Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier: QTv5v6VR2I53n9kjBqi5KstJhq6WA6Pa9Jh5BCIaMFQ=
Subject key identifier: 90:2F:6F:04:4B:18:EA:15:44:55:74:AE:65:D5:E6:B2:DB:90:A9:78
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial: 019D985077804EC921D4FF7E667A9B1C6908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number: 0DF2
Signing time: Thu 16 Apr 2026 22:01:43 +0000
Manifest this update: Thu 16 Apr 2026 22:01:43 +0000
Manifest next update: Fri 17 Apr 2026 22:01:43 +0000
Files and hashes: 1: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: 3ALvfiRuaHP0AUjwudcy7O6LYpiL1HdzeCFkj25/y50=)
2: L81FjA0HBR4C3VRXIdzV9aijlDs.roa (hash: l6by3JK81dcZtTI2EAV3D8+hWiL6wJ47qGTRoCR1Fpc=)
3: Tb3ZP8jCF88QUUjfET9_-Hcpu9M.roa (hash: iQIVqlpU95wZ1Y2M7mnw2rHSBBZvM/n/nZYpuMemFV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:77:80:4e:c9:21:d4:ff:7e:66:7a:9b:1c:69:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Validity
Not Before: Apr 16 22:01:43 2026 GMT
Not After : Apr 17 22:01:43 2026 GMT
Subject: CN=902f6f044b18ea15445574ae65d5e6b2db90a978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:c8:d8:29:14:fc:6c:50:40:74:90:72:7c:
05:11:95:62:b2:5b:d0:75:7c:de:cd:4c:d4:bc:fb:
75:a7:6b:74:08:d2:63:a8:30:92:12:08:24:dd:02:
e9:b1:00:40:0d:a7:e7:e8:bf:9d:23:18:db:9c:4b:
2c:24:60:ec:29:2e:3c:5e:3b:9d:08:c8:3f:54:6d:
f2:65:98:16:38:51:c1:13:00:69:92:ec:09:c0:f5:
79:9d:66:84:eb:88:08:f2:ab:d9:d9:8b:bf:ce:be:
e5:ea:42:e9:fb:7e:ff:af:fe:5a:64:ae:88:53:28:
c3:81:42:1c:1c:32:02:99:fe:28:e5:05:b1:e9:50:
85:07:68:98:2d:44:2e:d2:88:6c:3d:75:be:5a:09:
0e:0b:03:25:ba:e6:08:a9:aa:ea:bf:a4:fa:77:12:
94:c2:75:ef:af:88:1c:b3:6a:ae:0d:77:1b:b0:f7:
62:95:fc:e3:4a:57:9d:9e:22:84:b3:e7:bc:38:03:
9d:e6:f0:99:3a:3d:3b:93:97:f3:38:1b:20:46:ca:
b6:d3:44:4f:6f:f3:59:97:a5:26:2d:40:32:0d:c5:
b3:7c:5a:78:6e:e6:95:37:23:de:08:b9:e9:66:99:
96:87:4d:35:08:16:c2:2d:b0:47:86:af:36:e3:d5:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2F:6F:04:4B:18:EA:15:44:55:74:AE:65:D5:E6:B2:DB:90:A9:78
X509v3 Authority Key Identifier:
keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:db:f1:7d:fc:4c:5c:63:91:e4:49:f6:8a:cc:d7:f4:14:63:
cd:b2:62:7b:c9:85:3e:83:f7:a0:24:85:17:a7:b0:77:1e:f9:
e1:a5:da:36:be:e9:34:84:f0:6e:8f:45:34:0d:b1:94:ad:2a:
99:d2:da:05:a1:35:1a:82:a7:98:2f:3b:14:c4:f3:a3:51:e3:
17:28:bc:a6:c8:d9:8f:8a:88:49:5f:88:0e:15:df:a4:70:82:
05:62:d1:5c:e4:e7:de:77:79:64:c3:bd:d8:60:6c:2c:5a:67:
eb:97:ce:d7:26:09:b9:0b:b6:17:92:98:0f:c5:6d:2b:cd:9b:
a1:7b:ed:02:7e:b3:45:eb:cb:0f:3a:3c:93:b3:0c:63:1e:51:
63:2b:07:eb:13:60:91:23:5e:61:92:3f:7e:7a:3f:43:50:cd:
29:97:a5:2a:b0:80:84:16:52:90:c1:1b:b4:a3:1c:bc:64:10:
97:b7:b3:a1:ec:b9:fe:28:f4:ce:1d:b2:6c:2c:d4:01:e5:a2:
12:e4:e0:69:90:29:8b:1a:ca:6e:d1:65:31:8b:e7:61:85:91:
e0:b2:d8:47:57:80:91:5e:a9:d8:94:17:57:60:58:dc:2c:96:
21:26:af:65:73:d2:b5:0b:9a:2c:5a:65:73:d1:3c:25:a3:3e:
b5:4f:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:33:25 2026 by rpki-client