Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: kDEa4n9jzVNOAH6Squ/WYpc+L2DBEbLGPl9iW8uFXDI=
Subject key identifier: F3:FC:07:23:E7:70:78:8C:1B:57:FB:1A:19:13:33:75:01:6B:D9:E5
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 019CAAC645E8498CB25AB0B307A4CE05D40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 12F1
Signing time: Sun 01 Mar 2026 19:00:46 +0000
Manifest this update: Sun 01 Mar 2026 19:00:46 +0000
Manifest next update: Mon 02 Mar 2026 19:00:46 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: 2lIh8rD0C4bC54mfsxmmr9YqfatiNftwBTQrns1pSTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:45:e8:49:8c:b2:5a:b0:b3:07:a4:ce:05:d4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: Mar 1 19:00:46 2026 GMT
Not After : Mar 2 19:00:46 2026 GMT
Subject: CN=f3fc0723e770788c1b57fb1a19133375016bd9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:a0:69:e3:60:e8:13:11:d8:e1:b1:ca:9a:
e1:d3:9b:77:53:e5:1e:17:e6:32:30:e5:0e:10:f4:
f8:27:fe:49:b8:f5:62:a8:02:9b:7c:9b:b8:da:a2:
8f:a1:78:0a:c0:1a:a7:f3:d5:b7:e7:d6:41:8e:4a:
d9:e0:a1:9d:8c:35:48:71:b5:7b:35:9d:ab:c1:08:
2c:90:62:1b:2e:56:8a:dd:d9:42:03:24:3c:9d:05:
5e:05:0d:fd:32:56:ef:98:5e:2d:fc:ee:40:ac:31:
48:d7:50:7d:16:f2:08:a1:de:b3:2d:3e:79:6b:3c:
f4:41:68:ba:c0:2f:c2:79:47:62:4b:f9:6e:0e:b7:
3c:4c:f3:18:9c:d8:c6:f1:38:a0:8b:77:44:2a:f5:
fc:7b:3c:9e:e0:99:95:eb:6f:ff:a7:7b:3e:49:2c:
09:4b:49:c7:78:ab:0e:69:86:1c:f0:19:25:16:d6:
07:cc:1b:41:88:64:be:ac:1b:ff:fd:a5:b9:1c:69:
50:82:0e:9c:d3:e8:6e:03:e5:77:5f:f1:7d:08:a0:
82:b8:d4:be:a7:01:0a:c4:fb:4d:cd:7f:38:e9:4c:
65:7c:49:2c:b4:a4:ee:e4:a9:5e:0f:7a:08:ce:18:
78:82:04:46:36:0e:f1:1a:fc:3a:8c:41:8b:02:ee:
2f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FC:07:23:E7:70:78:8C:1B:57:FB:1A:19:13:33:75:01:6B:D9:E5
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:92:1d:31:b6:a2:cf:c8:56:f2:e8:9b:f3:ac:05:a9:ff:b3:
e2:4d:5c:5e:54:1b:8f:59:ab:18:8b:41:fe:d1:b6:49:fe:e7:
a8:7c:22:ab:52:18:d1:93:2d:26:0f:30:cd:c8:9d:8e:eb:e0:
26:70:3a:50:d5:e5:75:66:af:ce:5d:36:b9:d3:db:b3:e3:3b:
47:0c:1e:eb:80:55:19:9d:fe:10:dd:c4:9c:93:0b:63:ba:e8:
73:06:9f:ed:e0:27:aa:96:5c:8b:12:09:8b:95:19:b1:c5:2d:
4b:9f:c4:e9:91:49:99:19:e6:ad:d5:2b:7d:79:77:da:f2:01:
66:b1:ba:a1:86:33:60:67:a8:c4:dd:12:1c:81:53:4d:5c:65:
e7:37:2d:ae:a8:58:2a:d7:a5:b1:06:f4:33:2a:5f:d7:2e:8e:
a9:82:bb:2f:94:e7:59:79:03:53:dc:d2:75:30:5b:9f:69:92:
8c:3b:5f:23:c9:2e:d3:bb:f9:a7:2f:be:8f:75:3a:a9:c7:0c:
3c:f5:5c:53:5b:83:bf:36:42:b0:2d:0e:7f:9d:79:b7:15:31:
42:cb:81:3b:00:88:d3:4e:eb:f9:e1:ca:db:a8:a8:38:c6:1b:
32:c0:40:ed:e1:63:6b:a8:95:36:d4:ad:71:bd:5d:ef:14:bd:
f6:45:f6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:43 2026 by rpki-client