Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
File: AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json)
Hash identifier: UhQA1GX1a9SWeNP1XIeN/tIryLosF8dvUnvt2DNwg50=
Subject key identifier: 58:55:A8:CA:F9:2C:CF:41:65:86:C2:17:0A:11:BC:29:12:07:2C:E3
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Certificate issuer: /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial: 019D9D3EE97A6974F2222950D459BF002718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
Manifest number: 1894
Signing time: Fri 17 Apr 2026 21:00:38 +0000
Manifest this update: Fri 17 Apr 2026 21:00:38 +0000
Manifest next update: Sat 18 Apr 2026 21:00:38 +0000
Files and hashes: 1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: VYEfYbDtx+OeZtnz5OAfyAid59YDN96bjxDxUrRJoqk=)
2: qT2NrCiJquJtfq_3e7nF2gYWJ5s.roa (hash: eAGHZA4lhxkkeWMCuFkx9WVGsrMFd32m7CFLgSd01WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:e9:7a:69:74:f2:22:29:50:d4:59:bf:00:27:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Validity
Not Before: Apr 17 21:00:38 2026 GMT
Not After : Apr 18 21:00:38 2026 GMT
Subject: CN=5855a8caf92ccf416586c2170a11bc2912072ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:57:f2:a5:5f:f9:b3:74:4b:65:14:ec:63:8f:
7a:13:a4:9b:30:5b:68:90:eb:c3:2a:c7:71:07:c1:
46:3e:9b:a7:0c:f8:f7:9f:8b:ee:3c:80:4f:f2:a3:
9e:65:5b:ab:66:78:89:85:88:cd:37:7d:2f:74:f1:
0e:91:5f:be:dc:e8:c2:4a:b1:e0:c2:f0:7b:05:bc:
24:ac:e7:c6:f9:00:2e:61:3c:1e:93:aa:75:3e:6e:
d9:e3:c2:09:4c:a7:35:64:90:7d:69:07:04:30:e6:
dc:f4:4d:6d:69:38:2d:af:d6:e4:bd:76:07:7d:0d:
dc:1b:62:12:3b:87:63:82:45:99:2d:72:a0:54:cf:
58:b2:63:4d:a6:2b:31:4c:8d:9b:e2:2b:ac:e2:38:
97:43:e0:6f:44:60:d5:f2:80:de:78:76:f4:72:f8:
4b:b5:27:1e:1a:a6:3c:ef:72:77:0a:2c:73:5f:74:
a1:28:75:59:31:34:e0:cf:a3:34:41:f5:d1:6a:e8:
1a:dd:58:46:1a:42:d9:b7:5a:3f:8d:32:2d:99:3e:
59:c8:79:a5:6f:db:fd:30:31:0b:5f:b9:2a:b6:6a:
be:7f:22:be:fc:90:36:02:18:d3:ad:53:a6:3d:22:
8a:70:00:fa:49:fe:42:f0:0c:f0:08:28:5e:ff:78:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:55:A8:CA:F9:2C:CF:41:65:86:C2:17:0A:11:BC:29:12:07:2C:E3
X509v3 Authority Key Identifier:
keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:2e:27:88:59:aa:1d:b2:de:8a:ef:ec:fd:84:21:71:56:a1:
1b:1f:33:a9:e7:3a:20:55:93:2b:01:66:e8:a8:bf:75:61:fe:
74:57:c0:0b:cc:a2:e5:12:21:70:20:2c:e6:4d:e2:6e:c0:1b:
b7:45:cc:a8:3b:d9:60:c0:e9:19:a6:13:c9:11:e0:f6:c2:82:
da:f8:f4:11:3e:6e:b2:ea:a3:15:5e:f0:53:1a:21:d6:58:0d:
d1:45:1a:d0:1e:ac:95:3b:e6:11:57:fe:df:e5:33:2f:4c:7a:
10:77:8c:c6:fa:83:6c:d0:82:0c:37:aa:50:d3:6a:e3:80:23:
7f:16:ca:52:83:60:6f:b1:29:cd:ba:7f:44:9b:3b:13:a8:a5:
ac:26:82:77:32:8b:6a:d0:e5:ce:0c:6e:e4:b1:75:5e:9d:95:
33:fc:ba:76:cb:80:c3:42:2b:59:bf:fd:17:71:02:27:4e:83:
7a:2a:ac:56:44:b8:9e:c2:f6:c8:4c:69:fb:c8:63:f9:5a:9e:
ba:97:2d:80:b1:91:f6:e8:43:83:bf:0a:e8:9e:41:fb:44:15:
c1:4f:07:88:74:a6:5b:e3:ad:0b:54:46:e9:6e:4e:1e:40:67:
a0:c3:8d:f9:7f:7e:ba:d6:b4:8a:2a:c5:b2:68:05:51:57:18:
21:55:df:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dPul6aXTyIilQ1Fm/ACcYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMmZhNmUxOTA1NjgzODkwNWJjMzJiNTNhYjBkMTA0N2Q3
OGU0ZDQwHhcNMjYwNDE3MjEwMDM4WhcNMjYwNDE4MjEwMDM4WjAzMTEwLwYDVQQD
Eyg1ODU1YThjYWY5MmNjZjQxNjU4NmMyMTcwYTExYmMyOTEyMDcyY2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVfypV/5s3RLZRTsY496E6SbMFto
kOvDKsdxB8FGPpunDPj3n4vuPIBP8qOeZVurZniJhYjNN30vdPEOkV++3OjCSrHg
wvB7BbwkrOfG+QAuYTwek6p1Pm7Z48IJTKc1ZJB9aQcEMObc9E1taTgtr9bkvXYH
fQ3cG2ISO4djgkWZLXKgVM9YsmNNpisxTI2b4ius4jiXQ+BvRGDV8oDeeHb0cvhL
tSceGqY873J3CixzX3ShKHVZMTTgz6M0QfXRauga3VhGGkLZt1o/jTItmT5ZyHml
b9v9MDELX7kqtmq+fyK+/JA2AhjTrVOmPSKKcAD6Sf5C8AzwCChe/3hLIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhVqMr5LM9BZYbCFwoRvCkSByzjMB8GA1UdIwQY
MBaAFAAvpuGQVoOJBbwytTqw0QR9eOTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQt
ZmJjMzZlNDM0OGY1LzEvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQtZmJjMzZlNDM0OGY1
LzEvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzC4niFmq
HbLeiu/s/YQhcVahGx8zqec6IFWTKwFm6Ki/dWH+dFfAC8yi5RIhcCAs5k3ibsAb
t0XMqDvZYMDpGaYTyRHg9sKC2vj0ET5usuqjFV7wUxoh1lgN0UUa0B6slTvmEVf+
3+UzL0x6EHeMxvqDbNCCDDeqUNNq44AjfxbKUoNgb7Epzbp/RJs7E6ilrCaCdzKL
atDlzgxu5LF1Xp2VM/y6dsuAw0IrWb/9F3ECJ06DeiqsVkS4nsL2yExp+8hj+Vqe
upctgLGR9uhDg78K6J5B+0QVwU8HiHSmW+OtC1RG6W5OHkBnoMON+X9+uta0iirF
smgFUVcYIVXfQA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:51:47 2026 by rpki-client