Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: j3rfv8OdqhsZtIeCe3ZyPj3gJIax9LEZ/4X+uBtwYSA=
Subject key identifier: 02:95:47:10:31:D1:25:24:89:67:75:03:29:07:08:86:F8:A0:C7:A2
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 019EBFC89469AE5B5028D4AD68A6DFA1CA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 1405
Signing time: Sat 13 Jun 2026 07:00:53 +0000
Manifest this update: Sat 13 Jun 2026 07:00:53 +0000
Manifest next update: Sun 14 Jun 2026 07:00:53 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: bQLEE9qlHo5OEY2ahOHiKADmMlB6qjdU37ALFsVrt0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:94:69:ae:5b:50:28:d4:ad:68:a6:df:a1:ca:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: Jun 13 07:00:53 2026 GMT
Not After : Jun 14 07:00:53 2026 GMT
Subject: CN=0295471031d125248967750329070886f8a0c7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:98:69:2f:a5:eb:c7:6e:dd:88:6c:f6:58:
35:c7:0d:2d:ab:05:93:64:0f:97:5c:98:30:8c:21:
78:c5:23:bb:8c:9c:61:f8:c0:e2:51:71:06:92:e9:
12:d4:82:e7:b7:ae:19:7a:60:14:01:a2:16:dd:f4:
d6:8e:10:ac:9c:95:ec:df:63:e8:46:29:0c:ce:26:
d3:e4:8f:32:9a:ab:20:68:ae:71:4a:cf:07:1e:eb:
c2:62:c6:d0:69:63:0f:55:43:a6:69:23:e0:88:be:
25:4a:65:60:b5:c8:30:d8:b3:cc:22:ae:09:75:1f:
82:0e:3c:13:e0:97:57:99:88:fb:81:a1:91:68:73:
1a:cb:53:48:58:e6:36:aa:31:f9:fc:c9:d4:9a:e9:
2c:ef:41:68:c6:ef:8c:99:58:5b:a1:cc:7e:c3:77:
97:1d:12:8f:46:ad:0e:62:ee:da:63:19:d7:90:32:
a9:5b:13:fc:93:1c:c0:bd:cd:17:5f:6c:73:69:3b:
8a:7c:73:85:1f:97:5c:da:ea:3f:46:f4:a3:a9:5e:
1e:d0:4a:45:41:e7:af:34:40:a6:35:d1:5b:bd:22:
15:35:e1:eb:5c:69:ce:73:72:f3:88:b9:ea:f2:07:
d5:81:d3:13:ac:3b:b8:10:c8:72:39:d9:b6:38:98:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:95:47:10:31:D1:25:24:89:67:75:03:29:07:08:86:F8:A0:C7:A2
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e3:b5:4a:8c:1b:f8:7e:74:60:0d:64:aa:e3:83:c6:1b:64:
00:c9:98:10:76:ae:e5:7d:c8:9f:c1:ca:de:b8:2a:05:09:0f:
a9:cc:5d:db:d0:28:53:fe:f2:0b:1b:0b:db:7b:e5:3e:f1:12:
46:7b:ff:42:d9:11:94:58:36:19:9e:8d:2c:87:8e:68:59:af:
bb:d9:40:3e:8c:be:f2:69:fc:74:47:a4:2a:b7:bc:ad:9b:40:
a8:49:49:64:b4:e9:8c:44:50:71:81:ec:fb:f1:53:1b:53:95:
5c:39:aa:39:df:09:05:eb:f7:83:39:e5:22:ff:86:2f:3c:a9:
57:49:53:7b:1d:b7:c9:aa:56:57:e7:a3:d3:6a:21:29:25:7e:
a5:f0:c8:d1:6a:9e:5f:95:99:ab:7d:8a:a8:49:eb:17:7b:85:
e6:a7:57:63:69:08:b9:ab:4a:d5:d6:53:32:b1:19:c8:06:bc:
5b:16:11:ab:d0:6f:1b:a9:05:2c:ff:df:89:ae:72:2f:9c:0e:
41:54:6e:91:c2:f7:44:82:9c:2d:64:21:e2:29:07:28:e3:1d:
35:d2:09:b7:8a:c7:02:9b:1d:be:e2:90:1a:ad:19:99:35:50:
cf:ea:ed:36:f0:a0:74:58:2a:0f:c7:16:10:c1:96:9b:30:1f:
c0:43:ac:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yJRprltQKNStaKbfocqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMmFkZTY0YTNkMmJkYmU4ZjdjZTgzNjEwZDJlN2M2NWZi
MzNlYWQwHhcNMjYwNjEzMDcwMDUzWhcNMjYwNjE0MDcwMDUzWjAzMTEwLwYDVQQD
EygwMjk1NDcxMDMxZDEyNTI0ODk2Nzc1MDMyOTA3MDg4NmY4YTBjN2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM6YaS+l68du3Yhs9lg1xw0tqwWT
ZA+XXJgwjCF4xSO7jJxh+MDiUXEGkukS1ILnt64ZemAUAaIW3fTWjhCsnJXs32Po
RikMzibT5I8ymqsgaK5xSs8HHuvCYsbQaWMPVUOmaSPgiL4lSmVgtcgw2LPMIq4J
dR+CDjwT4JdXmYj7gaGRaHMay1NIWOY2qjH5/MnUmuks70Foxu+MmVhbocx+w3eX
HRKPRq0OYu7aYxnXkDKpWxP8kxzAvc0XX2xzaTuKfHOFH5dc2uo/RvSjqV4e0EpF
QeevNECmNdFbvSIVNeHrXGnOc3LziLnq8gfVgdMTrDu4EMhyOdm2OJh/rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKVRxAx0SUkiWd1AykHCIb4oMeiMB8GA1UdIwQY
MBaAFAAq3mSj0r2+j3zoNhDS58Zfsz6tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNyZVpLUFN2YjZQZk9nMkVOTG54bC16UHEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84NjEzNGEtZWU0ZC00NjM3LWE0ZDQt
YzU3Y2Y4ZjFjZDU0LzEvQUNyZVpLUFN2YjZQZk9nMkVOTG54bC16UHEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS84NjEzNGEtZWU0ZC00NjM3LWE0ZDQtYzU3Y2Y4ZjFjZDU0
LzEvQUNyZVpLUFN2YjZQZk9nMkVOTG54bC16UHEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauO1Sowb
+H50YA1kquODxhtkAMmYEHau5X3In8HK3rgqBQkPqcxd29AoU/7yCxsL23vlPvES
Rnv/QtkRlFg2GZ6NLIeOaFmvu9lAPoy+8mn8dEekKre8rZtAqElJZLTpjERQcYHs
+/FTG1OVXDmqOd8JBev3gznlIv+GLzypV0lTex23yapWV+ej02ohKSV+pfDI0Wqe
X5WZq32KqEnrF3uF5qdXY2kIuatK1dZTMrEZyAa8WxYRq9BvG6kFLP/fia5yL5wO
QVRukcL3RIKcLWQh4ikHKOMdNdIJt4rHApsdvuKQGq0ZmTVQz+rtNvCgdFgqD8cW
EMGWmzAfwEOsog==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:50 2026 by rpki-client