
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier: 6+iKm4MPXmTw0tlzB5RICzfa8T0MTjPLVrNrl/IvwsI=
Subject key identifier: 45:D5:13:D8:E4:EB:49:A8:8A:C6:43:FC:AF:50:00:4D:2A:C7:10:F1
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial: 019CABA23B173A1DCA9FF06E8B5D1564F0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number: 06D1
Signing time: Sun 01 Mar 2026 23:01:01 +0000
Manifest this update: Sun 01 Mar 2026 23:01:01 +0000
Manifest next update: Mon 02 Mar 2026 23:01:01 +0000
Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: qaVHD7qzst1ERusMHn/i8TfbJSzPjqrBFOwfldDMiHI=)
2: W2i76MrSQ6wt7tAiZdLDluFBtFM.roa (hash: x2yrgDtcnU02x3m/qpzHhyg+W4mYTMS/IQSYEXZQTTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:3b:17:3a:1d:ca:9f:f0:6e:8b:5d:15:64:f0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Validity
Not Before: Mar 1 23:01:01 2026 GMT
Not After : Mar 2 23:01:01 2026 GMT
Subject: CN=45d513d8e4eb49a88ac643fcaf50004d2ac710f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:05:21:a9:53:fc:6e:19:7b:a0:fd:be:49:
71:11:07:59:a7:88:54:f8:b5:d6:47:a3:9a:6b:17:
3b:f0:d8:3d:ad:bc:a5:9a:43:eb:f9:0d:09:f4:05:
7d:01:e0:19:1d:10:68:a7:65:42:67:da:0d:8c:b4:
bc:89:91:1a:ec:81:72:1e:84:c3:d5:85:61:19:4d:
5e:35:38:bd:3a:b4:89:4d:22:8e:8b:5b:17:c3:1b:
64:11:0b:d3:19:94:e4:6c:42:e9:f5:fa:2a:65:9b:
63:71:b5:67:7b:a5:76:e1:a3:53:b3:70:0b:7b:ac:
fe:15:60:f6:57:78:f7:8d:1b:91:f6:55:d9:4e:af:
5d:c5:42:08:55:8b:60:a7:62:ba:2e:bf:b8:ff:fd:
c7:37:e7:09:62:12:21:45:20:a9:9f:76:2e:cf:02:
65:3e:69:2a:a2:19:b4:bd:bc:98:d1:4e:22:75:2c:
9a:82:88:25:f9:b5:b0:2a:69:e9:ee:1d:f1:7a:e8:
d6:be:a5:22:f2:a2:7a:a6:72:67:55:5c:70:04:d6:
ca:55:16:64:6d:9e:f1:bf:9c:8a:fa:da:04:10:3d:
5d:59:d6:9e:5e:98:71:27:38:54:ab:9d:33:c6:70:
2c:a2:9e:7d:fa:f7:32:81:d4:d9:a1:2e:e8:df:a1:
26:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D5:13:D8:E4:EB:49:A8:8A:C6:43:FC:AF:50:00:4D:2A:C7:10:F1
X509v3 Authority Key Identifier:
keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:01:fe:8f:b1:25:7c:8c:91:a8:d6:1c:47:fa:46:45:bd:36:
c0:66:c7:a6:6a:c8:09:b8:b5:ea:f4:2d:44:60:9c:f7:1a:d3:
ba:43:b2:d2:6d:de:ed:a3:e3:cf:d8:df:53:d8:f4:f5:e4:03:
bf:63:51:aa:c1:46:75:cb:84:aa:1c:48:53:4e:1f:b7:b9:43:
fb:1b:b8:6b:6c:6b:da:45:ee:cc:0e:15:8c:2c:4a:1e:2a:5a:
66:34:24:a3:23:b9:d7:d6:f6:ee:49:c0:2c:a3:7f:d0:eb:8d:
fe:8b:a7:b9:13:f8:8d:fe:cc:42:fb:6f:30:89:4c:23:a7:ba:
6b:ab:e8:0e:bf:99:77:dc:e2:03:f6:f1:e2:ab:45:9a:f4:84:
a1:e4:c0:4f:ac:3d:4b:38:09:f9:83:d1:9f:06:a8:b4:9d:f4:
2f:81:2b:ce:ca:5e:57:a3:5a:0c:ff:f1:f7:e6:d2:9b:fa:74:
37:a6:07:a2:22:2b:fb:7a:b5:3d:88:9b:3e:ec:f8:28:25:a5:
5a:e5:6c:7a:73:75:6a:6a:ec:f5:65:2a:00:4b:b8:7a:43:89:
de:8c:5a:79:82:b5:e8:7e:e8:4b:86:ec:bb:a9:2e:28:f6:ba:
fb:ce:fb:15:b9:81:26:64:3f:41:cd:d7:9e:1a:7a:08:2a:20:
08:5f:01:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:57:57 2026 by rpki-client