Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
File: Ac8qcbLHv1QcbMBBUc0CB402mSY.mft (raw, json)
Hash identifier: tnixGJOChr/QVAOhBqZKqwIXC286R2HVvfSjrdYJ6aw=
Subject key identifier: 17:47:80:DC:AD:EE:46:FF:36:A3:38:D5:DB:AD:4C:0F:0C:49:AE:86
Authority key identifier: 01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
Certificate issuer: /CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Certificate serial: 019CAA21478FB464CBEB568E08DDDC78541F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
Manifest number: 054C
Signing time: Sun 01 Mar 2026 16:00:33 +0000
Manifest this update: Sun 01 Mar 2026 16:00:33 +0000
Manifest next update: Mon 02 Mar 2026 16:00:33 +0000
Files and hashes: 1: Ac8qcbLHv1QcbMBBUc0CB402mSY.crl (hash: IDsyiRs7m8e3CXvgCYhZHDfSn0fCWi4IQ001KIxG7zw=)
2: ldjE34Y5UHyQm9UPuMRXHapL2tQ.roa (hash: l2HlPn4UDyIXeMSyP3+IwTe3CYld8micBXtqct5ZxHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:47:8f:b4:64:cb:eb:56:8e:08:dd:dc:78:54:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Validity
Not Before: Mar 1 16:00:33 2026 GMT
Not After : Mar 2 16:00:33 2026 GMT
Subject: CN=174780dcadee46ff36a338d5dbad4c0f0c49ae86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:ca:60:06:1f:1f:93:51:75:27:8d:0c:01:
a8:e3:43:05:ba:18:2a:63:c4:ad:7c:21:96:7e:00:
28:e8:64:7f:59:4f:0f:6b:9d:48:50:bd:b4:38:31:
92:1f:ad:3c:a7:ef:55:88:14:b2:f6:d5:bb:a9:99:
6f:de:e0:73:06:f5:b0:59:9f:51:34:79:3f:ca:d1:
81:8e:89:21:ca:c9:a8:2d:f8:0f:b7:12:ed:f8:3f:
cc:7b:5d:8d:09:af:3c:b7:b6:9f:8d:3f:57:c6:77:
40:36:a7:c9:fc:ed:4b:53:0a:88:4b:28:31:d0:e7:
4c:04:f6:7b:6a:1d:0f:66:31:dd:1d:61:8b:b5:0c:
5c:93:1e:b8:6c:89:77:ca:69:b7:5d:61:95:c9:24:
31:35:ec:fe:fc:ee:b2:ec:16:96:64:d8:ba:f0:ba:
99:e2:0c:db:b5:c6:9c:48:da:83:3f:32:26:c1:64:
9e:c4:cd:d0:3b:41:a9:1e:be:f8:70:4e:e4:03:35:
54:12:3d:09:8d:1e:17:7d:ef:8c:92:05:69:39:6f:
01:f0:5e:7c:93:6b:14:d6:d3:5b:cf:d2:c0:e4:3a:
ca:79:b3:a9:f1:cc:dc:ee:5b:6e:00:8d:03:16:46:
a7:c6:55:ed:5f:7c:15:00:57:f7:76:8f:55:0f:f4:
31:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:47:80:DC:AD:EE:46:FF:36:A3:38:D5:DB:AD:4C:0F:0C:49:AE:86
X509v3 Authority Key Identifier:
keyid:01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:86:3d:5b:b7:69:60:ef:3a:08:a8:ac:ff:36:cf:5a:3b:ab:
c4:6b:a5:fa:8f:a7:fd:c5:d2:8b:6d:68:25:6d:8b:57:9a:7e:
61:45:be:a6:8c:a2:73:fc:fa:81:dd:a0:55:84:c8:86:12:74:
13:bf:91:87:be:64:80:38:70:ac:b3:61:c2:ec:59:6e:f9:1a:
a0:85:d4:f4:7b:43:0b:75:0f:84:71:d8:32:08:0c:0e:76:35:
75:86:5d:bb:47:ac:9f:7c:28:8f:07:d2:6d:90:59:4b:80:ee:
45:c7:b8:9e:97:2e:9c:45:3c:63:c4:ae:e5:ba:0b:94:c3:87:
e2:59:76:17:98:2d:f9:17:a5:d4:bb:8c:fb:e9:be:35:35:94:
3f:8b:42:d2:14:17:c6:7e:b4:db:87:3a:17:44:cd:cf:21:3b:
65:08:61:c8:0f:f9:17:b5:17:8a:e5:48:bf:74:3f:09:1b:e2:
16:af:ed:b2:84:d7:81:9f:43:f1:71:d3:8b:4c:7d:7a:ae:af:
24:95:87:6d:31:b0:91:15:fd:20:6a:c1:7c:9e:00:c5:c6:29:
21:c9:7a:6e:cf:93:37:ba:27:d6:b5:15:5d:0d:6f:2a:91:d8:
25:09:19:83:c5:b4:50:69:66:aa:0a:da:37:05:90:73:9e:46:
55:61:fd:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIUePtGTL61aOCN3ceFQfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxY2YyYTcxYjJjN2JmNTQxYzZjYzA0MTUxY2QwMjA3OGQz
Njk5MjYwHhcNMjYwMzAxMTYwMDMzWhcNMjYwMzAyMTYwMDMzWjAzMTEwLwYDVQQD
EygxNzQ3ODBkY2FkZWU0NmZmMzZhMzM4ZDVkYmFkNGMwZjBjNDlhZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqibKYAYfH5NRdSeNDAGo40MFuhgq
Y8StfCGWfgAo6GR/WU8Pa51IUL20ODGSH608p+9ViBSy9tW7qZlv3uBzBvWwWZ9R
NHk/ytGBjokhysmoLfgPtxLt+D/Me12NCa88t7afjT9XxndANqfJ/O1LUwqISygx
0OdMBPZ7ah0PZjHdHWGLtQxckx64bIl3ymm3XWGVySQxNez+/O6y7BaWZNi68LqZ
4gzbtcacSNqDPzImwWSexM3QO0GpHr74cE7kAzVUEj0JjR4Xfe+MkgVpOW8B8F58
k2sU1tNbz9LA5DrKebOp8czc7ltuAI0DFkanxlXtX3wVAFf3do9VD/QxuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdHgNyt7kb/NqM41dutTA8MSa6GMB8GA1UdIwQY
MBaAFAHPKnGyx79UHGzAQVHNAgeNNpkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWM4cWNiTEh2MVFjYk1CQlVjMENCNDAybVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMjRlZTEtMmNiMi00OTA3LTgwNDgt
YjBmNGZiZTI2YjYxLzEvQWM4cWNiTEh2MVFjYk1CQlVjMENCNDAybVNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jMjRlZTEtMmNiMi00OTA3LTgwNDgtYjBmNGZiZTI2YjYx
LzEvQWM4cWNiTEh2MVFjYk1CQlVjMENCNDAybVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYY9W7dp
YO86CKis/zbPWjurxGul+o+n/cXSi21oJW2LV5p+YUW+poyic/z6gd2gVYTIhhJ0
E7+Rh75kgDhwrLNhwuxZbvkaoIXU9HtDC3UPhHHYMggMDnY1dYZdu0esn3wojwfS
bZBZS4DuRce4npcunEU8Y8Su5boLlMOH4ll2F5gt+Rel1LuM++m+NTWUP4tC0hQX
xn6024c6F0TNzyE7ZQhhyA/5F7UXiuVIv3Q/CRviFq/tsoTXgZ9D8XHTi0x9eq6v
JJWHbTGwkRX9IGrBfJ4AxcYpIcl6bs+TN7on1rUVXQ1vKpHYJQkZg8W0UGlmqgra
NwWQc55GVWH9jg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:07 2026 by rpki-client