Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: UfgU5sEhFcwYkRXp/jetwRgD0MoDySSZedTuOoS0Q/I=
Subject key identifier: 7D:4A:EF:E0:31:AD:5E:30:77:51:4F:10:27:EF:AC:72:0F:BB:DE:A5
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 019CAAC61A72399114E5C8C7409BD43EF46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:35 +0000
Manifest this update: Sun 01 Mar 2026 19:00:35 +0000
Manifest next update: Mon 02 Mar 2026 19:00:35 +0000
Files and hashes: 1: 4pvzkyd81z5apygQK8vaJvAnbgI.roa (hash: MyU3Vlx3nSujsQMgN+1tqcR+k9UJKWDtwwM9zel9Hmg=)
2: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: 6n1nAqDn4OZ37iP5xNknjyvHFMfnTp/VVc2N/W2Djgg=)
3: JtNLS6T33Iz4vUIQlrXh2Qn6brY.roa (hash: N9H/VOJgXqokBoKRK1wd1YbpfMsGShL1Jc64VDN5pRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:1a:72:39:91:14:e5:c8:c7:40:9b:d4:3e:f4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Mar 1 19:00:35 2026 GMT
Not After : Mar 2 19:00:35 2026 GMT
Subject: CN=7d4aefe031ad5e3077514f1027efac720fbbdea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:32:7d:3e:fa:c6:7a:8a:ad:68:f6:7b:27:
62:e7:a5:0c:ac:57:5d:57:3d:21:d8:c5:16:59:1c:
58:8f:0a:5d:b8:3b:89:45:43:52:e2:36:0b:2b:5b:
26:d6:31:06:a1:cf:c4:2d:6d:64:ce:d0:c4:51:b2:
61:5c:93:ba:97:a1:a8:13:83:77:51:66:fe:ca:2d:
74:aa:8c:a6:67:da:7f:98:2d:f6:a7:fd:e0:0b:b2:
68:a9:86:88:72:70:f6:3f:11:b2:cd:7e:58:41:24:
eb:d8:de:97:c3:ab:57:d9:9c:fd:dc:3a:04:36:e4:
8b:0f:af:ea:2d:47:fd:90:88:8d:04:43:c6:d6:f2:
2c:dc:1f:84:24:b9:71:8f:cb:9e:55:ba:e8:00:a5:
4c:a8:0b:86:7c:01:a7:6f:2d:21:0d:05:0e:9c:66:
32:d0:e5:26:43:f3:27:81:67:82:58:a3:59:55:1d:
e8:6d:bb:82:4c:d7:eb:63:0b:79:d1:1f:d1:f3:a6:
05:e3:03:34:38:a9:c0:99:09:c7:93:94:e1:78:bc:
a7:68:09:c6:fe:06:c9:af:99:cb:a0:b8:1a:c6:6b:
49:cd:82:8b:b2:4b:84:2f:22:f6:5c:bf:54:14:e2:
51:d4:e3:22:ed:70:f3:03:5e:66:6c:f6:04:fd:25:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4A:EF:E0:31:AD:5E:30:77:51:4F:10:27:EF:AC:72:0F:BB:DE:A5
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0d:f0:1a:f0:70:30:01:39:19:1a:34:39:f1:90:e6:92:d1:
47:c4:9f:ad:fb:85:73:c2:5c:55:fa:37:fb:96:5f:3f:40:ba:
03:8c:9f:83:f2:ee:41:fe:b4:59:0b:03:98:62:ca:aa:3b:5e:
82:3a:e7:f3:35:63:2c:ba:42:ba:3c:fa:fc:10:13:58:6e:23:
46:df:a1:e0:d9:d2:21:d5:6d:ad:43:78:ea:b9:2a:d7:1b:23:
43:52:f0:3b:b0:d8:59:78:c6:e0:81:67:c0:6b:f8:77:ec:d6:
db:5f:24:49:12:4a:89:e4:ce:d1:cb:07:c8:7e:80:45:3c:ff:
b7:db:1a:ba:b5:30:e9:77:b8:1e:b9:6e:8e:f2:0d:21:be:a4:
5a:54:1a:a9:e6:97:a0:ea:08:c1:2a:d0:11:5c:f1:8f:fb:9c:
52:12:28:c0:03:04:10:5b:f0:4f:6b:c1:1f:92:c6:71:61:88:
5e:bb:a2:bb:c1:a7:cd:a4:01:c0:ec:4e:5a:1c:a2:26:de:6b:
6d:15:aa:1e:42:ec:d8:0e:20:48:0f:56:34:c2:af:a6:bd:58:
bd:f2:a0:79:18:51:89:de:5e:c6:03:59:e6:d3:e4:db:7d:cf:
cb:4d:75:21:fd:28:d8:85:87:c1:3f:8c:62:1c:a5:a7:73:37:
66:6a:5a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:05 2026 by rpki-client