Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
File: Ac8qcbLHv1QcbMBBUc0CB402mSY.mft (raw, json)
Hash identifier: u/MfMr/ryZjj9qSq72KEUD7UNN2Q7Mh/pl7gM4l3t4Y=
Subject key identifier: C9:97:B5:17:32:80:B0:C2:AC:D7:49:EF:8F:E5:87:07:EB:2C:3B:2D
Authority key identifier: 01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
Certificate issuer: /CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Certificate serial: 019FAA5097303BB1164B9B245FCE5D2B9FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
Manifest number: 06DA
Signing time: Tue 28 Jul 2026 20:00:36 +0000
Manifest this update: Tue 28 Jul 2026 20:00:36 +0000
Manifest next update: Wed 29 Jul 2026 20:00:36 +0000
Files and hashes: 1: Ac8qcbLHv1QcbMBBUc0CB402mSY.crl (hash: RhHoXAI5mGeElHqE2mj/NbwEK4isEuiZKKAvUH6i8cM=)
2: de6SqIVP8alMMy8fNgVic-QA6hE.roa (hash: CQCnEBgMc/4fN4+tzBcs/X0zDyrAJoufFx6PaORgCqw=)
3: ldjE34Y5UHyQm9UPuMRXHapL2tQ.roa (hash: l2HlPn4UDyIXeMSyP3+IwTe3CYld8micBXtqct5ZxHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:97:30:3b:b1:16:4b:9b:24:5f:ce:5d:2b:9f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Validity
Not Before: Jul 28 20:00:36 2026 GMT
Not After : Jul 29 20:00:36 2026 GMT
Subject: CN=c997b5173280b0c2acd749ef8fe58707eb2c3b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:bb:1f:79:9c:fd:30:77:4a:4a:62:33:95:
b0:84:36:53:f6:4c:21:7f:5c:2f:85:b5:01:8d:ad:
a5:a9:09:3e:b7:e6:91:2e:34:c2:f7:fc:0c:84:a0:
fc:10:8a:98:cb:3d:d1:18:6a:0a:d4:78:87:2d:21:
a6:92:56:dd:5c:cc:e3:3c:ff:e0:b8:69:a8:b1:31:
2e:44:62:bc:58:6a:e3:e8:0b:19:0d:e7:b2:45:8e:
ef:42:1c:b8:bb:5b:e2:55:82:64:99:09:78:70:de:
7c:f1:52:24:81:a4:38:85:e9:f1:9d:11:4c:59:59:
a6:af:ac:4d:16:70:5b:14:0d:0e:fc:9e:0c:fb:ed:
1c:e2:cf:97:42:ee:57:58:9b:fd:56:f4:54:d2:1a:
bc:a3:92:47:81:61:63:8d:fc:45:84:5d:a1:b2:03:
73:0a:6a:45:0a:26:1b:e8:da:93:67:81:47:9e:da:
51:ab:6b:30:11:aa:d6:8d:35:01:e1:c9:c7:d4:58:
df:14:a4:66:2d:15:bd:f3:14:13:01:de:28:d5:f8:
75:97:6e:90:06:ff:b0:d9:fe:02:54:42:ba:69:71:
72:33:db:b4:ae:b7:cc:ad:37:07:54:28:ad:ae:40:
bb:a0:05:6a:9d:e6:5f:74:b6:fb:4d:dc:21:a8:7d:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:97:B5:17:32:80:B0:C2:AC:D7:49:EF:8F:E5:87:07:EB:2C:3B:2D
X509v3 Authority Key Identifier:
keyid:01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:65:45:14:1a:f8:9a:99:68:b2:e9:bf:02:ea:f7:5f:71:13:
76:fd:7b:5f:e4:fc:68:da:bf:2c:d7:73:d3:43:96:7a:77:a5:
cf:60:06:51:24:af:07:ba:ac:b1:24:9c:51:4f:b1:69:c0:dc:
52:cf:11:a8:07:8b:8f:2c:5a:75:9c:fe:08:58:a1:ab:24:ec:
df:28:6c:63:fa:c9:1a:10:b2:3f:75:ed:2f:4d:60:2e:0c:7c:
41:ad:ca:f7:38:78:7f:29:0e:20:a2:c2:c5:07:06:83:4a:dd:
36:08:bb:4e:4a:97:b7:66:23:19:12:50:b1:e9:bb:c4:32:cc:
4e:85:db:ef:0c:28:ea:69:87:69:28:c2:92:f2:a9:36:ae:32:
73:0e:09:52:79:91:3d:fd:46:4a:b0:17:77:a5:e6:36:87:39:
fa:6b:8f:e9:4d:ef:82:02:07:73:d8:9b:30:02:6a:e2:fc:f1:
78:d3:94:2b:e4:a5:eb:91:89:77:b3:c0:52:a9:56:ba:aa:49:
c2:0a:1a:70:ff:5b:ea:b0:f4:72:ac:6d:8b:12:27:61:fd:5f:
03:c8:93:d3:92:09:46:15:d9:9d:ea:fc:88:12:61:76:11:16:
1e:39:52:0c:92:32:76:af:7c:b5:f4:c4:34:6f:c6:11:76:6d:
f1:89:cf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:40 2026 by rpki-client