
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
File: ACY1rIzpE_p8zV123YYuJIxxy_M.mft (raw, json)
Hash identifier: EKJ/HAYppiHdGQynNsj7APixQEmBYAGXsnnqh0H8N/w=
Subject key identifier: C3:80:E9:D2:84:71:3E:EF:E5:E3:22:A0:5B:8B:47:42:4F:49:09:06
Authority key identifier: 00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
Certificate issuer: /CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Certificate serial: 019CA9EB15591A51DEC8BBFB199494A1EED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
Manifest number: 07B6
Signing time: Sun 01 Mar 2026 15:01:21 +0000
Manifest this update: Sun 01 Mar 2026 15:01:21 +0000
Manifest next update: Mon 02 Mar 2026 15:01:21 +0000
Files and hashes: 1: ACY1rIzpE_p8zV123YYuJIxxy_M.crl (hash: 3ZYWs7tOaR1ptkjIon5xkgf9KSHc9Vu6hGlCZc8Y4/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:15:59:1a:51:de:c8:bb:fb:19:94:94:a1:ee:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Validity
Not Before: Mar 1 15:01:21 2026 GMT
Not After : Mar 2 15:01:21 2026 GMT
Subject: CN=c380e9d284713eefe5e322a05b8b47424f490906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:d1:a6:46:c1:a9:d6:5f:08:38:98:9c:4f:
39:32:83:76:b8:c9:7f:a1:d2:70:ba:3b:9f:dc:7c:
6b:7d:5e:13:c3:f3:ac:92:2d:00:54:fe:b4:ed:96:
76:dd:f6:b9:92:a1:bd:51:62:23:f8:2f:71:b8:0f:
86:ea:61:06:f4:a3:18:64:02:4f:5b:d5:ed:26:bc:
da:ce:ce:42:43:c9:73:21:10:0e:fa:98:f6:2b:6d:
b3:c9:ab:dc:43:ae:cd:eb:44:b1:92:bf:f7:89:1e:
8f:ad:d1:5b:2c:49:44:14:78:6a:21:2d:07:f1:e8:
bc:c9:07:14:d7:ed:f6:ae:e9:65:71:28:88:30:a6:
9f:cf:d2:c8:91:c9:92:8c:5f:38:75:1f:f1:ca:a9:
d3:35:e4:34:da:77:fd:2c:f2:2f:d5:ad:18:3b:2e:
da:eb:64:f6:1d:69:ae:64:49:a9:a8:5e:12:40:9d:
ee:e8:d5:f9:49:64:89:24:a1:97:de:10:c2:39:1a:
0e:fc:2d:7b:22:10:dd:6a:ba:76:3e:f5:03:4d:f6:
49:5d:98:a8:5e:10:1f:36:0b:d2:eb:e4:1b:dd:a1:
5c:28:d4:c9:b5:84:c7:96:99:e0:9f:e8:06:f7:4c:
e7:a7:bb:1e:a8:6b:8f:0e:74:f5:9a:38:cb:62:32:
94:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:80:E9:D2:84:71:3E:EF:E5:E3:22:A0:5B:8B:47:42:4F:49:09:06
X509v3 Authority Key Identifier:
keyid:00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:37:b1:3a:ef:13:ba:19:bc:fb:c6:fb:f1:0c:ac:3c:c9:74:
da:33:40:c4:fb:3d:f0:e2:04:ce:ee:0a:8d:1b:9c:f0:9e:a6:
8f:ef:76:db:52:5d:31:3c:0c:b5:d0:24:34:0f:2f:d2:71:7f:
58:63:e9:d6:6c:07:9d:9e:09:29:88:84:48:20:a5:57:8a:fc:
13:54:7b:ed:a8:c4:d3:c0:49:53:bf:ec:97:ca:c0:11:ee:39:
77:05:6c:00:25:8d:d5:28:5d:25:0e:ac:f6:04:eb:91:91:37:
28:f7:5b:48:4d:d0:b5:c7:b3:b5:34:49:d9:dd:19:d5:5a:58:
e5:dd:dc:52:62:c7:3f:03:08:5e:cf:2b:d1:65:16:a0:67:79:
e9:80:ee:a5:bc:8f:60:64:01:12:0f:64:70:ea:96:27:b3:3d:
40:b0:0e:6b:70:c5:f9:0e:bc:93:ba:48:1b:0c:f4:71:b0:ce:
d2:27:ba:f3:d9:45:bd:1b:68:9a:c5:1b:aa:21:44:51:9c:51:
e8:f8:90:fa:28:eb:0a:ac:f3:8f:f4:b9:5c:4d:1d:99:58:53:
95:5c:5e:49:5d:43:24:35:4b:82:87:ac:d7:25:52:af:00:f2:
dd:9a:01:4e:9a:1f:08:e1:c8:0a:96:0c:82:27:5a:7b:19:fa:
c5:78:03:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6xVZGlHeyLv7GZSUoe7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjYzNWFjOGNlOTEzZmE3Y2NkNWQ3NmRkODYyZTI0OGM3
MWNiZjMwHhcNMjYwMzAxMTUwMTIxWhcNMjYwMzAyMTUwMTIxWjAzMTEwLwYDVQQD
EyhjMzgwZTlkMjg0NzEzZWVmZTVlMzIyYTA1YjhiNDc0MjRmNDkwOTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAranRpkbBqdZfCDiYnE85MoN2uMl/
odJwujuf3HxrfV4Tw/Oski0AVP607ZZ23fa5kqG9UWIj+C9xuA+G6mEG9KMYZAJP
W9XtJrzazs5CQ8lzIRAO+pj2K22zyavcQ67N60Sxkr/3iR6PrdFbLElEFHhqIS0H
8ei8yQcU1+32rullcSiIMKafz9LIkcmSjF84dR/xyqnTNeQ02nf9LPIv1a0YOy7a
62T2HWmuZEmpqF4SQJ3u6NX5SWSJJKGX3hDCORoO/C17IhDdarp2PvUDTfZJXZio
XhAfNgvS6+Qb3aFcKNTJtYTHlpngn+gG90znp7seqGuPDnT1mjjLYjKUWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOA6dKEcT7v5eMioFuLR0JPSQkGMB8GA1UdIwQY
MBaAFAAmNayM6RP6fM1ddt2GLiSMccvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNZMXJJenBFX3A4elYxMjNZWXVKSXh4eV9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYzBhZWUtOWUzYi00ZDIxLThiOGYt
YjRlOTE5ZjA4MjVjLzEvQUNZMXJJenBFX3A4elYxMjNZWXVKSXh4eV9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hYzBhZWUtOWUzYi00ZDIxLThiOGYtYjRlOTE5ZjA4MjVj
LzEvQUNZMXJJenBFX3A4elYxMjNZWXVKSXh4eV9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTexOu8T
uhm8+8b78QysPMl02jNAxPs98OIEzu4KjRuc8J6mj+9221JdMTwMtdAkNA8v0nF/
WGPp1mwHnZ4JKYiESCClV4r8E1R77ajE08BJU7/sl8rAEe45dwVsACWN1ShdJQ6s
9gTrkZE3KPdbSE3QtceztTRJ2d0Z1VpY5d3cUmLHPwMIXs8r0WUWoGd56YDupbyP
YGQBEg9kcOqWJ7M9QLAOa3DF+Q68k7pIGwz0cbDO0ie689lFvRtomsUbqiFEUZxR
6PiQ+ijrCqzzj/S5XE0dmVhTlVxeSV1DJDVLgoes1yVSrwDy3ZoBTpofCOHICpYM
gidaexn6xXgDlg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:40 2026 by rpki-client