
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
File: ACzThauQKWJxijm7ez7JmqQE5cA.mft (raw, json)
Hash identifier: B262gVanJ7mktupzmtUgpv818IHAGLoYYv/f86H2Yvs=
Subject key identifier: DE:BE:B5:C1:90:0E:A1:96:44:C1:11:A0:6E:4A:51:B4:9C:B4:59:C3
Authority key identifier: 00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
Certificate issuer: /CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Certificate serial: 01A0C40E90B320163E5AFCA751414A03AF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
Manifest number: 0DF6
Signing time: Mon 21 Sep 2026 13:01:23 +0000
Manifest this update: Mon 21 Sep 2026 13:01:23 +0000
Manifest next update: Tue 22 Sep 2026 13:01:23 +0000
Files and hashes: 1: ACzThauQKWJxijm7ez7JmqQE5cA.crl (hash: B182T4rAmysqNQru5pgN2Nvyn4oI7s0fsDGJETZGaGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:90:b3:20:16:3e:5a:fc:a7:51:41:4a:03:af:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Validity
Not Before: Sep 21 13:01:23 2026 GMT
Not After : Sep 22 13:01:23 2026 GMT
Subject: CN=debeb5c1900ea19644c111a06e4a51b49cb459c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:49:e8:ca:b3:ce:53:98:07:5c:5d:6b:97:
9c:15:d6:a5:11:3c:37:bb:aa:3b:0d:1d:50:29:b0:
e5:62:76:64:d8:a6:e3:6c:4a:7f:e0:25:9e:db:d6:
d9:6a:26:90:40:88:37:fe:0e:26:41:82:0f:81:56:
c9:0f:c9:32:7c:4d:2e:e3:6f:28:32:54:5c:31:33:
92:93:98:f2:5c:55:a9:0d:01:ba:9b:81:6d:a4:ec:
80:29:7e:14:ab:14:bd:60:2e:c3:7e:f1:d2:c4:49:
0c:32:e6:21:37:d8:87:b1:95:af:89:f0:f2:53:c3:
c9:6e:d9:f4:3b:3a:41:43:ec:da:0e:bd:7b:ec:5b:
13:7d:6d:d1:de:e1:4b:ac:be:dd:0b:50:82:18:57:
de:1e:d1:7f:c2:68:e7:23:6b:10:1f:06:84:68:75:
32:66:30:10:10:b8:b7:51:6e:be:1b:48:eb:2d:70:
e4:6d:ce:de:86:e5:d8:dc:85:d3:fa:1e:86:ec:05:
b5:d3:c4:1c:f7:f8:1f:99:e5:e5:f3:0d:f8:fa:bc:
27:0d:55:9c:2e:55:c1:49:82:68:86:29:41:30:c0:
ac:b4:32:94:9c:eb:6e:f9:27:9f:71:d9:ac:93:60:
dc:7d:71:38:74:a7:1b:34:bb:91:ec:88:9e:c9:91:
e9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BE:B5:C1:90:0E:A1:96:44:C1:11:A0:6E:4A:51:B4:9C:B4:59:C3
X509v3 Authority Key Identifier:
keyid:00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1f:48:b6:3b:f3:13:91:f2:9c:44:80:aa:65:b7:29:02:4c:
73:2a:2e:2a:12:1a:12:18:20:94:87:70:7b:eb:dd:b4:7d:a3:
29:f4:3f:84:5e:3a:88:41:5c:87:ad:fd:c0:97:a6:b6:51:77:
9e:ee:55:93:f4:29:e0:8f:ad:b9:30:9f:57:c4:c5:2a:7b:6f:
be:0a:15:3d:3b:64:da:51:9e:bf:25:26:9b:b6:3c:f9:43:8f:
37:37:58:65:a1:ef:da:8a:00:b6:8d:09:0f:09:98:66:d1:1e:
e8:84:cf:ee:fa:28:86:f9:77:14:c7:d4:35:b2:3f:e4:3c:51:
22:1c:7e:8c:01:e5:78:0b:ed:76:6c:0b:41:46:37:8b:97:df:
25:29:7c:39:8a:29:84:26:10:b1:15:81:83:9a:97:dd:c0:7c:
27:8b:19:5d:65:78:bf:7f:5c:6b:d0:24:eb:dc:d1:cf:84:20:
ca:f8:3c:4f:e5:76:51:c9:27:fa:10:1d:e7:f9:dd:b6:8d:9f:
08:b7:c9:87:01:4d:c0:d9:12:7d:ad:28:31:d7:80:39:2f:2c:
b6:22:3c:a8:81:dd:cc:92:96:68:40:1c:b1:45:38:71:66:b1:
ca:e4:95:7b:55:1e:08:7d:84:fd:22:c2:66:82:12:72:f7:20:
a8:fd:95:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:07:40 2026 by rpki-client