Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: AO2oZDzQr80pizt+AfQT3ZmUWlGPRShMD2cp+E93fyo=
Subject key identifier: 76:8C:80:9B:15:E1:80:AE:9E:44:B7:29:47:DC:77:7F:2B:08:15:7F
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 019DA3E6F935324DC50BD52B3B13D154D916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 1372
Signing time: Sun 19 Apr 2026 04:01:56 +0000
Manifest this update: Sun 19 Apr 2026 04:01:56 +0000
Manifest next update: Mon 20 Apr 2026 04:01:56 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: Qd93Ei6Bnj14K3O167FOAGWumQXrRurLLnG23pCWdNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:f9:35:32:4d:c5:0b:d5:2b:3b:13:d1:54:d9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: Apr 19 04:01:56 2026 GMT
Not After : Apr 20 04:01:56 2026 GMT
Subject: CN=768c809b15e180ae9e44b72947dc777f2b08157f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:74:8e:09:37:5b:ed:29:75:21:9e:c2:17:
e6:6e:0b:4c:d3:d5:95:1e:92:8d:3c:c1:1d:95:11:
79:dd:cb:f2:d9:56:bb:0d:5a:10:a3:4a:b9:d6:79:
03:74:e7:ea:56:fb:31:99:27:6c:f7:34:78:3d:30:
95:22:89:fd:e5:99:45:7c:57:5b:09:86:4a:c1:27:
f3:7e:cc:f9:44:06:dd:98:5f:26:6d:bb:2f:2f:31:
03:61:59:46:65:c0:fb:65:ba:66:a6:11:7d:a9:3e:
94:c8:70:3f:41:f5:43:2e:bf:f0:b9:db:69:ea:50:
dc:60:0c:17:87:40:c6:94:6f:3f:11:2c:92:cc:50:
0d:46:29:7d:af:12:81:08:52:41:9d:9a:cf:6f:77:
51:c3:b0:a3:77:77:fb:5f:1b:fd:46:a2:a4:24:17:
ce:4f:89:9a:7f:eb:bf:73:85:e6:06:65:6b:5c:e9:
66:cb:1b:ff:78:27:e6:56:2f:dd:4c:f3:c5:29:42:
64:5e:ef:68:27:9a:98:4a:72:6e:4a:39:dc:c3:98:
c3:ee:da:8e:74:28:c8:02:49:1b:46:e7:4d:f7:d6:
cc:c3:cd:fe:22:18:79:05:78:9b:19:77:d6:5e:a0:
84:43:ee:63:4e:7c:44:81:15:c4:86:49:06:c1:43:
13:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8C:80:9B:15:E1:80:AE:9E:44:B7:29:47:DC:77:7F:2B:08:15:7F
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:5f:97:af:ff:5c:25:ec:a7:09:d1:81:4d:6f:6c:c8:6e:89:
7d:9b:a8:f8:ae:0c:d2:86:aa:e7:f2:54:78:74:f6:02:b0:06:
fa:5b:3a:20:56:48:37:66:ee:ed:ef:49:83:a7:e2:1c:43:1a:
4e:b4:55:49:b6:a2:8a:c0:a7:78:70:0d:29:21:df:9a:48:71:
3f:a4:77:ee:55:25:ce:53:f3:67:ff:39:15:00:7b:c2:b9:2f:
4a:46:c9:1b:79:5c:91:ae:00:54:31:01:7c:ea:88:d9:91:90:
30:7a:11:14:da:41:97:d7:2d:27:2d:63:3a:80:5b:cb:a1:c6:
11:24:12:3f:dd:8d:64:e4:33:26:4e:4c:50:9e:f1:8a:b6:2c:
61:9b:d7:77:7f:96:94:f2:9e:a4:d6:b4:67:b9:3e:6f:e6:41:
b8:bf:15:2d:64:d2:8a:1f:b9:23:40:8a:6c:a5:65:ab:bf:2a:
d2:6b:d3:3a:16:53:39:3e:5c:43:bc:1b:03:cc:40:27:bc:c8:
f5:83:90:2f:85:bc:34:93:b1:b4:a3:72:c7:11:88:9f:f6:a5:
41:2b:b0:43:81:b1:5d:b8:a9:9d:19:bf:58:d4:3d:33:dd:49:
a7:db:fa:32:bd:4b:8b:7e:99:19:a8:78:8a:94:d3:be:d0:9d:
7d:2d:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:56 2026 by rpki-client