Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
File: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json)
Hash identifier: uEa2Oq2jF3mXagYYOZRJE1XTeiusr9IhrSwiBx3GB8s=
Subject key identifier: 23:9B:2A:8D:E4:35:69:CA:C6:18:FC:8C:0B:59:15:E6:DF:5E:80:9A
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial: 019D981854057CC5DD1BAE28DCE89553FA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
Manifest number: 0EF1
Signing time: Thu 16 Apr 2026 21:00:24 +0000
Manifest this update: Thu 16 Apr 2026 21:00:24 +0000
Manifest next update: Fri 17 Apr 2026 21:00:24 +0000
Files and hashes: 1: 2N3mFTgRGbmrw_7vATxV81Kq2dE.roa (hash: /FX8Wxrk3OXbha8szh70fBjGa2R8m1TJYbOuwC3Rhiw=)
2: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: ZwDl8WEtttmVhlYKfgNtM1/4Fkt01SRHuQeZD+w8AME=)
3: JfAxYSslNRgXCvxTlHkjURGg_tA.roa (hash: 1wkFd6nRFSOKqVQcfvyLq2KKje8vaNBC709RUWhAcGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:54:05:7c:c5:dd:1b:ae:28:dc:e8:95:53:fa:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Validity
Not Before: Apr 16 21:00:24 2026 GMT
Not After : Apr 17 21:00:24 2026 GMT
Subject: CN=239b2a8de43569cac618fc8c0b5915e6df5e809a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:a9:e4:d7:fc:ac:d5:59:39:a2:28:48:9d:
9f:35:54:d9:0a:6c:87:46:46:f8:5c:57:1d:fc:6a:
2e:26:b3:24:26:4d:f2:e3:34:a7:50:8e:21:0d:ff:
3e:88:ce:4d:87:73:57:41:71:a7:36:8c:8a:fb:9f:
19:e1:06:0e:68:ce:42:c6:02:2f:dd:bb:24:4f:3e:
01:26:a2:dd:5e:8d:08:f5:d1:e6:b2:47:cb:7e:79:
88:51:d2:6f:af:c6:ba:99:8f:82:ee:84:e6:31:4d:
8b:18:c8:f4:e5:45:e6:8e:7a:c0:c4:1c:94:f0:6d:
71:8b:4c:ff:41:5b:c0:b4:35:04:a0:48:0c:c7:ed:
4d:b7:48:ae:5b:7b:20:a3:22:08:ae:eb:f4:8d:5e:
25:57:a1:0a:5e:5f:f2:b7:f5:09:9a:16:db:7c:91:
c4:a1:67:6e:b1:ee:f9:7f:dd:a4:1e:67:a7:b8:f8:
51:8a:50:58:1d:5a:1a:ec:8f:c4:22:8b:9f:70:c7:
09:09:e4:3e:5c:2a:9e:5e:ce:86:e9:88:49:fa:84:
7d:0d:67:c4:25:66:c5:ae:ca:f6:b5:7b:3b:b8:9a:
02:21:5d:15:e6:b7:df:f7:53:6f:61:31:59:70:9f:
fd:40:8b:1a:22:44:52:b3:53:77:77:c8:ac:76:35:
ca:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9B:2A:8D:E4:35:69:CA:C6:18:FC:8C:0B:59:15:E6:DF:5E:80:9A
X509v3 Authority Key Identifier:
keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bb:36:c8:06:79:46:64:92:6e:5c:80:11:85:5e:e7:c5:ae:
c1:64:59:f3:ee:bd:7b:f6:7e:a8:7d:c8:46:08:e0:31:51:a7:
ee:1a:39:54:84:1f:4d:b5:9d:c3:a4:d5:03:c8:51:ef:de:05:
62:7c:eb:ef:52:75:4d:b0:0f:99:33:74:e9:d8:5d:ec:dd:5b:
44:79:fe:b3:fe:58:4e:5e:3a:97:4d:a8:0c:85:ac:1d:25:61:
54:2d:e4:a8:a2:91:e2:84:22:58:36:0b:c4:a2:68:48:62:24:
3e:3c:2f:08:64:be:05:f4:c4:bc:65:ef:70:94:d2:5f:77:de:
a5:9d:17:a6:70:02:dd:cd:64:12:ff:62:86:ea:ef:b2:67:85:
16:73:1f:18:6c:99:19:9a:48:ab:78:37:34:6e:b0:78:4b:89:
8a:da:db:1e:55:c6:35:5f:5e:67:75:b5:ad:3e:26:f8:b7:1a:
0b:c1:6f:f3:33:b1:3a:eb:7b:b8:f6:ef:c2:db:68:35:ee:90:
c7:c4:05:3c:30:5d:0c:a4:25:0a:14:df:7d:bc:b6:da:8a:d1:
47:40:ba:f7:55:78:17:ef:e0:14:de:a0:80:70:7a:14:05:ad:
c8:31:ec:48:d7:a5:32:79:de:f7:e7:d8:3d:d0:78:c1:79:c4:
f4:23:6c:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGFQFfMXdG64o3OiVU/p/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMmM4ODY1YmMyYTA3ZTRhY2ZlYjI2M2I0ZDljZjYyNDYw
ZmQ1MjMwHhcNMjYwNDE2MjEwMDI0WhcNMjYwNDE3MjEwMDI0WjAzMTEwLwYDVQQD
EygyMzliMmE4ZGU0MzU2OWNhYzYxOGZjOGMwYjU5MTVlNmRmNWU4MDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLOp5Nf8rNVZOaIoSJ2fNVTZCmyH
Rkb4XFcd/GouJrMkJk3y4zSnUI4hDf8+iM5Nh3NXQXGnNoyK+58Z4QYOaM5CxgIv
3bskTz4BJqLdXo0I9dHmskfLfnmIUdJvr8a6mY+C7oTmMU2LGMj05UXmjnrAxByU
8G1xi0z/QVvAtDUEoEgMx+1Nt0iuW3sgoyIIruv0jV4lV6EKXl/yt/UJmhbbfJHE
oWduse75f92kHmenuPhRilBYHVoa7I/EIoufcMcJCeQ+XCqeXs6G6YhJ+oR9DWfE
JWbFrsr2tXs7uJoCIV0V5rff91NvYTFZcJ/9QIsaIkRSs1N3d8isdjXKRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCObKo3kNWnKxhj8jAtZFebfXoCaMB8GA1UdIwQY
MBaAFAAsiGW8KgfkrP6yY7TZz2JGD9UjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kN2ZhZGMtMWViZi00MmRhLTliMjIt
YTYwYzIwYzhmNzE3LzEvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kN2ZhZGMtMWViZi00MmRhLTliMjItYTYwYzIwYzhmNzE3
LzEvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7s2yAZ5
RmSSblyAEYVe58WuwWRZ8+69e/Z+qH3IRgjgMVGn7ho5VIQfTbWdw6TVA8hR794F
Ynzr71J1TbAPmTN06dhd7N1bRHn+s/5YTl46l02oDIWsHSVhVC3kqKKR4oQiWDYL
xKJoSGIkPjwvCGS+BfTEvGXvcJTSX3fepZ0XpnAC3c1kEv9ihurvsmeFFnMfGGyZ
GZpIq3g3NG6weEuJitrbHlXGNV9eZ3W1rT4m+LcaC8Fv8zOxOut7uPbvwttoNe6Q
x8QFPDBdDKQlChTffby22orRR0C691V4F+/gFN6ggHB6FAWtyDHsSNelMnne9+fY
PdB4wXnE9CNs0w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:37 2026 by rpki-client