Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: GGVf5KKbA3UQR0tmZIsvKbZNcsjcF7cKmIJjztQvGnc=
Subject key identifier: 19:54:9B:8F:D1:D7:9A:76:64:88:61:8F:0B:76:FD:87:07:AC:D6:B4
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 019EBA34AABBC5837FF1376F54A2A416EB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 12ED
Signing time: Fri 12 Jun 2026 05:01:14 +0000
Manifest this update: Fri 12 Jun 2026 05:01:14 +0000
Manifest next update: Sat 13 Jun 2026 05:01:14 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: RRoiVnJbj21FwrIEziBaKMd4vF9SAmwBsLCa9rDQTI4=)
2: Ea0xhlOm2YvTSj2LUGD3BIPNRR4.roa (hash: xQErZJEOiu3EHRTQnTGckBJupDV77OKBDm1q8oFWOjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:aa:bb:c5:83:7f:f1:37:6f:54:a2:a4:16:eb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Jun 12 05:01:14 2026 GMT
Not After : Jun 13 05:01:14 2026 GMT
Subject: CN=19549b8fd1d79a766488618f0b76fd8707acd6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:dc:19:79:51:08:40:79:44:b2:77:77:6a:
8a:c4:0c:e6:99:54:41:ef:51:f1:97:20:0a:7c:5b:
e1:f1:bd:c7:ac:d9:2f:a4:73:52:6b:a7:ec:0f:91:
37:50:3a:90:ed:3d:ec:c2:1d:c1:64:1f:e0:10:a2:
9f:e8:bb:6f:a5:80:9d:3a:d6:a5:b2:3b:6b:59:12:
79:f3:6b:46:5d:84:5c:69:71:05:93:69:e8:3e:76:
ae:46:c9:67:fe:41:09:5e:14:fc:af:df:9c:dd:ce:
a3:59:cc:51:71:f1:98:56:41:86:85:c8:f2:89:61:
a6:50:93:59:14:c6:ac:2b:ce:9b:ff:0a:05:25:da:
c1:34:0e:06:f9:24:c8:c0:1e:76:38:c1:61:d5:1c:
c0:03:55:2a:14:98:98:7b:e1:4e:ae:14:58:6a:09:
28:15:b1:46:99:94:a2:a2:16:f6:ce:c4:0b:27:61:
28:1c:06:0c:33:ce:21:aa:f0:28:ba:7c:c4:30:6d:
71:78:40:bf:f5:87:3e:11:77:c5:d8:a3:8f:a3:31:
cb:90:92:8d:24:b3:4f:29:49:01:5d:90:31:b1:1c:
3a:bd:21:49:e7:a7:28:0c:12:3f:f2:d9:49:90:54:
df:23:bf:40:72:aa:3a:b9:3c:a7:4c:79:2f:73:4f:
f7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:54:9B:8F:D1:D7:9A:76:64:88:61:8F:0B:76:FD:87:07:AC:D6:B4
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f0:59:4f:60:16:55:60:a7:2b:31:46:16:5f:a9:99:20:bf:
6f:03:0d:4a:bd:65:e4:7c:6a:f5:01:a4:59:2f:b5:6b:6f:7e:
d8:32:c8:2e:da:74:1f:22:f4:e4:a8:0b:78:56:9b:fb:de:92:
4d:5d:6e:06:66:d0:30:99:e3:5f:a8:cc:e8:50:8d:4c:4d:e1:
8f:e1:26:4b:cb:20:40:ec:08:65:61:64:57:ef:d5:aa:e0:35:
61:60:cb:0c:6d:b5:f7:bd:f1:1e:65:79:d0:77:5a:28:76:be:
fa:17:31:31:1a:96:03:3e:1a:e7:ab:0e:d8:dd:84:8b:2f:59:
43:f6:68:b5:fc:ee:40:3a:fc:2b:1e:42:3c:b6:9f:e8:bf:4a:
8c:18:0d:9c:10:cd:6a:3e:ba:9c:78:07:4f:2c:2a:6c:84:6a:
93:9e:eb:56:76:fa:ba:96:69:e4:a5:3a:d3:82:45:9d:9b:13:
c4:87:fd:b3:29:30:01:d1:61:e4:03:52:09:0f:db:58:ce:c0:
c0:05:bf:46:05:ab:70:33:bf:e3:46:35:7b:d0:f9:9f:0d:00:
6d:56:9f:e2:e4:a8:6d:16:f0:3d:2b:2b:5f:a5:72:29:05:69:
61:3d:1c:c8:79:59:a6:30:94:5e:4c:58:23:39:1a:5e:fc:00:
55:f9:ed:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:10:25 2026 by rpki-client