Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
File: AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft (raw, json)
Hash identifier: 5Ce5V6lr3HdMkpwmdZLyTaMRfJN04rIoQz/Vvl/yOM4=
Subject key identifier: 06:64:FD:B8:3F:E2:6F:66:27:C0:CD:67:B0:FC:7B:D1:17:7D:23:EF
Authority key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
Certificate issuer: /CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Certificate serial: 019CAD904D422DE1721FB8B63922B2194172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
Manifest number: 11DA
Signing time: Mon 02 Mar 2026 08:00:41 +0000
Manifest this update: Mon 02 Mar 2026 08:00:41 +0000
Manifest next update: Tue 03 Mar 2026 08:00:41 +0000
Files and hashes: 1: AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl (hash: hKbxAVwyHTSjO5RTYO+Dr7hfvzRshYaU9SIHuaSNagw=)
2: xGSQtxBpS573s4zPyTFpERUQH7o.roa (hash: 0qhIt2oCl1BBlwABDamfzBFWIJOyQt4+H4muS8E2+74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:4d:42:2d:e1:72:1f:b8:b6:39:22:b2:19:41:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Validity
Not Before: Mar 2 08:00:41 2026 GMT
Not After : Mar 3 08:00:41 2026 GMT
Subject: CN=0664fdb83fe26f6627c0cd67b0fc7bd1177d23ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:46:75:5f:92:b7:69:dd:49:58:cc:40:2f:df:
a9:7d:76:02:c3:09:f5:8f:e5:01:fb:fa:62:f1:d3:
b3:00:f3:81:5b:9d:9f:0b:99:6a:17:cd:5a:c1:d2:
63:b1:c3:7c:f1:7f:41:ed:5d:69:c9:18:57:a2:4e:
4c:db:cf:05:04:a8:78:0a:70:00:a3:74:d5:53:41:
31:08:99:c8:25:d3:d8:79:a0:74:d7:53:f8:cb:b7:
52:96:0f:3f:5b:8b:a0:b1:41:10:47:6c:07:77:60:
71:c8:16:2d:c4:9a:1d:69:e9:75:e7:76:8c:c6:e2:
98:3b:fe:ca:c8:03:a4:e4:90:b5:02:a1:a4:ae:05:
bf:38:a9:2c:27:01:21:b0:0b:f4:b2:c4:16:7a:53:
0a:9a:0d:cb:d2:b7:b8:a1:c6:93:64:89:8a:c3:a9:
fa:5d:d8:39:44:aa:c4:2b:0f:07:a7:aa:1d:60:77:
6c:38:f5:4f:25:9d:be:24:8d:4b:e7:74:4e:a2:5e:
37:b0:01:eb:75:ad:06:ae:c5:5c:6d:ee:0d:8c:a4:
68:c6:30:bc:d6:c6:7d:65:40:d0:7b:8e:e1:d3:ac:
65:6a:ac:9f:dc:e0:a9:9e:a7:1f:60:65:40:00:34:
22:33:4f:cc:bb:5b:5e:41:d7:9b:8b:a7:6d:05:f4:
24:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:64:FD:B8:3F:E2:6F:66:27:C0:CD:67:B0:FC:7B:D1:17:7D:23:EF
X509v3 Authority Key Identifier:
keyid:01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:82:1c:8f:b3:65:87:33:6f:21:e1:1e:95:88:43:55:16:8e:
40:25:fd:52:64:f9:55:6c:7d:a2:4b:36:9c:e9:0f:5b:88:85:
2c:e6:f2:4c:bd:dd:f9:0c:0e:86:45:be:82:40:c4:04:2d:06:
8a:26:23:cb:2e:4a:07:cc:52:97:3c:34:a7:18:c9:cf:ad:ae:
6c:a3:f3:a2:05:97:20:a8:d4:7e:90:2b:bf:28:a3:a4:09:37:
71:51:8b:28:5e:35:43:b5:38:77:45:60:58:04:2b:e8:00:47:
0b:d2:84:43:7c:43:bd:91:55:a3:0d:9c:df:48:d9:d9:e9:a9:
3d:88:22:8d:c5:3e:ea:d9:bd:b6:f1:45:a3:51:31:55:df:f2:
84:e2:d6:dc:f2:93:5b:79:4e:e6:d0:a6:35:dc:fc:e4:45:cb:
88:87:dd:2d:d2:c8:9f:84:d5:31:5c:35:8e:47:78:10:03:73:
1d:fa:2e:e7:e7:37:ba:0a:1b:98:72:ae:43:54:28:7a:be:7f:
77:c8:df:ad:ee:f3:10:5e:54:30:c9:5e:80:70:f1:53:fc:56:
fa:a7:6f:bf:35:f7:dd:6e:24:60:a1:f9:59:a9:21:e8:6e:bc:
05:16:19:e7:dc:e8:dd:43:cf:80:e4:fd:ed:34:27:63:25:cd:
44:32:83:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:05 2026 by rpki-client