Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier: vljX6g7lUwkp6PnvAYCZAvxQfNLJAbZYefD3tl8OHJQ=
Subject key identifier: 8A:80:45:BA:0C:F9:1F:26:99:0B:78:F3:5E:6C:B5:10:D0:4F:9A:B2
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial: 01A1C141A1EE2A9AB805722086CC9DC20BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number: 0973
Signing time: Mon 09 Nov 2026 17:01:06 +0000
Manifest this update: Mon 09 Nov 2026 17:01:06 +0000
Manifest next update: Tue 10 Nov 2026 17:01:06 +0000
Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: 3FTMYcwTMRCQVZIj4/IrCj7/SbpUT2kNgDjn1a6pS1o=)
2: W2i76MrSQ6wt7tAiZdLDluFBtFM.roa (hash: x2yrgDtcnU02x3m/qpzHhyg+W4mYTMS/IQSYEXZQTTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:41:a1:ee:2a:9a:b8:05:72:20:86:cc:9d:c2:0b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Validity
Not Before: Nov 9 17:01:06 2026 GMT
Not After : Nov 10 17:01:06 2026 GMT
Subject: CN=8a8045ba0cf91f26990b78f35e6cb510d04f9ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:fa:42:73:2f:4a:d8:b7:93:62:70:9d:46:
27:0e:86:ef:16:c9:e0:b7:3e:de:22:2e:a4:83:41:
4b:9e:87:d0:9c:46:11:a9:97:4d:7a:fa:c9:93:01:
c5:46:1d:95:0a:8f:80:b0:ed:64:41:51:e6:36:6d:
29:b8:7c:42:bb:e9:34:05:a8:fe:1f:d2:89:d1:03:
2f:66:fc:77:4c:d0:61:d1:b1:c5:06:c0:cc:1c:8c:
39:0f:24:66:2d:37:aa:58:12:1d:8c:31:1f:bc:24:
07:f7:e9:9c:e7:0c:55:54:b1:95:51:02:b2:a8:d5:
fd:f7:b1:09:dd:b6:cb:88:b4:a9:83:d7:bd:1d:12:
66:b5:2d:0c:36:49:f5:74:f0:4d:11:84:75:ee:36:
6f:97:39:09:8a:97:0f:31:0a:a1:0c:4d:c0:2e:e4:
1b:5a:17:4f:6d:2d:cc:fa:d7:f1:6c:50:00:d1:1f:
5e:76:13:77:ec:de:e1:f2:04:98:5d:eb:82:e0:8b:
d6:98:28:e3:4f:80:b8:d7:9b:1c:d8:38:97:3d:b7:
9d:55:81:89:e6:b0:64:ee:68:ee:3b:76:ec:9b:15:
8e:67:18:3f:ac:58:22:25:ac:54:73:e5:c8:c6:eb:
56:73:c6:47:37:1a:a7:10:7a:2f:17:56:e9:09:3a:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:80:45:BA:0C:F9:1F:26:99:0B:78:F3:5E:6C:B5:10:D0:4F:9A:B2
X509v3 Authority Key Identifier:
keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d6:9a:ec:21:ce:26:53:d4:b0:75:eb:67:ec:e3:5e:a3:71:
51:dc:79:07:25:50:b5:05:23:c9:2c:9f:34:d0:d0:36:92:3f:
3b:35:69:84:64:7d:f6:75:c3:68:3d:05:cc:12:3f:d9:9a:fe:
6e:e0:8d:46:4f:5b:04:4d:46:e7:22:87:79:e3:26:51:95:ce:
23:e4:78:ec:34:93:e2:50:9d:04:89:ba:bf:7b:fb:f7:3f:79:
41:97:fe:f8:4f:96:4b:b3:e4:a5:0f:db:0c:65:15:8f:83:b8:
c7:a2:95:32:cc:37:0b:24:ca:62:2d:10:5a:b9:a3:9f:25:01:
8c:dd:f6:e2:a4:70:db:b6:09:01:8c:e9:22:90:56:a7:90:81:
78:a0:48:19:88:76:31:0e:0f:5c:cd:d0:cd:07:c4:85:01:93:
6e:16:8f:ca:cf:5b:00:27:e0:d1:b5:5b:b1:9d:01:eb:a9:da:
57:97:59:73:21:63:e3:ed:bb:cb:7d:db:57:5b:85:a9:6f:a4:
f0:57:25:21:f9:99:db:b6:fb:46:04:00:9a:12:b4:7a:7c:ce:
8e:66:f0:a7:0b:bf:f8:8c:18:d4:e0:85:fe:0e:b6:96:e7:89:
90:38:b1:1c:22:b0:fb:56:15:05:0a:17:1b:a2:7a:bd:0f:f4:
41:e7:5e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:38:22 2026 by rpki-client