Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
File: AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json)
Hash identifier: so/JbgPdwQPdAQQZnZ26M2rVfvLBd9z2UNOjmU5Sjrg=
Subject key identifier: 43:92:AF:F0:1E:73:84:70:8F:B8:F3:9A:3D:4D:B4:96:BA:11:74:EE
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Certificate issuer: /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial: 019CADC7B3FC2010AE5EE2BA34A0B004D664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
Manifest number: 1818
Signing time: Mon 02 Mar 2026 09:01:11 +0000
Manifest this update: Mon 02 Mar 2026 09:01:11 +0000
Manifest next update: Tue 03 Mar 2026 09:01:11 +0000
Files and hashes: 1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: ZJ6nbF89gf9e0aLxUGsqdHo5KqT9Cp84Fj5yFuVQjNE=)
2: qT2NrCiJquJtfq_3e7nF2gYWJ5s.roa (hash: eAGHZA4lhxkkeWMCuFkx9WVGsrMFd32m7CFLgSd01WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:b3:fc:20:10:ae:5e:e2:ba:34:a0:b0:04:d6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Validity
Not Before: Mar 2 09:01:11 2026 GMT
Not After : Mar 3 09:01:11 2026 GMT
Subject: CN=4392aff01e7384708fb8f39a3d4db496ba1174ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:48:b9:f5:f5:8f:ad:1f:46:89:eb:46:33:
9d:51:e6:5c:38:ca:1e:41:4a:cd:77:86:1e:a1:23:
90:6d:84:bb:58:0a:45:23:5c:a6:1d:a5:94:a1:a4:
5d:c0:32:bc:02:af:aa:60:ef:f8:b7:7f:b5:24:cf:
6c:53:43:fc:52:39:e5:62:24:ee:87:6e:8b:69:55:
a4:04:30:8f:1d:b0:b0:ff:4e:34:e5:58:85:42:dd:
13:1e:91:24:b0:6a:e0:b0:98:a8:eb:34:41:37:84:
00:45:c2:37:e4:25:81:8d:09:39:e0:9d:b8:40:29:
35:09:e6:95:11:85:2e:d2:78:98:52:d0:8f:99:65:
52:ac:4f:1f:4a:c8:50:92:16:1c:1d:25:15:fd:76:
d4:94:8a:b3:b7:a4:5b:16:09:09:4d:31:32:34:80:
99:5d:1f:b0:92:91:bc:06:7c:ad:26:e9:ed:48:0f:
96:77:41:39:c1:6c:a8:73:c7:62:df:92:ad:b9:0a:
33:64:00:21:74:48:af:43:34:5a:64:1d:ef:a9:e1:
d8:eb:ac:55:3c:41:6d:49:bf:95:eb:5c:4b:b1:60:
1f:e0:d6:31:2a:e3:14:a3:c1:17:b1:78:58:df:46:
48:8d:ce:66:6e:39:99:80:63:17:97:26:f1:cb:e7:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:92:AF:F0:1E:73:84:70:8F:B8:F3:9A:3D:4D:B4:96:BA:11:74:EE
X509v3 Authority Key Identifier:
keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:dc:b5:5f:71:3f:7b:6b:7a:f2:71:b8:94:33:4d:5f:c6:a6:
f5:e1:e7:c6:6a:a2:b3:44:d8:9a:af:8a:cf:99:6b:36:21:81:
e8:46:b2:dc:5c:6b:7d:0b:62:e6:81:8b:7e:5b:0d:ff:da:96:
63:67:3b:5f:45:a5:cd:ba:57:77:23:f1:47:d0:f4:23:a8:2f:
2b:80:f5:43:8f:8e:e1:ac:95:24:c8:79:40:94:95:13:f3:32:
7b:79:a5:12:3d:77:87:1c:fd:c1:88:00:8d:45:04:59:c5:17:
ca:2d:8d:f1:a8:ee:ae:89:25:37:10:b5:28:a5:d9:0d:9c:fb:
4a:14:16:7b:40:5d:c1:ee:2d:71:f6:66:62:a7:ce:af:2d:a8:
76:78:1c:65:96:89:62:a1:98:27:d6:c9:46:52:11:35:92:67:
10:33:b5:e9:79:7b:24:9b:ba:4b:0d:d7:40:46:96:59:20:7f:
9d:eb:e0:8a:98:93:76:28:c6:54:67:70:8a:ad:ef:dc:da:40:
37:07:29:b7:ca:61:8a:58:89:6b:f6:f8:6d:90:15:93:f9:50:
ba:b1:ca:73:88:4f:a2:91:47:01:17:11:15:7c:4e:02:09:5c:
91:2c:6b:71:c3:ff:b8:8c:1a:ef:2e:44:3e:99:42:0c:3b:42:
81:41:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:47:55 2026 by rpki-client