Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: aCFPbmJdRi3urUP67j0Brlr7y+uQ9+OXfPJQ7BZtlOY=
Subject key identifier: B2:50:A7:0A:B6:32:93:7E:AA:F0:94:59:8D:52:FD:08:B8:53:DD:27
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 01A0C55768835684AAEAA094A5392D0F45B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 1511
Signing time: Mon 21 Sep 2026 19:00:34 +0000
Manifest this update: Mon 21 Sep 2026 19:00:34 +0000
Manifest next update: Tue 22 Sep 2026 19:00:34 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: NZV0e1CGVfIx5JGp/4GLb76N0onJhUjG6C59k79kj8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:68:83:56:84:aa:ea:a0:94:a5:39:2d:0f:45:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: Sep 21 19:00:34 2026 GMT
Not After : Sep 22 19:00:34 2026 GMT
Subject: CN=b250a70ab632937eaaf094598d52fd08b853dd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:0f:85:5d:14:0c:d4:05:94:53:8d:ab:94:
4c:df:fe:fc:01:f1:2c:a8:c3:73:3c:2f:b7:9a:ac:
27:15:29:07:87:60:3d:54:52:74:f3:59:4c:6e:79:
05:77:61:46:22:8d:0a:4e:9b:b0:fc:cc:69:9e:98:
0b:9d:33:7b:63:ad:4f:2b:a8:8e:f4:e5:60:39:f8:
09:0c:84:cb:5a:11:d4:6b:d7:b8:ca:33:c5:79:58:
76:50:79:d5:cd:22:2f:35:d8:b1:98:40:e0:a0:6b:
93:8c:82:ad:a6:c7:ba:3d:59:68:9e:9e:35:07:5b:
dd:af:84:55:be:51:c4:b7:f4:9a:13:e0:70:d7:3b:
99:60:b9:ea:cd:a0:b2:44:a2:e0:87:c2:d6:ab:5e:
24:16:0b:39:08:54:c3:b9:ef:b7:18:49:32:89:2b:
48:2d:90:c1:dd:27:c8:50:77:c5:8c:83:5b:ce:ad:
00:a0:76:38:b2:2f:ab:b9:02:73:00:a4:19:7b:40:
73:86:db:1b:57:d4:9a:1c:be:bd:d0:a1:c7:6d:fe:
c1:df:03:3f:c8:9a:f8:39:ff:c2:06:a1:8d:d0:3e:
33:89:75:be:3d:72:4d:24:d3:48:03:b7:a3:75:9d:
f5:6f:7d:80:f6:c8:0e:23:ac:f5:38:66:df:2a:aa:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:50:A7:0A:B6:32:93:7E:AA:F0:94:59:8D:52:FD:08:B8:53:DD:27
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:46:33:d2:81:38:c3:d4:fb:c0:97:ab:37:7c:00:a4:86:be:
2a:45:13:8e:10:19:35:69:99:7c:1f:ac:c9:68:c5:ea:54:f0:
82:c3:91:4b:54:a1:5e:ed:3d:6d:6a:a6:f3:99:6e:e6:dd:f4:
68:c0:a1:64:64:35:20:14:c9:08:09:cc:8b:d6:6a:12:67:73:
32:8a:3a:81:46:64:fc:b3:08:60:28:66:2d:b7:be:34:1c:84:
49:53:8a:d8:27:85:b9:7c:9b:0f:54:88:6f:22:ac:a0:dc:57:
06:5c:e6:cc:da:ef:c0:a6:45:67:4b:04:14:f1:32:57:cf:74:
47:13:b6:c0:0a:fc:ec:c7:ba:65:4b:b1:4d:4e:9d:b4:7a:a9:
48:bb:cc:28:79:05:42:d9:f6:db:f4:09:df:a9:c9:64:da:8a:
12:8d:b4:83:06:0d:e5:5c:a9:a6:3d:b2:63:fd:ab:90:aa:36:
c9:14:45:91:49:b0:7c:d7:6e:45:bb:5f:f1:e2:3e:62:a6:ba:
a2:37:c5:ff:4f:17:49:3f:1e:fc:da:c8:78:f6:c6:82:63:1d:
9c:65:4e:e1:26:00:65:a1:56:61:73:d1:98:1a:8c:78:44:58:
d5:5a:a9:65:12:f6:91:65:01:cd:3d:b1:32:4a:6b:54:21:2a:
eb:d5:0b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:44:30 2026 by rpki-client