Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
File: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json)
Hash identifier: uIQko48AflWvoEI8UsSwJEGrslFyw2DBJ5keqaovVj4=
Subject key identifier: 94:08:00:08:91:10:7A:09:AB:61:57:56:17:E4:CE:A4:35:0E:89:F6
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial: 01A0C70ED823E2AEEDC205CDC525898CBEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
Manifest number: 1098
Signing time: Tue 22 Sep 2026 03:00:33 +0000
Manifest this update: Tue 22 Sep 2026 03:00:33 +0000
Manifest next update: Wed 23 Sep 2026 03:00:33 +0000
Files and hashes: 1: 2N3mFTgRGbmrw_7vATxV81Kq2dE.roa (hash: /FX8Wxrk3OXbha8szh70fBjGa2R8m1TJYbOuwC3Rhiw=)
2: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: XU1vkVfYDJvj4Q0BlRNJ1JeAwWYcnjvDHzYHb/tpb1c=)
3: dvLxlkeTDaml7PrAVt8aczTEUAc.roa (hash: mpKOb113r9nmfGJNe12CHy39u2fx6Hc3Jd1CYKZC8AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:d8:23:e2:ae:ed:c2:05:cd:c5:25:89:8c:be:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Validity
Not Before: Sep 22 03:00:33 2026 GMT
Not After : Sep 23 03:00:33 2026 GMT
Subject: CN=9408000891107a09ab61575617e4cea4350e89f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cf:a2:2a:87:63:84:b5:c5:d0:44:59:9e:4e:
80:3d:23:7e:e3:1d:ae:fa:ae:14:2d:37:79:e6:4a:
78:37:f7:29:24:34:42:26:b2:18:9e:ba:82:ce:67:
fd:79:bc:02:1d:e0:cf:d8:d5:5a:8e:62:3f:43:55:
a0:ed:56:56:85:cf:8e:49:83:cf:86:04:1b:07:d5:
75:60:4c:e2:45:67:31:84:70:66:b6:a4:1b:57:40:
32:25:9a:f6:2e:bc:3f:fb:53:e2:76:4f:51:26:84:
2a:7f:55:3c:80:3f:5d:6c:2a:55:3c:aa:1d:a4:b2:
55:0f:1e:38:ee:4b:55:65:8e:38:ed:43:9c:37:fa:
dc:39:14:c1:8d:b6:d7:81:32:c9:75:ac:74:54:f4:
70:28:15:8d:a8:89:25:29:30:f0:79:3b:49:07:16:
00:67:3b:be:14:4e:fd:e4:00:0f:66:82:ce:5b:b6:
b6:7c:0f:8c:38:74:07:89:5a:d2:62:24:fb:e1:2b:
10:29:29:11:7b:cc:49:9c:ac:c9:43:16:40:c1:db:
3b:f2:e0:86:bc:e5:03:a5:8c:51:df:4e:2a:93:ed:
fb:42:ae:14:a8:b5:4f:f1:58:3c:1b:a5:da:c4:85:
2e:f7:77:e1:40:b2:4b:bb:61:80:b4:5f:d3:ff:dc:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:08:00:08:91:10:7A:09:AB:61:57:56:17:E4:CE:A4:35:0E:89:F6
X509v3 Authority Key Identifier:
keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d8:9d:63:5d:51:1d:7a:05:87:de:82:41:50:db:cb:23:c5:
77:66:e2:0a:e7:2e:3b:e3:da:2c:9a:d4:a1:d3:4d:08:ee:9b:
88:2c:c2:dc:87:46:f1:8a:17:26:7e:11:b3:12:a2:d5:cc:84:
fa:55:72:7c:24:69:f1:9e:7e:78:f5:28:d1:60:65:3d:20:b9:
cc:29:c0:e4:b3:70:21:19:c9:2d:85:01:06:92:03:90:dd:0e:
c2:96:c5:c3:1b:52:41:a9:d2:9f:24:4b:65:bb:b3:81:89:ed:
de:12:b2:31:44:27:82:80:aa:73:52:d8:98:a6:42:34:26:58:
41:d3:ec:21:8b:07:78:da:de:80:a1:15:06:63:b8:bb:f0:76:
2e:c0:b7:2d:99:7c:37:3a:c6:a7:0a:33:9a:d0:03:49:ff:ed:
d9:a6:b0:42:b8:ae:ed:de:ac:96:71:26:e2:6c:ff:b3:2a:17:
a7:5f:5c:47:7b:b3:b8:98:67:5a:8c:55:f6:5f:49:9b:e1:75:
74:55:17:36:e7:aa:b1:a1:34:06:b4:d2:64:d0:84:8b:5e:40:
23:59:e5:e0:5e:a8:11:ce:ce:d3:f9:ac:57:6d:8d:32:e4:b2:
bf:2f:5b:dc:62:78:67:65:0e:17:f1:e8:62:66:ec:bc:39:f9:
33:0b:71:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:08:14 2026 by rpki-client