Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
File: AclpL7GkCf800a87grjj2mRnXDI.mft (raw, json)
Hash identifier: 9nyRra61+ej9/RwsIBUdlSyiVGAMO7ScGkLRhpTQ1BA=
Subject key identifier: 32:0F:FA:87:0B:8D:E5:86:C6:D4:95:E1:29:4A:CD:4F:25:BC:87:76
Authority key identifier: 01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
Certificate issuer: /CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Certificate serial: 019CAB34532ADA80960A9F5E35C312AC0987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
Manifest number: 0DBB
Signing time: Sun 01 Mar 2026 21:00:58 +0000
Manifest this update: Sun 01 Mar 2026 21:00:58 +0000
Manifest next update: Mon 02 Mar 2026 21:00:58 +0000
Files and hashes: 1: AclpL7GkCf800a87grjj2mRnXDI.crl (hash: PlIcOmsjGKlv088eRnsBX/k2LlwmllNveO+H0duashA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:53:2a:da:80:96:0a:9f:5e:35:c3:12:ac:09:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Validity
Not Before: Mar 1 21:00:58 2026 GMT
Not After : Mar 2 21:00:58 2026 GMT
Subject: CN=320ffa870b8de586c6d495e1294acd4f25bc8776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:d1:8f:3f:f9:78:70:2d:dd:c2:36:53:5b:
b6:cb:3e:2c:58:3b:72:23:fe:1f:b9:e3:0e:8b:72:
80:1b:a7:70:aa:44:17:3e:1e:ba:55:68:10:79:34:
af:51:fb:39:48:21:da:ad:30:17:76:61:64:cd:22:
cb:c9:c8:cf:57:3b:40:9b:23:26:c1:ae:64:37:a5:
da:5f:7c:19:2d:61:c0:03:df:41:70:82:81:23:ec:
1a:f8:17:9f:49:33:39:5f:b6:3e:b5:d4:37:3b:90:
45:2e:83:d1:14:a1:30:b4:96:05:c2:c5:cb:85:a9:
b6:ee:f8:f3:81:4f:10:b7:43:b9:7d:ac:a1:21:cd:
32:56:40:b6:aa:f0:27:5d:de:74:83:92:eb:3a:d0:
b3:2e:0a:d9:86:2b:c0:93:7e:9a:35:20:00:9d:9a:
cc:55:31:75:fa:94:25:2e:1f:2e:8d:52:e0:68:f2:
85:2d:69:7d:f5:45:73:81:ae:13:08:e3:b8:6d:aa:
14:9c:fc:6f:ee:07:55:da:66:28:be:a4:e7:8c:0f:
47:90:1f:9b:02:9e:20:8c:34:1d:7e:4c:65:d2:33:
f2:82:9b:6e:23:fc:10:f3:e0:66:d7:62:44:83:1a:
a6:d0:5a:92:02:66:c1:48:d7:2f:5b:ce:bc:da:d7:
d1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0F:FA:87:0B:8D:E5:86:C6:D4:95:E1:29:4A:CD:4F:25:BC:87:76
X509v3 Authority Key Identifier:
keyid:01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b5:02:bd:ab:45:cb:b9:69:bd:07:b3:a6:d2:6b:1e:0a:c9:
3c:0f:07:35:62:59:4d:92:a6:de:8d:fd:c8:6b:8b:f1:57:44:
ee:bb:36:5e:83:73:32:02:1f:a8:39:aa:e8:c3:1e:99:35:05:
e6:22:24:62:6e:82:fa:5f:82:eb:f3:01:51:c0:08:16:d4:31:
f6:e6:51:e2:73:da:fa:52:15:20:da:42:0a:f9:69:34:59:9e:
4a:c1:a3:be:92:d6:e6:04:4e:5b:2e:97:a1:87:ab:4e:70:52:
b6:79:bb:fb:1c:37:15:00:d9:f4:6b:06:4d:4a:5c:34:c2:2f:
e3:3d:97:34:59:21:84:0a:7d:4e:a7:03:7a:ac:71:b9:f6:3b:
ee:ba:5b:c5:ad:25:da:a9:96:a8:2f:75:fc:f9:5b:26:71:e0:
8e:ce:a8:a3:5c:f5:8f:f0:49:93:0a:53:8d:91:75:61:4a:7d:
2d:31:a2:5d:19:54:26:3c:e8:f8:bd:e8:46:c0:c6:62:5f:1f:
70:49:a5:68:fe:d8:04:ce:7e:36:00:bd:f4:f4:be:20:fe:14:
d4:57:50:64:59:3d:00:d8:ee:f9:58:31:a2:c7:d2:14:5b:39:
25:3f:a2:cf:da:db:f0:15:c5:be:36:c3:f6:8f:e3:d4:61:dd:
93:96:74:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:45 2026 by rpki-client