Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: MSxH9lZyM6uqpdcC+X+xRto1O9Fc2iRhWo8mrqFYNRk=
Subject key identifier: 0C:25:02:3E:7D:06:21:78:A8:6D:43:3C:88:6C:4F:4C:BA:21:2C:F3
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 01A08B9F859674E823D4D3725A49A796DD12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 13DE
Signing time: Thu 10 Sep 2026 14:01:22 +0000
Manifest this update: Thu 10 Sep 2026 14:01:22 +0000
Manifest next update: Fri 11 Sep 2026 14:01:22 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: +41Ak21NJn8yHG7GFspI5z9/Lh10ZXkoHSHhJdFIp/w=)
2: Ea0xhlOm2YvTSj2LUGD3BIPNRR4.roa (hash: xQErZJEOiu3EHRTQnTGckBJupDV77OKBDm1q8oFWOjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:85:96:74:e8:23:d4:d3:72:5a:49:a7:96:dd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Sep 10 14:01:22 2026 GMT
Not After : Sep 11 14:01:22 2026 GMT
Subject: CN=0c25023e7d062178a86d433c886c4f4cba212cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:3e:47:9a:aa:35:37:5a:8a:24:4d:c7:7a:
18:10:69:ff:03:a4:33:01:5e:a0:b5:03:d0:a1:e9:
9f:eb:ca:66:d8:fc:e5:53:3e:76:b1:b7:70:ed:77:
71:a4:7e:2a:df:04:87:09:c9:cf:ae:de:d6:92:18:
c6:95:ce:0a:d8:f7:d6:d3:9a:1f:f0:1d:86:0f:9c:
9b:ae:e4:ee:d7:45:b9:f6:74:8c:a6:81:8f:34:5e:
20:c4:c5:02:46:32:d4:96:0c:7a:bd:a0:35:88:65:
d8:45:04:96:aa:18:db:5e:95:4a:ef:cd:42:1a:93:
63:82:31:1d:5d:ca:e4:03:7e:ca:34:50:51:1b:b7:
35:fd:5b:64:e5:0d:ba:31:b1:f5:29:be:77:1e:0d:
c2:84:6b:bd:00:2f:ec:9d:23:9b:88:19:67:5c:c0:
cf:69:de:bf:66:cd:cc:8f:e4:4b:1b:90:63:6c:5c:
42:c7:69:45:e9:eb:30:4d:81:f9:36:a2:4f:d7:8d:
96:cd:83:ea:ba:ce:5f:0d:77:7f:76:5d:e9:64:84:
28:9f:04:30:ab:bb:95:77:01:86:c4:23:fd:c1:80:
70:ab:6a:fa:1a:13:6f:31:a2:ec:ab:0f:ca:f2:f0:
e8:7c:28:85:8b:05:ac:71:04:98:a6:07:0a:0b:60:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:25:02:3E:7D:06:21:78:A8:6D:43:3C:88:6C:4F:4C:BA:21:2C:F3
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:86:4d:73:ef:6c:74:fe:39:40:bd:36:7c:45:15:b1:a8:31:
ef:6e:66:88:67:ca:ef:d6:76:1e:5c:ce:76:f1:73:7f:6e:40:
bd:8f:f5:07:19:dc:08:d5:1f:39:07:01:44:79:52:c9:7a:b5:
32:bb:8e:3b:ff:d3:01:51:38:ed:a5:68:29:e3:a3:9e:e9:ad:
cd:15:c0:aa:fd:d9:2d:35:1e:6e:b7:a2:0f:db:4f:dc:f0:d3:
9d:82:fb:f1:c1:d1:9b:1f:f6:65:ef:6f:c5:b9:40:26:4d:b1:
7e:16:b4:7d:f0:09:e9:6e:e2:8d:d9:bc:01:00:ea:50:b3:d6:
20:67:21:1f:e3:c4:4d:8c:26:9b:7b:9b:b9:f1:ab:38:ee:99:
dc:98:ee:af:99:7a:a5:1d:a9:2e:86:3c:8b:7e:9b:8e:5e:25:
8d:7b:75:db:3f:c3:6b:fb:e4:cd:8d:d9:20:e6:bc:32:a7:21:
97:4a:aa:bb:35:82:a1:da:f9:df:05:d6:f5:db:74:a3:3b:8d:
f0:94:d9:29:90:b4:a0:bb:05:07:55:1a:5a:e3:fa:d5:15:4e:
a5:e5:a2:cb:2f:af:4b:0f:6d:a7:76:0f:ae:96:42:9f:18:8a:
30:1c:d8:a6:80:69:0b:93:1d:5a:42:cc:ab:f1:9c:8b:2a:3d:
fb:4a:dd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:40:54 2026 by rpki-client