Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: /+KdxSG4JedZB00/R9JOhVzK5EfEEnyfWs07u/07svY=
Subject key identifier: AC:B7:51:75:8C:8A:7E:2F:E2:4B:78:73:CF:51:5E:8B:8A:73:3C:6A
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 019CAC46E3EF01454C7C4A0308E79AC96154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 048A
Signing time: Mon 02 Mar 2026 02:00:52 +0000
Manifest this update: Mon 02 Mar 2026 02:00:52 +0000
Manifest next update: Tue 03 Mar 2026 02:00:52 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: KQsKfV1UECFPesrlju3ySfyx1psxc8x45ToQM709lnM=)
2: iup8bZJXQWzi6WIn8KegueZOLKE.roa (hash: zSYxeBh1XdgerWZy0gplpGx/R0toVcfaeIhO/MDyw5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:e3:ef:01:45:4c:7c:4a:03:08:e7:9a:c9:61:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Mar 2 02:00:52 2026 GMT
Not After : Mar 3 02:00:52 2026 GMT
Subject: CN=acb751758c8a7e2fe24b7873cf515e8b8a733c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:4f:da:e9:52:8c:b1:35:7f:af:80:12:84:
ac:7d:92:32:17:2d:09:49:21:19:5b:b8:d1:0d:f3:
29:9f:ee:e8:05:c3:58:cc:a4:1a:16:59:a7:8f:1e:
d7:cf:91:c9:8f:9e:02:27:e4:e3:dd:5c:55:4c:e3:
b1:b6:37:ff:90:3e:97:03:9c:0e:dd:31:d8:2b:ce:
6a:44:94:c7:88:34:05:06:7b:30:47:c2:15:80:b4:
32:25:0d:7b:dd:0c:3d:94:6f:56:5f:cd:88:f9:14:
41:2f:b1:11:97:6d:8b:6b:06:96:ae:1c:f9:6c:62:
fa:cc:41:5e:d1:08:51:30:c8:49:38:31:1c:f8:3e:
92:5a:f9:8d:e8:11:91:fa:de:9f:6e:dd:a1:0c:52:
fd:30:64:ff:00:65:c5:9c:e9:74:50:e7:6d:ec:67:
52:e7:5a:98:a4:91:59:3c:13:b9:88:a7:fe:67:c9:
9d:95:57:0f:7c:4c:2c:6d:2e:ab:6a:4f:42:2a:a1:
29:2d:5f:b2:fa:c9:a9:66:94:bf:3c:08:4f:a6:e5:
e6:3e:8a:f0:43:97:14:33:f4:e3:92:7c:1f:4d:15:
7c:83:d4:84:a1:ef:df:4d:f4:2d:a4:f3:cf:77:15:
c2:04:6e:72:98:a1:47:a5:18:02:83:c7:3e:cb:8b:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B7:51:75:8C:8A:7E:2F:E2:4B:78:73:CF:51:5E:8B:8A:73:3C:6A
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b7:0b:13:0c:2e:eb:4d:c3:38:5c:e1:f5:c7:fb:43:14:04:
0f:b4:0b:e3:f4:85:b8:d5:23:dd:f1:36:9b:4a:c4:a5:38:87:
0c:93:e3:7c:ce:2a:89:ce:89:ae:43:ec:96:46:de:dc:bc:4a:
0a:d4:ea:69:ea:d8:49:ef:8e:14:34:b8:1e:3e:74:9b:14:46:
ec:4e:8a:14:e2:a3:43:84:c2:16:4a:1a:4c:8e:75:ad:43:51:
75:19:15:af:ff:31:3d:a1:ea:b7:78:6a:a7:3d:9a:24:e5:5b:
3d:84:6c:f8:b0:ac:70:9c:e7:3b:21:92:c0:9b:a3:93:48:31:
40:12:08:58:97:f0:2c:8b:98:73:73:f0:3b:52:99:f8:40:93:
a8:47:ff:26:63:15:f5:db:7f:6c:68:d8:7e:6e:82:5f:dc:cf:
27:00:23:3b:3d:4a:24:78:dd:60:40:a5:fb:2c:94:a6:45:50:
73:7c:91:b9:8d:17:e1:68:7b:2e:e3:71:9b:7a:69:95:a2:7b:
1a:7f:4e:3f:d3:8e:3f:b4:f8:62:7a:58:c1:a4:29:b4:c3:8c:
08:f1:ac:2c:7d:0b:82:88:9d:5f:e6:05:8b:f6:2a:66:f1:d6:
e1:15:8e:82:f4:4f:d4:68:1c:33:dc:aa:f8:23:3c:51:8d:72:
3a:9f:fc:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRuPvAUVMfEoDCOeayWFUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDcwMjkzMjgwMmMyNzQzZDMzNWY2N2Q0N2E0MjM4YzMz
MjQ1MzMwHhcNMjYwMzAyMDIwMDUyWhcNMjYwMzAzMDIwMDUyWjAzMTEwLwYDVQQD
EyhhY2I3NTE3NThjOGE3ZTJmZTI0Yjc4NzNjZjUxNWU4YjhhNzMzYzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6tP2ulSjLE1f6+AEoSsfZIyFy0J
SSEZW7jRDfMpn+7oBcNYzKQaFlmnjx7Xz5HJj54CJ+Tj3VxVTOOxtjf/kD6XA5wO
3THYK85qRJTHiDQFBnswR8IVgLQyJQ173Qw9lG9WX82I+RRBL7ERl22LawaWrhz5
bGL6zEFe0QhRMMhJODEc+D6SWvmN6BGR+t6fbt2hDFL9MGT/AGXFnOl0UOdt7GdS
51qYpJFZPBO5iKf+Z8mdlVcPfEwsbS6rak9CKqEpLV+y+smpZpS/PAhPpuXmPorw
Q5cUM/TjknwfTRV8g9SEoe/fTfQtpPPPdxXCBG5ymKFHpRgCg8c+y4t3NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKy3UXWMin4v4kt4c89RXouKczxqMB8GA1UdIwQY
MBaAFAgHApMoAsJ0PTNfZ9R6QjjDMkUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODct
NDgwZmViOTJkNzE4LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODctNDgwZmViOTJkNzE4
LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLcLEwwu
603DOFzh9cf7QxQED7QL4/SFuNUj3fE2m0rEpTiHDJPjfM4qic6JrkPslkbe3LxK
CtTqaerYSe+OFDS4Hj50mxRG7E6KFOKjQ4TCFkoaTI51rUNRdRkVr/8xPaHqt3hq
pz2aJOVbPYRs+LCscJznOyGSwJujk0gxQBIIWJfwLIuYc3PwO1KZ+ECTqEf/JmMV
9dt/bGjYfm6CX9zPJwAjOz1KJHjdYECl+yyUpkVQc3yRuY0X4Wh7LuNxm3pplaJ7
Gn9OP9OOP7T4YnpYwaQptMOMCPGsLH0LgoidX+YFi/YqZvHW4RWOgvRP1GgcM9yq
+CM8UY1yOp/82Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:41 2026 by rpki-client