Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
File: AclpL7GkCf800a87grjj2mRnXDI.mft (raw, json)
Hash identifier: OKZKqRTxCfl/+ZatZBcF4mQlMmAH8mTNWCRjKBTeomE=
Subject key identifier: C9:8C:6A:08:10:EF:55:80:A9:3C:AB:3D:C7:70:8F:27:7F:94:23:BA
Authority key identifier: 01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
Certificate issuer: /CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Certificate serial: 019EBE480FF665B751A15B1D2C8EA82AD946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
Manifest number: 0ECE
Signing time: Sat 13 Jun 2026 00:00:54 +0000
Manifest this update: Sat 13 Jun 2026 00:00:54 +0000
Manifest next update: Sun 14 Jun 2026 00:00:54 +0000
Files and hashes: 1: AclpL7GkCf800a87grjj2mRnXDI.crl (hash: 174qdvVvG0XDp9CeXN9rJ2InfNqdFVQFTlhC0e1v5l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:0f:f6:65:b7:51:a1:5b:1d:2c:8e:a8:2a:d9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Validity
Not Before: Jun 13 00:00:54 2026 GMT
Not After : Jun 14 00:00:54 2026 GMT
Subject: CN=c98c6a0810ef5580a93cab3dc7708f277f9423ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:1a:28:cc:ab:70:ad:64:19:22:21:74:42:
15:f7:ea:93:0e:28:bc:dc:69:4b:0b:91:ef:d8:26:
46:15:70:2c:67:35:0c:22:39:39:3a:7b:33:3a:c4:
f0:a4:6d:de:94:d3:61:2c:36:9b:54:78:dc:27:27:
d7:6c:a6:f8:01:1b:7e:a3:71:86:b4:1c:08:41:59:
1e:56:f9:42:f0:2e:f3:0f:41:2d:aa:36:8d:9f:72:
9a:ee:7a:f0:c6:d2:9d:c7:9a:2c:dd:9b:1c:11:f9:
39:c8:4a:6b:f3:6b:bc:be:45:03:25:7e:43:88:b3:
aa:e5:d4:80:8b:df:6c:b5:1b:d0:f4:9a:04:2e:c0:
a9:cd:3f:2d:30:27:40:81:82:26:e3:1d:d3:9c:1f:
bd:4d:4e:90:4b:fa:66:4c:83:3e:72:17:dc:8d:ba:
42:c7:28:50:d6:09:e0:b2:7c:bf:94:3d:55:5e:c8:
62:df:44:89:8d:e8:a5:da:2a:86:ca:0e:69:51:21:
ed:63:37:aa:e9:d7:28:0e:64:df:f4:d6:b3:1f:f4:
76:dc:a7:9f:ce:91:da:56:cd:d4:a2:e9:d2:3a:f7:
bf:23:78:3a:f2:86:a9:fd:cd:42:90:35:50:9d:13:
c1:a8:95:73:4b:ca:b6:fc:09:e1:b5:f7:28:d6:47:
5e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8C:6A:08:10:EF:55:80:A9:3C:AB:3D:C7:70:8F:27:7F:94:23:BA
X509v3 Authority Key Identifier:
keyid:01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:52:97:c2:16:8f:5a:9e:81:44:71:70:c4:81:2e:60:ff:4d:
6e:7a:93:9f:fe:e1:d1:4f:42:a6:4e:cf:67:e5:f9:3d:69:5a:
1d:4f:39:ce:4e:2a:9c:97:c5:26:51:f4:cf:8d:c3:55:39:b2:
af:c8:4c:5a:ea:23:a4:b2:f6:df:0f:ab:70:1a:ff:33:ce:80:
15:48:d9:5c:50:fa:27:de:58:f6:2f:6a:7b:7f:08:e4:d6:de:
6d:11:d8:2f:b5:86:10:72:b3:65:89:bb:17:5f:45:42:c2:41:
5e:dd:08:91:26:1e:5f:9d:f8:8b:38:af:bc:17:3c:18:c6:30:
f2:41:26:e9:cf:cc:6b:80:99:b5:f3:40:a4:4b:98:1d:da:80:
f1:53:fc:99:44:c8:ff:88:cd:6e:c6:18:09:4f:58:57:54:02:
4f:e1:4d:eb:bd:48:ab:1b:5c:94:14:f4:07:37:2a:3a:79:4c:
ae:c5:54:92:3d:f0:08:80:dd:a6:c1:a5:b2:0d:7f:67:bb:ea:
1f:e4:5e:54:f5:79:bb:ae:8f:c8:90:f6:0b:7c:de:4b:1f:fb:
df:39:5c:37:4f:7d:3c:d1:5f:b5:0e:e4:21:47:59:6d:d2:61:
9c:ea:d0:e1:d9:2c:4d:c0:26:42:2c:96:61:bd:2c:74:39:78:
b6:1f:4a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:42:12 2026 by rpki-client