Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: +Yp/eE68tHv4Va1mjXCt7jc99foi+msYVX9m3tuRfXQ=
Subject key identifier: 23:A5:53:99:9C:6F:04:E5:99:9C:8D:2E:6B:45:B3:4F:A1:F1:BF:77
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 019FA3E0DE4190166984B7F379F525DEC2DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 1366
Signing time: Mon 27 Jul 2026 14:00:50 +0000
Manifest this update: Mon 27 Jul 2026 14:00:50 +0000
Manifest next update: Tue 28 Jul 2026 14:00:50 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: 4+V5lNg6rpyPzRsqt7Qz5O3rNFx3bX/G0m5i9CKufOg=)
2: Ea0xhlOm2YvTSj2LUGD3BIPNRR4.roa (hash: xQErZJEOiu3EHRTQnTGckBJupDV77OKBDm1q8oFWOjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e0:de:41:90:16:69:84:b7:f3:79:f5:25:de:c2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Jul 27 14:00:50 2026 GMT
Not After : Jul 28 14:00:50 2026 GMT
Subject: CN=23a553999c6f04e5999c8d2e6b45b34fa1f1bf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:06:9e:13:28:42:cc:30:2e:69:3f:e7:de:ef:
90:41:10:0c:cd:c9:67:54:53:83:87:e3:ff:13:69:
f7:64:39:16:75:8f:a1:2e:ea:60:31:ff:44:ad:d1:
f3:09:2a:b0:87:08:b0:5b:59:17:66:bb:f7:6e:f2:
12:c4:25:0b:c6:54:97:85:5b:52:5e:56:59:e2:d6:
c4:f3:d5:be:44:70:18:a9:2d:24:79:d1:87:08:b7:
07:4f:42:5d:bc:43:8e:da:4a:6c:03:39:a6:3c:94:
08:95:41:4e:2d:59:cd:00:ed:d1:e6:d0:45:a8:5c:
43:9b:0f:5c:7e:2c:c5:3e:25:5c:b7:b2:08:2f:45:
c7:66:ce:09:64:26:4e:1c:d5:ca:f4:79:9d:a4:6b:
3b:77:93:20:76:3c:8c:44:3b:0b:45:fa:0d:75:17:
85:81:d9:08:7e:a8:fe:0f:4f:e6:22:b2:0e:4c:d7:
62:a5:03:62:0c:89:da:cf:20:4e:7d:b7:a3:3c:d1:
fa:e2:83:16:5d:d6:92:6d:87:61:c7:12:3d:f6:30:
ae:d9:cf:21:0f:d5:99:d3:d4:4f:3c:9e:85:38:cf:
03:37:cb:7c:42:73:c6:9f:ce:57:cb:86:4c:6e:0d:
c5:a7:39:35:81:81:33:27:41:60:30:f3:83:41:f8:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A5:53:99:9C:6F:04:E5:99:9C:8D:2E:6B:45:B3:4F:A1:F1:BF:77
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:87:24:6b:18:fb:59:06:7b:02:57:9d:5a:42:32:73:03:25:
81:38:57:fa:e5:3c:f4:39:9a:47:32:86:f5:1d:14:d4:a0:67:
02:dd:09:3a:de:86:07:40:4b:1a:15:89:b8:94:a1:c0:d9:62:
30:b6:02:f1:05:15:71:cf:18:c6:38:b7:ac:5e:f1:68:06:42:
05:ec:98:c2:0c:61:2a:bd:ec:ba:99:4d:53:69:5a:59:c8:9e:
43:56:78:a9:5b:53:6e:52:4b:1b:c8:83:d1:5a:35:0e:a3:63:
f9:c3:c9:3e:dc:5b:36:7d:ba:ff:38:fb:36:0f:b3:49:1e:46:
17:43:8a:bf:2d:ac:76:18:0b:56:ff:b0:f6:d0:99:51:f4:05:
79:fa:c8:17:a2:3f:f1:f2:01:d3:a4:5b:33:4b:a3:18:4f:f6:
52:a2:54:ef:d7:cc:d4:24:0b:62:68:c3:bd:bc:9f:51:75:59:
85:b3:63:4c:99:26:76:d8:8a:0d:06:86:ef:53:9e:bb:bd:70:
4c:70:ff:ff:c5:05:61:0d:2a:6c:9b:38:52:b5:55:4d:32:1a:
cd:23:93:69:22:f9:67:45:5e:ce:3e:b8:7b:90:88:e2:c7:10:
7c:0e:f6:fb:48:f3:12:32:ee:7a:1d:70:17:8d:01:65:b3:69:
18:8e:2c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:08:53 2026 by rpki-client