Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: CU+da4VBOX1rkzpJTliIjYuZGmM8h8T9ULzzXktZdh8=
Subject key identifier: F8:B5:F9:41:02:E8:61:6F:34:65:64:F3:EB:E8:DE:8F:3F:9A:5D:65
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 01A0C5579096C3D9B073E21C9431940D570F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 19:00:45 +0000
Manifest this update: Mon 21 Sep 2026 19:00:45 +0000
Manifest next update: Tue 22 Sep 2026 19:00:45 +0000
Files and hashes: 1: 4pvzkyd81z5apygQK8vaJvAnbgI.roa (hash: MyU3Vlx3nSujsQMgN+1tqcR+k9UJKWDtwwM9zel9Hmg=)
2: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: Kw3ClThip9IQzM2WQaNDTgXNeYeJ9WCiT55xCOTOPKg=)
3: JtNLS6T33Iz4vUIQlrXh2Qn6brY.roa (hash: N9H/VOJgXqokBoKRK1wd1YbpfMsGShL1Jc64VDN5pRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:90:96:c3:d9:b0:73:e2:1c:94:31:94:0d:57:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Sep 21 19:00:45 2026 GMT
Not After : Sep 22 19:00:45 2026 GMT
Subject: CN=f8b5f94102e8616f346564f3ebe8de8f3f9a5d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:47:f9:e3:88:a6:31:ed:b4:0a:42:6d:42:
d6:ba:8e:8e:c8:25:36:b2:36:a4:ba:43:4b:a5:79:
3a:f8:fc:2f:06:82:a1:e4:de:f4:6e:7c:3a:8b:2b:
29:04:60:84:6e:07:bb:8f:f2:d9:9b:06:86:32:0e:
89:36:a6:4a:7d:3d:2d:59:4d:03:6f:d3:47:ee:ed:
a7:57:ae:ec:c3:19:f7:0d:d6:66:3b:8a:a9:10:41:
cf:ff:a8:fb:25:77:8a:86:35:54:bc:07:1f:0a:71:
f4:f9:64:49:a6:fc:e8:6e:bb:fe:ee:59:08:c7:b1:
9e:56:fb:be:d3:ce:fe:86:92:59:6a:60:c9:fb:4b:
90:d9:1c:aa:86:f3:9e:ae:64:50:0b:b5:23:44:4b:
b4:84:04:4d:4d:84:1c:ed:85:0d:bd:1c:89:ec:ea:
47:49:c7:05:67:ab:60:4b:88:9e:6e:f6:f8:3f:1e:
c4:69:68:e1:ca:54:71:32:77:c4:32:8a:79:89:46:
57:c2:a2:df:e6:71:b7:19:50:0e:25:d9:c5:f3:18:
60:81:45:05:52:2a:c7:dc:5a:72:f4:b0:87:03:f3:
e0:d8:cd:30:5a:48:ad:eb:fd:cf:41:12:b4:c5:7a:
89:7b:69:f1:e7:e6:17:55:af:b5:c0:8a:83:c1:8b:
b5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B5:F9:41:02:E8:61:6F:34:65:64:F3:EB:E8:DE:8F:3F:9A:5D:65
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4f:78:85:5a:e7:33:74:af:05:26:31:6e:ba:c7:3e:4d:6a:
9a:92:4b:53:96:43:9d:d9:a0:2a:54:32:02:47:9a:89:07:ec:
34:90:ae:c8:7a:5b:96:01:bb:90:94:df:80:0b:c4:6f:82:bb:
ba:af:08:8e:89:2d:46:87:d2:66:d7:59:84:13:d3:8f:a3:0d:
e9:28:0e:13:3d:c0:ca:56:82:72:8c:df:6b:95:ea:16:37:56:
1c:7f:5d:30:53:58:ec:7f:6d:ce:53:46:5e:27:b9:ad:4b:ef:
16:52:31:70:8c:8c:e4:29:c9:b5:cb:e9:d4:2e:06:1d:08:2c:
88:c4:b9:7c:91:37:74:7e:d7:26:e4:53:31:76:7f:bb:d0:54:
61:36:c5:20:1d:64:d8:54:8a:e7:52:43:2e:52:77:a4:8b:ac:
c4:dd:c3:2d:35:a6:e2:83:6c:13:43:b7:c5:5f:ea:22:37:f4:
b5:ca:53:c1:bb:86:76:ca:e2:55:21:7d:c5:86:6a:cc:28:51:
8c:10:5d:f6:f7:28:f7:cb:f9:11:c9:28:d6:93:c8:38:20:06:
2a:47:65:96:70:97:86:da:1b:a3:52:59:11:86:bf:bb:9c:ee:
af:ad:da:45:b3:a0:68:30:7c:f1:22:92:a9:f6:44:7a:f0:e4:
6d:60:5d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:07:39 2026 by rpki-client