Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: H1g717DdftyQvgDdpdqAAfBbhcKuF+Y9qS6SMVrYmRw=
Subject key identifier: 54:95:EC:70:BC:D0:3C:69:3F:AB:9D:7E:39:1C:D6:6E:C6:4E:8D:92
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 019DCE9999CCC55ADB55A8DCB2963A4E4362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 1273
Signing time: Mon 27 Apr 2026 11:01:06 +0000
Manifest this update: Mon 27 Apr 2026 11:01:06 +0000
Manifest next update: Tue 28 Apr 2026 11:01:06 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: 2ZUBlVoqLwQCQzd81DZTtu8AykGI0fIp43b7npNAPhU=)
2: Ea0xhlOm2YvTSj2LUGD3BIPNRR4.roa (hash: xQErZJEOiu3EHRTQnTGckBJupDV77OKBDm1q8oFWOjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:99:cc:c5:5a:db:55:a8:dc:b2:96:3a:4e:43:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Apr 27 11:01:06 2026 GMT
Not After : Apr 28 11:01:06 2026 GMT
Subject: CN=5495ec70bcd03c693fab9d7e391cd66ec64e8d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:ca:3b:6d:f5:25:38:f4:24:fb:fc:91:f8:
c3:b3:8f:84:cc:19:c2:14:d2:d3:36:26:2c:83:20:
d9:0b:de:2a:65:5d:cf:27:af:d7:ff:06:7a:19:7c:
2f:d8:b7:ad:a0:6c:fb:08:17:38:02:86:d0:5c:19:
41:8e:c4:5b:7b:c1:d4:76:ea:ce:88:4f:d9:55:25:
1c:c9:d9:f5:62:41:22:a3:d4:06:45:64:19:9d:0c:
11:7c:bd:fa:dc:ea:9f:f7:4a:6d:0b:24:1a:91:62:
85:28:cc:7f:86:33:b4:7c:09:b1:91:8f:97:db:47:
25:2e:d5:7f:9f:6a:0f:e7:da:86:82:31:95:fd:25:
cd:de:f6:80:27:77:c8:8b:28:54:7c:15:92:42:29:
b4:2c:52:fe:ee:b4:18:79:59:51:46:62:58:35:2d:
38:5d:3e:6e:b3:2c:26:a3:7b:bd:ee:80:73:f2:e0:
6b:1b:c2:2e:cb:bb:77:84:fb:b7:36:c2:09:c8:4a:
c2:3e:ad:10:9c:82:d9:c8:5d:55:c3:59:b9:46:aa:
1d:c9:ee:88:8c:61:0b:49:e9:6e:2b:6e:99:7b:a2:
ae:ff:50:a0:16:6f:72:a2:4e:ce:a5:ee:60:f9:a4:
15:4d:ee:a9:43:c6:71:c1:fe:fe:26:ba:cf:87:e8:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:95:EC:70:BC:D0:3C:69:3F:AB:9D:7E:39:1C:D6:6E:C6:4E:8D:92
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6c:33:79:b9:45:36:e5:09:6f:45:55:b6:bb:af:db:5a:67:
53:ff:ff:bd:b2:67:8c:6d:8e:30:c8:f2:e3:b4:d3:10:27:53:
60:8b:6a:6e:45:3a:65:2e:dd:49:5d:13:21:81:bc:4d:f9:28:
6a:e7:ad:45:c7:d9:27:f4:20:41:f2:65:14:8d:3d:a0:71:da:
af:3e:0f:db:db:10:ce:7c:46:f6:03:91:5d:71:08:06:d0:ad:
49:9b:6a:85:8d:0e:e7:dd:b4:ce:46:97:00:49:b3:1c:98:82:
6a:35:f8:5a:6b:d3:d0:9b:67:a7:71:41:36:3f:78:98:60:d2:
f4:40:83:72:53:29:92:dd:7c:e6:a9:32:29:63:27:c1:2d:52:
88:0f:54:d0:f8:45:75:91:66:a8:17:6d:bf:5d:e8:77:1b:9a:
06:06:9d:80:bc:d8:4a:b3:ee:0f:03:83:69:fa:6d:f4:9d:93:
07:bb:3e:f1:60:37:ff:9b:99:ca:c1:00:c8:bf:80:5f:a0:2f:
eb:08:80:dd:eb:cf:c9:1c:7c:0d:ea:48:d9:29:cc:22:15:b5:
5b:0a:1c:49:b2:26:66:e6:49:1c:09:eb:a8:ac:a6:68:a1:d5:
f2:7e:3e:6f:c4:51:8c:e8:e5:04:dc:a4:5f:62:0a:f5:58:e2:
d8:51:d8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:42:06 2026 by rpki-client