Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier: N2b0cio9zpHl8yQIGGRE6DW8djaq+LnfH7002zKy8JI=
Subject key identifier: 1D:50:0E:6B:2E:7A:FC:5A:76:61:0C:B0:44:2F:79:F1:18:71:92:90
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial: 019FA974F5A7409E538BA094C19CEFBA7C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number: 0F04
Signing time: Tue 28 Jul 2026 16:00:42 +0000
Manifest this update: Tue 28 Jul 2026 16:00:42 +0000
Manifest next update: Wed 29 Jul 2026 16:00:42 +0000
Files and hashes: 1: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: fGY3RBvBzPzX7yjFNzWQXVQ1R77q2rLbqb6b2RNVO8g=)
2: L81FjA0HBR4C3VRXIdzV9aijlDs.roa (hash: l6by3JK81dcZtTI2EAV3D8+hWiL6wJ47qGTRoCR1Fpc=)
3: Tb3ZP8jCF88QUUjfET9_-Hcpu9M.roa (hash: iQIVqlpU95wZ1Y2M7mnw2rHSBBZvM/n/nZYpuMemFV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:f5:a7:40:9e:53:8b:a0:94:c1:9c:ef:ba:7c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Validity
Not Before: Jul 28 16:00:42 2026 GMT
Not After : Jul 29 16:00:42 2026 GMT
Subject: CN=1d500e6b2e7afc5a76610cb0442f79f118719290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:63:08:64:a5:51:74:53:93:99:7d:eb:ef:
9b:af:4e:a3:2c:55:99:61:79:e8:14:7f:51:25:6e:
17:5f:c6:73:84:3a:04:2c:bf:51:7f:d4:08:8b:2f:
ff:92:e4:56:8b:27:a6:71:62:11:ef:d3:2f:10:0e:
90:15:75:8c:f8:c2:e5:8b:bb:bd:db:5a:f7:3e:d0:
ba:52:0b:95:6c:52:12:6a:8d:38:c4:d0:3e:ab:2b:
a2:4c:bb:18:d1:eb:91:ec:19:05:cc:6b:d6:aa:be:
fa:17:81:96:85:ca:7f:a2:b8:46:8d:31:5f:2d:47:
f8:60:b3:69:4d:ab:bf:ca:53:8c:50:cf:b0:e1:b6:
ab:31:4f:48:15:17:f6:fe:9d:4e:6f:65:b4:10:d9:
59:21:2e:af:39:ac:81:f3:a1:04:1b:5d:72:32:c1:
68:e1:39:3e:f5:07:80:b1:6c:9d:2c:4a:ee:61:df:
46:d9:4b:fb:f0:45:f2:6f:ed:e6:da:7d:ac:c7:51:
9f:c0:b5:28:62:7f:06:28:22:1c:5e:83:b4:f2:8a:
c4:21:ab:85:12:f4:68:e1:04:8b:eb:f7:83:c1:f2:
43:66:b6:40:d5:29:81:65:1d:8b:6c:f3:d2:bd:7a:
91:b0:67:e7:82:59:3c:d1:34:71:f8:26:12:8b:e3:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:50:0E:6B:2E:7A:FC:5A:76:61:0C:B0:44:2F:79:F1:18:71:92:90
X509v3 Authority Key Identifier:
keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:74:a9:f8:19:c8:8d:36:df:0e:81:a1:d4:9c:5e:5a:08:d3:
e8:a7:d3:e3:6a:f0:e3:d4:34:39:41:59:94:44:b8:f3:3e:69:
e6:49:a6:fd:b2:8b:31:a4:ef:ae:bf:55:61:ef:2d:24:a2:2c:
32:74:5b:88:54:a1:8b:f9:a6:f8:18:91:12:92:ca:14:78:fc:
bb:40:f6:bf:f4:e5:98:ae:54:8b:6d:a8:c4:79:82:86:67:d3:
64:19:50:22:10:13:74:3c:24:a3:50:2f:bf:69:91:6d:59:2c:
89:3f:18:77:b4:2e:1b:11:c8:97:42:d8:0d:7c:1e:38:1c:a5:
86:39:28:86:92:e0:a2:fd:0a:19:9d:01:50:e7:b1:a3:04:37:
0c:62:8b:7e:34:b5:e6:f9:dc:2a:49:fd:86:d9:2c:45:6f:10:
ec:7b:48:51:33:da:c9:88:40:1b:86:e8:31:97:7e:7c:86:ca:
31:e7:0d:84:cb:d6:15:2d:9a:a9:03:17:cc:bc:68:87:d7:ce:
52:20:03:93:e6:87:17:28:73:c3:0e:db:a6:24:f9:83:48:2f:
22:cd:87:c0:4c:27:56:58:c8:d4:3b:40:cc:06:35:00:74:94:
b0:44:f3:e1:3d:75:48:ba:3c:83:81:a0:7a:d2:5f:53:c8:96:
f6:fe:19:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:28 2026 by rpki-client