo1cFAU=)
2: Ea0xhlOm2YvTSj2LUGD3BIPNRR4.roa (hash: xQErZJEOiu3EHRTQnTGckBJupDV77OKBDm1q8oFWOjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:b7:83:fb:e0:56:19:56:45:2f:e6:04:1c:bc:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Mar 13 02:00:44 2026 GMT
Not After : Mar 14 02:00:44 2026 GMT
Subject: CN=5265aa0332854b3f226f5185347abe4b8f21e061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:51:ea:72:81:92:0e:f4:57:84:89:f8:80:
a8:27:d2:d2:c8:cf:94:7b:71:30:6c:18:51:69:d6:
05:15:f3:b2:91:f9:d8:42:39:67:25:23:ca:15:ba:
fc:97:d0:4f:15:10:e7:61:1a:ff:0f:49:ee:47:6d:
34:bb:01:6e:ff:1f:34:b9:c0:ca:6a:bb:cd:f2:ed:
e5:eb:b5:ff:31:f4:af:1c:ba:7b:15:0b:36:8f:c4:
53:5f:84:f4:89:fe:d6:f0:e5:61:db:53:3e:53:9c:
b2:6c:a1:6e:3e:f9:9f:9b:d9:18:e0:1c:b5:17:59:
51:2d:6b:e4:c0:2f:a5:79:0c:cd:12:ee:61:71:44:
12:ce:e6:e4:59:1f:53:42:7f:87:d9:eb:29:d4:f3:
79:72:c0:a5:ee:c9:ab:96:56:a6:49:03:52:6b:43:
5c:8d:81:43:6b:44:2c:2b:a7:33:11:af:f2:62:43:
ec:61:33:d3:fa:01:4f:09:61:98:32:77:5f:dd:45:
6a:2d:5b:dd:50:2c:e4:f5:ca:48:67:f3:f8:ea:4e:
cf:8f:ed:5b:ad:94:5b:d0:a4:45:e8:cb:43:54:4e:
cb:32:af:d9:8c:b5:20:f8:ab:f0:11:4c:97:78:91:
5e:5c:2d:ea:bd:36:ef:2e:70:d5:e1:63:48:59:a7:
d3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:65:AA:03:32:85:4B:3F:22:6F:51:85:34:7A:BE:4B:8F:21:E0:61
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f8:02:94:8f:fc:15:68:db:4e:2f:4b:5e:d7:4f:4b:ed:b8:
52:b6:94:c5:27:26:40:c2:33:fe:ba:f9:39:6f:89:d0:87:6b:
9e:4a:2c:f8:bc:e6:84:20:d0:19:b3:d0:16:eb:d8:9c:f9:15:
cd:99:5a:28:37:eb:c9:b4:41:85:1e:f3:87:11:95:ce:da:ac:
b8:f8:45:cc:6a:3e:2c:9f:9f:8e:16:b9:0e:ff:e3:b0:69:4e:
48:27:03:ae:af:d4:6a:08:5b:68:05:ff:8e:4f:f5:a0:c1:6f:
2f:d2:00:4a:ed:4d:55:f9:b6:c7:9b:29:d2:91:8c:3a:71:ec:
a7:a5:32:76:80:3e:04:07:80:b2:be:1c:39:4a:d8:5e:c5:93:
f9:53:75:e3:e6:14:7f:32:bf:bc:04:2c:03:a0:fe:38:0e:6f:
5f:1f:dd:c5:8d:1c:e9:e4:5a:71:80:0b:bd:be:75:08:ea:97:
10:c4:02:77:71:a0:c0:3e:b3:e5:86:86:fe:27:6e:2a:a6:39:
24:28:5a:d3:9b:10:37:26:ac:13:ba:2b:4e:4c:4e:03:f6:1a:
bb:7c:c5:66:93:72:bf:d6:3c:3c:42:5b:1b:05:43:11:d2:2d:
dd:ac:84:70:2f:27:a0:a8:34:47:d7:ae:5e:60:4d:51:09:3b:
5a:20:fa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:48:04 2026 by rpki-client