Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: SJPDQi3A7RSpOAXb3iC7bia1ofq0QALrAIWfa6vtF2o=
Subject key identifier: 2E:DC:0B:5D:33:6E:7D:C5:4C:5E:A0:9A:F5:AA:43:B4:5B:94:1D:8C
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 019FA9AC199F250EF88C5107094B1D0BDBCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 1369
Signing time: Tue 28 Jul 2026 17:00:55 +0000
Manifest this update: Tue 28 Jul 2026 17:00:55 +0000
Manifest next update: Wed 29 Jul 2026 17:00:55 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: cCvjEbvaFKb7hX72ByBX3YONaGhsftyJiqsO7U6Crmk=)
2: Ea0xhlOm2YvTSj2LUGD3BIPNRR4.roa (hash: xQErZJEOiu3EHRTQnTGckBJupDV77OKBDm1q8oFWOjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:19:9f:25:0e:f8:8c:51:07:09:4b:1d:0b:db:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Jul 28 17:00:55 2026 GMT
Not After : Jul 29 17:00:55 2026 GMT
Subject: CN=2edc0b5d336e7dc54c5ea09af5aa43b45b941d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c8:50:0e:86:4b:36:2b:12:8a:8c:55:59:6f:
dd:e1:ee:fe:a2:b2:a6:ea:8d:bc:f4:50:cb:ac:04:
32:57:11:8b:2e:20:62:d6:48:63:ac:38:bf:67:bb:
fc:ed:55:97:c7:fb:8d:86:d7:1b:54:97:1e:aa:fd:
f6:db:68:74:86:58:2a:16:13:76:fc:34:5f:45:8f:
06:45:b7:6a:01:fc:48:f8:93:9e:9c:ae:fb:14:ea:
e3:33:d0:9d:8f:2d:2e:c0:20:fa:06:1f:49:3e:49:
29:58:57:47:57:04:f8:d1:f4:52:69:70:44:0f:78:
b4:9f:ef:2f:48:cd:d4:ea:93:e3:91:00:88:9c:b7:
c0:b6:05:4f:28:85:e0:82:05:dd:b1:76:9f:44:b1:
3e:1b:1b:d9:d2:98:8b:90:9c:81:b6:c9:7d:d2:e4:
eb:8e:2b:c2:7a:7d:85:3e:cc:6e:71:57:a6:20:7c:
84:78:cc:17:93:93:2e:20:3c:d2:3a:5f:14:f7:28:
e5:0e:59:2d:12:6a:0d:72:ae:61:d4:00:3a:01:c1:
ed:ba:16:ca:66:39:6a:41:b3:cd:ec:44:3a:dd:fd:
64:49:4b:06:a6:43:ca:1f:eb:af:0d:20:15:65:05:
bb:04:d9:9e:06:ac:c4:cf:ff:58:b1:3e:e5:40:94:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DC:0B:5D:33:6E:7D:C5:4C:5E:A0:9A:F5:AA:43:B4:5B:94:1D:8C
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0e:2d:80:bf:72:09:4b:b3:8f:88:08:b3:c7:53:80:e6:62:
a7:b6:35:b7:ae:0f:da:f6:5b:85:eb:a5:81:5e:23:e5:40:b5:
b0:13:41:9f:d7:00:a1:31:7a:4b:e6:e9:10:e4:66:ed:b1:2b:
fe:c0:36:49:f3:45:4e:84:62:65:63:78:86:8c:92:ab:c8:68:
ad:c7:05:1e:59:b4:11:5d:29:4d:30:94:6d:ec:c1:ee:be:81:
cc:8d:b7:17:fc:38:50:0b:da:e8:8c:72:35:1c:6d:01:0a:41:
5a:0a:e8:c8:e3:1b:45:b9:a3:e7:ed:b5:9f:1f:d1:78:4b:16:
ff:c2:ef:1e:02:9b:f0:f2:23:3d:81:eb:f7:07:fb:45:f5:dc:
27:42:f2:36:4a:a8:73:3f:a1:57:b4:be:3e:14:25:69:1b:81:
ee:ba:74:91:a4:f5:7e:91:a5:00:89:85:7f:f6:13:6d:5a:d1:
74:25:fd:62:24:1a:1a:e7:8d:93:ed:c7:eb:64:d3:4b:3c:48:
58:7a:3a:53:96:8b:46:01:93:f1:47:6b:c5:68:48:4d:c2:9e:
e3:68:f7:cb:0e:93:7e:a3:74:e1:12:93:d7:0f:7f:e7:2e:75:
81:03:e2:0d:1d:44:c4:88:fb:42:6c:90:d2:ae:f6:54:e5:38:
8a:d6:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:21:27 2026 by rpki-client