Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: czvGtNlCuMtLkpZK8xzKKttexYaRJ7N2zOmQyoU24I8=
Subject key identifier: 3E:86:6F:91:33:D2:BF:6E:E2:03:36:D2:12:CC:E0:A9:82:E2:BF:2A
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 019D9A752B478EC9BFF379B0EB10D99EED63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 1258
Signing time: Fri 17 Apr 2026 08:01:02 +0000
Manifest this update: Fri 17 Apr 2026 08:01:02 +0000
Manifest next update: Sat 18 Apr 2026 08:01:02 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: seZKdO66aCre41p9lKUAt3grtzQx9uCYYv2ug4daDtQ=)
2: Ea0xhlOm2YvTSj2LUGD3BIPNRR4.roa (hash: xQErZJEOiu3EHRTQnTGckBJupDV77OKBDm1q8oFWOjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:2b:47:8e:c9:bf:f3:79:b0:eb:10:d9:9e:ed:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Apr 17 08:01:02 2026 GMT
Not After : Apr 18 08:01:02 2026 GMT
Subject: CN=3e866f9133d2bf6ee20336d212cce0a982e2bf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:f2:f4:ba:3e:aa:cf:51:84:38:51:35:88:
f9:07:e8:0a:e5:0b:fc:ae:87:07:e6:89:b3:e9:45:
07:c7:81:b9:b0:3e:dc:0d:1d:25:a3:a4:16:c6:2b:
42:61:6d:33:59:2e:ba:e1:ad:05:e8:02:58:a3:1d:
78:41:83:82:f0:83:d4:71:c0:21:54:bd:d8:63:22:
89:e8:40:96:13:91:4e:92:c2:f9:22:71:8d:63:2e:
55:68:03:58:11:81:f3:11:21:35:ad:7b:c5:eb:11:
cd:ae:df:92:5f:3a:28:e3:58:c4:33:ac:98:a5:09:
af:62:80:00:97:2a:e2:4a:de:e7:d6:4f:7d:fe:ac:
e5:28:30:68:b4:72:eb:9b:46:cd:d6:f4:62:8c:6d:
3c:1b:03:b0:ae:c2:1d:32:34:32:dc:a9:2d:35:ad:
93:c8:53:f1:af:8f:bf:b1:a6:c1:77:e0:a7:d1:07:
91:58:9a:cc:1d:49:cc:a5:42:18:d2:d2:8e:96:d4:
50:52:a0:7a:c0:a8:51:f1:c9:d1:b4:af:27:c7:16:
eb:7e:13:81:f2:80:fd:4b:84:e5:c9:db:64:a3:eb:
53:10:82:7e:b8:63:d8:8b:97:a5:ae:a3:e6:bf:b4:
48:45:7d:91:d0:76:3e:67:4b:37:6e:61:50:68:3a:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:86:6F:91:33:D2:BF:6E:E2:03:36:D2:12:CC:E0:A9:82:E2:BF:2A
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3c:49:52:b2:3a:f5:0c:92:b1:04:c8:0e:e8:7b:40:6b:b4:
67:09:ad:c8:a7:5c:98:7a:ff:3c:c7:88:2a:5c:11:10:1b:d6:
96:40:57:1b:e5:fb:79:b0:c8:3b:0b:09:a6:96:be:08:5a:fb:
7d:d4:09:5a:b3:eb:02:c2:2e:ee:19:85:cc:c9:cc:34:b6:a2:
5d:29:5b:81:b1:bd:8c:8b:3e:61:b5:b9:b5:99:ae:c3:fa:b7:
02:36:6f:f1:8c:38:3c:63:a7:e0:a3:99:3d:40:0e:82:99:07:
f2:05:37:96:ee:db:c8:e5:56:3f:4d:d5:81:22:c6:0b:58:2f:
d8:83:d0:c9:09:05:81:44:95:e4:5f:c0:7b:67:86:53:8c:25:
3b:4a:fd:7f:85:44:44:1d:37:f7:5d:f8:24:50:d5:b7:19:86:
fd:ae:ed:45:61:54:d8:af:bf:b3:1c:9e:f6:7a:2f:40:c5:a8:
79:3f:46:40:b7:ae:61:a2:09:35:4b:ed:e6:d6:08:19:04:16:
9e:a0:e9:f7:d7:56:34:74:c4:4e:76:d0:6b:04:45:77:1a:fa:
2c:35:92:00:6f:62:80:07:36:5e:43:7c:15:43:dc:b7:86:16:
25:53:13:03:51:30:67:d1:47:b8:47:94:59:dc:03:90:e7:bb:
09:75:5c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:54 2026 by rpki-client