Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: eRDkY8m2X1aTD14tcq4VTpr88oKinXcmtAsf+PGHZao=
Subject key identifier: 51:78:30:8A:E6:D7:F9:D6:24:CB:24:2D:EB:CD:E8:32:9B:B3:6C:55
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 019CAAFD6AD91872C048DE110A491A44548E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 11DC
Signing time: Sun 01 Mar 2026 20:01:00 +0000
Manifest this update: Sun 01 Mar 2026 20:01:00 +0000
Manifest next update: Mon 02 Mar 2026 20:01:00 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: OGgxgAvRdjjIvUmAO7nXxytYMbJbcWeCR0Cks9p2QRk=)
2: Ea0xhlOm2YvTSj2LUGD3BIPNRR4.roa (hash: xQErZJEOiu3EHRTQnTGckBJupDV77OKBDm1q8oFWOjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:6a:d9:18:72:c0:48:de:11:0a:49:1a:44:54:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Mar 1 20:01:00 2026 GMT
Not After : Mar 2 20:01:00 2026 GMT
Subject: CN=5178308ae6d7f9d624cb242debcde8329bb36c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:49:d5:64:5d:f3:6d:d0:cd:22:c5:f6:ec:73:
88:4c:7b:9b:dc:fe:87:a4:2b:2e:fd:3e:ce:9f:dc:
2a:ff:36:ed:2a:ed:af:04:47:94:24:b2:8e:8d:98:
2f:29:e3:f0:3e:3d:42:39:9a:ff:1e:f7:cf:09:9d:
56:9b:cb:c3:6a:9c:fe:f3:97:6b:c4:98:69:7b:ac:
21:90:08:bf:b5:f8:a3:01:74:b5:d9:8a:6d:42:12:
9b:3c:b8:cf:7c:ba:ee:64:e5:77:27:79:27:16:55:
c9:16:50:3f:fa:54:52:ba:87:49:6e:ee:7a:2d:e0:
1e:f3:98:73:1b:c2:59:e0:0c:a0:9d:7b:d0:fb:66:
26:f3:41:6e:3c:ca:02:1a:95:ad:5b:27:c6:e0:7f:
4b:32:76:20:f8:12:43:c2:40:3b:36:ae:60:d8:9b:
c2:e2:e1:c5:8a:f1:0b:ac:34:66:4a:32:68:60:0b:
bc:2d:f3:7c:d7:50:27:c4:88:d7:84:64:ca:08:8a:
98:af:8a:b6:8c:a2:0c:08:f9:83:6b:41:b0:cc:e1:
e8:6c:f4:f4:1c:e5:44:44:eb:df:87:46:cc:5a:ee:
a0:38:1b:a1:e7:5f:03:80:d3:0d:d3:8c:70:eb:4c:
4a:92:5c:2c:d6:c6:ae:c1:cf:75:13:9b:d2:15:cd:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:78:30:8A:E6:D7:F9:D6:24:CB:24:2D:EB:CD:E8:32:9B:B3:6C:55
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:06:04:ec:73:1d:6e:0f:1b:db:07:8c:2c:46:93:f8:2e:63:
66:5c:51:77:43:67:b1:0d:67:5b:71:6c:9e:ac:43:e6:41:ed:
98:9d:88:7e:9a:22:d4:33:fc:0a:b9:7c:99:1a:e1:c4:96:a2:
84:61:ea:19:2d:4f:f2:fd:4a:0c:9b:87:e5:be:95:f5:e5:55:
c4:be:50:1b:05:c0:98:e6:fb:d7:10:5a:d2:94:9d:52:cf:36:
b9:c5:a5:93:cc:1f:3b:4f:ac:f4:ff:64:a0:d9:f4:a5:d1:fe:
bb:bd:98:79:d9:7c:48:64:04:1b:50:c8:46:1a:5c:5d:12:fa:
9d:92:db:ce:f9:4c:5d:d5:26:c3:ee:c2:8e:c5:ac:c9:08:2e:
e0:72:a8:f1:46:2b:dd:df:aa:70:ca:88:8b:d6:ea:38:11:a9:
53:1c:da:b7:8d:95:47:a8:7a:f2:d9:26:46:fd:17:37:c2:0c:
69:97:ec:4b:f1:de:8d:12:05:f7:91:49:13:98:d3:7d:43:34:
41:b0:e8:78:eb:e1:db:ac:1c:22:47:29:0e:3d:30:1f:80:a1:
58:7b:0e:62:e4:9e:b7:c3:a0:92:7c:a4:c5:18:f6:0c:b9:5f:
74:fa:b0:54:dd:84:ae:8a:a7:a3:2a:d0:47:08:04:67:c8:90:
5c:0f:c9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:22 2026 by rpki-client