Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier: 4c/Z6UQQoXqJamCJYUFayq+0jARWS8wNBrrHTOUq1qc=
Subject key identifier: 1C:A3:4F:D1:9B:6E:65:7C:00:2C:F5:99:F0:76:31:17:A9:E1:4C:77
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial: 019FA8623C36165CE06A1FBCD653576D6C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number: 085D
Signing time: Tue 28 Jul 2026 11:00:37 +0000
Manifest this update: Tue 28 Jul 2026 11:00:37 +0000
Manifest next update: Wed 29 Jul 2026 11:00:37 +0000
Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: o0TWcd2tJVbqowE5dLPRuMlJsn6KENt0uNCEy/ua+B8=)
2: W2i76MrSQ6wt7tAiZdLDluFBtFM.roa (hash: x2yrgDtcnU02x3m/qpzHhyg+W4mYTMS/IQSYEXZQTTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:3c:36:16:5c:e0:6a:1f:bc:d6:53:57:6d:6c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Validity
Not Before: Jul 28 11:00:37 2026 GMT
Not After : Jul 29 11:00:37 2026 GMT
Subject: CN=1ca34fd19b6e657c002cf599f0763117a9e14c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:b5:64:73:fb:cd:e1:94:7f:ac:55:0a:d8:
9d:28:d8:6f:7c:46:f7:57:a1:82:f4:90:f1:5e:52:
d5:e8:b6:65:36:ee:7c:a0:aa:ec:cb:78:89:85:11:
71:21:ea:2d:f1:d6:83:fb:91:2a:86:26:4f:42:94:
28:64:6e:f9:3e:33:50:9c:9f:ba:e3:47:e9:ed:af:
d5:2c:2b:c7:d3:cc:af:bf:70:81:d0:87:c6:6a:1a:
68:26:52:88:80:dd:3f:75:96:33:e5:70:06:ed:8e:
77:90:da:29:ce:e7:db:f9:e4:59:e1:4d:61:75:25:
01:00:33:c5:e3:25:d4:f5:a4:c7:9e:d1:82:e3:ad:
a5:91:7c:53:62:dd:5a:a3:00:37:23:b2:b1:fa:89:
e2:af:b6:4c:7b:60:42:6c:f2:c1:69:db:81:cc:c8:
50:3f:f5:d7:32:d6:c3:9b:8e:ff:3f:52:1d:ef:dd:
a4:fb:a9:e3:c2:5c:dd:b1:e4:7f:f8:fc:6c:73:80:
53:95:6a:c1:eb:0e:bf:14:58:64:52:59:ce:ac:f4:
a7:93:c9:e2:bc:06:97:83:05:00:a4:a8:95:8e:b8:
aa:ec:fe:f7:39:13:0c:e2:a8:40:7d:b4:0e:e8:fa:
55:00:58:cb:fc:4e:87:a5:67:8c:44:0b:e2:3d:32:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A3:4F:D1:9B:6E:65:7C:00:2C:F5:99:F0:76:31:17:A9:E1:4C:77
X509v3 Authority Key Identifier:
keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:32:c1:d8:91:f3:02:c7:02:b2:08:f0:9a:c0:72:5b:0f:41:
cf:13:73:fc:3e:72:80:fe:f1:fd:c0:86:de:10:43:fd:17:3f:
82:8f:10:76:8d:8c:eb:00:20:61:85:1c:65:a6:13:b2:5d:98:
c1:e8:1d:64:36:cd:3d:76:b0:96:a5:59:63:12:c6:7d:bc:2d:
9c:2d:bd:3b:b6:12:69:80:b7:76:7b:e8:e5:b3:d4:c7:f3:1d:
da:ab:b2:eb:e9:0b:09:22:11:d2:3d:0b:18:f1:e5:eb:7d:70:
e6:24:92:cd:ee:35:8e:58:4e:0f:49:20:1a:ec:b5:0c:6b:4e:
50:b5:96:52:db:e1:6f:be:9e:14:fb:e6:65:93:1d:ee:02:ec:
b9:1f:c1:bf:5c:87:53:77:d1:bf:11:90:fc:94:22:df:28:9e:
ec:a8:41:7d:42:d5:0b:a0:8e:94:bd:c4:db:35:62:67:fe:5b:
09:c5:0b:6d:c4:86:f4:60:30:15:6f:7f:73:74:5f:e3:5d:81:
c3:e1:65:26:ca:01:30:d5:64:38:49:78:90:da:0c:cd:c5:18:
1f:b3:84:b7:47:02:4e:a2:13:75:62:32:e6:61:56:3a:b1:fc:
d3:44:3d:44:2e:6b:d2:ef:e5:51:54:2b:de:0d:be:a0:a8:64:
6c:d5:df:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:40 2026 by rpki-client