Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier: qciuekKdgAUc2VbMA2dMrm9UzjUljOIpjrNkP+n1fUg=
Subject key identifier: DE:DC:85:2D:5F:E8:E8:A7:9E:18:DB:25:C0:38:9D:EF:B1:C9:A0:D7
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial: 01A0C7464434846F9A49FD954407DB9DD44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number: 0F98
Signing time: Tue 22 Sep 2026 04:01:05 +0000
Manifest this update: Tue 22 Sep 2026 04:01:05 +0000
Manifest next update: Wed 23 Sep 2026 04:01:05 +0000
Files and hashes: 1: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: yMeEIjaA4tVjOHlB57m9ifuKqj2+66oo/4G3lNdM6yQ=)
2: L81FjA0HBR4C3VRXIdzV9aijlDs.roa (hash: l6by3JK81dcZtTI2EAV3D8+hWiL6wJ47qGTRoCR1Fpc=)
3: Tb3ZP8jCF88QUUjfET9_-Hcpu9M.roa (hash: iQIVqlpU95wZ1Y2M7mnw2rHSBBZvM/n/nZYpuMemFV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:44:34:84:6f:9a:49:fd:95:44:07:db:9d:d4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Validity
Not Before: Sep 22 04:01:05 2026 GMT
Not After : Sep 23 04:01:05 2026 GMT
Subject: CN=dedc852d5fe8e8a79e18db25c0389defb1c9a0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:ba:46:35:76:be:72:7e:6c:5c:09:70:5f:
bd:93:f8:0a:c7:3e:2d:c6:72:7c:38:8f:99:4a:1d:
19:c7:0f:2d:a4:a6:0d:4e:db:c5:19:4a:5f:b9:de:
91:3b:14:e7:a5:e6:ea:2e:96:ec:52:99:32:6d:f5:
69:4c:de:34:60:95:0e:8d:e9:6d:43:1d:79:1f:03:
4a:5e:ce:a7:e9:80:35:c6:58:23:e4:8f:53:32:cf:
05:ef:a4:73:08:3f:b1:4d:e6:9b:e6:8c:4c:d4:e2:
a6:30:a8:17:59:62:4b:63:20:8e:df:91:1e:99:64:
dc:38:51:35:f5:75:10:d2:34:0f:03:a1:ea:c8:d6:
a3:0e:5d:a5:f5:10:ae:9b:31:a0:0d:2e:2d:5f:7a:
f1:c0:c5:eb:2a:ac:8a:59:96:f8:d2:54:2f:43:90:
8f:9c:08:5a:33:45:b1:0a:2d:fa:a7:a8:fc:fd:d2:
6f:74:d5:3d:b8:fc:e1:32:a9:8b:0a:4f:83:25:ed:
9a:5a:18:64:67:92:db:5f:b1:05:70:4d:6a:2f:57:
58:d5:5c:6e:f9:73:32:e5:e7:56:14:20:5f:7a:c5:
00:c5:d8:10:65:2e:f8:ac:94:b2:bd:8f:05:76:96:
2b:cb:1b:ad:04:42:0e:2e:9f:0c:e2:44:c2:ad:c0:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DC:85:2D:5F:E8:E8:A7:9E:18:DB:25:C0:38:9D:EF:B1:C9:A0:D7
X509v3 Authority Key Identifier:
keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b4:4d:c1:b0:a3:89:1f:d1:69:b9:1c:ed:12:f1:b5:80:86:
28:31:0a:41:2b:ed:c3:bc:bc:bb:0a:b8:1c:3c:4b:93:45:8d:
0c:59:22:9c:06:0c:d9:ce:c2:22:70:5e:84:1d:ac:01:e7:25:
3c:fc:96:02:90:22:7a:a5:94:0f:22:e9:d1:ad:e0:b8:fc:5d:
b8:24:fc:90:7a:ca:6e:72:f0:57:6f:ff:7f:52:c3:83:4c:8d:
a5:9a:da:da:b9:98:a4:fa:f2:c5:9a:75:6d:f9:2c:8b:ed:d2:
f0:b3:31:9e:49:43:0e:ca:8f:8d:1d:1f:f2:96:07:7d:15:82:
eb:37:e7:32:59:63:e7:a1:fd:b8:55:92:4f:c4:90:1d:dd:2a:
00:59:6e:ef:97:af:01:61:cf:ba:d7:20:8e:5e:39:05:a8:99:
db:b7:4f:4f:76:1c:9b:8d:5a:5b:98:4f:51:e2:d0:a9:9a:0e:
59:dc:13:e9:ce:89:5b:38:43:39:84:f0:e0:19:0b:f1:4f:f0:
9b:a0:3c:9b:82:40:2a:35:83:ca:49:79:14:c2:a9:7c:ba:02:
5e:2a:76:6a:f4:8f:2e:df:96:ef:f9:d8:ea:28:5b:0b:72:cd:
2a:79:2c:b3:9d:74:a3:74:53:be:e2:3b:b6:bc:91:0e:38:d1:
6a:54:cc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:29:16 2026 by rpki-client