Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
File: AclpL7GkCf800a87grjj2mRnXDI.mft (raw, json)
Hash identifier: yTuyUMjvnlz+58Q4lSOiVgbCA8uylvpWnwu/nGjd0gs=
Subject key identifier: 9B:ED:B9:4B:3A:6C:A4:16:AE:B8:1D:79:3F:96:AD:BF:4B:BD:94:BD
Authority key identifier: 01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
Certificate issuer: /CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Certificate serial: 019D98BD51D8891AC1BA66AC3B430096D4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
Manifest number: 0E36
Signing time: Fri 17 Apr 2026 00:00:37 +0000
Manifest this update: Fri 17 Apr 2026 00:00:37 +0000
Manifest next update: Sat 18 Apr 2026 00:00:37 +0000
Files and hashes: 1: AclpL7GkCf800a87grjj2mRnXDI.crl (hash: vmMCe4X2lfqnY6MSRQzLZL6YuxwNiDVf3EVJY3wUzDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:51:d8:89:1a:c1:ba:66:ac:3b:43:00:96:d4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Validity
Not Before: Apr 17 00:00:37 2026 GMT
Not After : Apr 18 00:00:37 2026 GMT
Subject: CN=9bedb94b3a6ca416aeb81d793f96adbf4bbd94bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:55:b0:72:ff:a9:e5:09:a4:9e:00:9b:cb:
90:31:40:21:10:18:f1:79:3a:33:dd:4a:de:c5:06:
bd:f5:7e:c3:43:7e:fd:c5:71:37:59:21:f1:33:fe:
9c:0f:cb:a3:fe:0b:7f:21:bb:48:92:62:ea:f3:cd:
63:2a:19:3d:0b:5f:77:cd:4c:c2:3e:88:d5:96:37:
54:1a:65:8a:fd:d7:ca:75:62:ce:c5:2e:09:e4:1a:
cb:9c:60:ec:23:97:b4:de:9f:bf:1c:87:01:bb:10:
dc:10:d7:ab:c2:08:2d:9f:05:b1:43:6b:83:4d:5a:
3e:6d:22:d6:aa:48:4d:6e:82:01:15:9a:55:52:5c:
dd:64:94:47:17:f8:c8:d3:67:72:ab:c4:d2:cf:27:
fa:3d:aa:5e:3b:35:4c:74:f1:c9:9a:15:35:a9:1f:
cc:8e:57:0d:75:2c:7b:c2:2d:f7:68:6a:c4:7e:1d:
6d:04:24:d5:ed:54:63:7f:b1:c5:87:6a:8c:cb:9a:
86:32:0c:d1:db:d7:f7:46:1f:6e:23:b1:f0:f1:e5:
00:33:8e:10:0f:0a:7e:b6:e1:14:bb:ff:b2:ab:a8:
8c:7c:5e:45:b6:31:34:99:d6:24:54:54:67:d2:be:
1d:7a:b0:72:e4:73:b4:1f:53:21:e4:48:59:8f:f1:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:ED:B9:4B:3A:6C:A4:16:AE:B8:1D:79:3F:96:AD:BF:4B:BD:94:BD
X509v3 Authority Key Identifier:
keyid:01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fe:34:6e:2f:15:4c:e4:c1:cf:b9:ca:8e:cd:a5:25:e8:5c:
97:4d:37:63:8b:9d:c4:40:b2:96:0e:39:c8:35:52:43:ee:b6:
9f:11:6f:a2:1a:d7:3e:da:b0:48:d8:f7:09:86:15:16:cf:25:
3a:36:4b:82:83:3e:64:11:20:58:e0:0a:50:ee:2f:ac:c0:a4:
8d:b6:e6:83:5c:5e:e1:5d:89:fd:30:a7:41:c4:b5:59:09:4e:
2e:ca:f1:8c:80:b4:c3:62:52:96:5d:7c:4f:e1:01:21:04:9c:
30:73:46:df:9d:bd:aa:56:02:42:06:b9:a8:6c:cc:ed:60:dc:
17:5f:7b:01:a3:f6:80:11:cf:e9:fa:bf:86:cf:49:98:b8:55:
e7:64:9d:d7:54:58:f8:49:9f:46:2f:3e:7e:bf:96:73:f1:96:
9c:dd:81:62:ac:c2:da:a8:94:2a:97:bf:bc:ac:6e:e7:a5:41:
49:1c:76:96:a5:96:19:72:7b:24:ad:57:f9:a9:42:e5:32:88:
02:93:74:1e:e8:c6:78:67:72:58:91:64:f1:85:13:fe:b8:10:
0b:6e:47:22:d5:e9:6e:9e:f3:a6:97:98:34:1b:d0:fa:f9:ba:
60:32:d6:24:be:9e:4a:92:a8:45:c9:07:eb:19:32:b2:ab:d8:
66:ec:4c:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvVHYiRrBumasO0MAltTwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzk2OTJmYjFhNDA5ZmYzNGQxYWYzYjgyYjhlM2RhNjQ2
NzVjMzIwHhcNMjYwNDE3MDAwMDM3WhcNMjYwNDE4MDAwMDM3WjAzMTEwLwYDVQQD
Eyg5YmVkYjk0YjNhNmNhNDE2YWViODFkNzkzZjk2YWRiZjRiYmQ5NGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6BVsHL/qeUJpJ4Am8uQMUAhEBjx
eToz3UrexQa99X7DQ379xXE3WSHxM/6cD8uj/gt/IbtIkmLq881jKhk9C193zUzC
PojVljdUGmWK/dfKdWLOxS4J5BrLnGDsI5e03p+/HIcBuxDcENerwggtnwWxQ2uD
TVo+bSLWqkhNboIBFZpVUlzdZJRHF/jI02dyq8TSzyf6PapeOzVMdPHJmhU1qR/M
jlcNdSx7wi33aGrEfh1tBCTV7VRjf7HFh2qMy5qGMgzR29f3Rh9uI7Hw8eUAM44Q
Dwp+tuEUu/+yq6iMfF5FtjE0mdYkVFRn0r4derBy5HO0H1Mh5EhZj/H+sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvtuUs6bKQWrrgdeT+Wrb9LvZS9MB8GA1UdIwQY
MBaAFAHJaS+xpAn/NNGvO4K449pkZ1wyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82MzBmZWMtZGQ1Ni00NmFjLWEwMzgt
ZGRiODkwZDc4ZmU5LzEvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82MzBmZWMtZGQ1Ni00NmFjLWEwMzgtZGRiODkwZDc4ZmU5
LzEvQWNscEw3R2tDZjgwMGE4N2dyamoybVJuWERJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPP40bi8V
TOTBz7nKjs2lJehcl003Y4udxECylg45yDVSQ+62nxFvohrXPtqwSNj3CYYVFs8l
OjZLgoM+ZBEgWOAKUO4vrMCkjbbmg1xe4V2J/TCnQcS1WQlOLsrxjIC0w2JSll18
T+EBIQScMHNG3529qlYCQga5qGzM7WDcF197AaP2gBHP6fq/hs9JmLhV52Sd11RY
+EmfRi8+fr+Wc/GWnN2BYqzC2qiUKpe/vKxu56VBSRx2lqWWGXJ7JK1X+alC5TKI
ApN0HujGeGdyWJFk8YUT/rgQC25HItXpbp7zppeYNBvQ+vm6YDLWJL6eSpKoRckH
6xkysqvYZuxM+w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:16 2026 by rpki-client