Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft
File: acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft (raw, json)
Hash identifier: gRh23ST+4DeewQBOPV9pW/dA6x00Niw9FxXPt8RUZC4=
Subject key identifier: D1:D2:63:1B:99:BC:11:75:BF:67:9A:D2:D1:0C:64:CE:40:E3:1B:F2
Authority key identifier: 69:C4:66:D5:82:EC:55:8E:4B:EA:AE:E6:50:BE:50:07:70:9C:58:9F
Certificate issuer: /CN=69c466d582ec558e4beaaee650be5007709c589f
Certificate serial: 01A0EEF8CA925D60F539D8F6345DD330ED34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft
Manifest number: F5
Signing time: Tue 29 Sep 2026 21:01:17 +0000
Manifest this update: Tue 29 Sep 2026 21:01:17 +0000
Manifest next update: Wed 30 Sep 2026 21:01:17 +0000
Files and hashes: 1: 0TImoeOFobuAvAOMciF7V3TPB10.roa (hash: nUfjfiRcg/UYaizImww1B/czlUWqulii1BNxBqglWNk=)
2: 8bTaJMY9KA8sxo8C-PobXPhUnb0.roa (hash: kBR9btSmRDhhnq1VHoWKPZe1M57zc/8ujhKRSZXQCf0=)
3: acRm1YLsVY5L6q7mUL5QB3CcWJ8.crl (hash: dvkFtk957f8pIo77mCZXJUdjC2Iual7IaCJcGTSc4D4=)
4: gM-2NKzsRL5q1qBx4EqW33hVJ5w.roa (hash: s9y3WddOKeg5V2uaL8tmFWIaSe1uuSfJdfFDI6pSOAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:f8:ca:92:5d:60:f5:39:d8:f6:34:5d:d3:30:ed:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c466d582ec558e4beaaee650be5007709c589f
Validity
Not Before: Sep 29 21:01:17 2026 GMT
Not After : Sep 30 21:01:17 2026 GMT
Subject: CN=d1d2631b99bc1175bf679ad2d10c64ce40e31bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:85:3a:35:e0:77:d3:14:f9:02:9b:21:ea:
b8:a6:20:2c:ca:a6:89:f8:3a:21:0b:97:27:5d:c5:
17:9f:7a:c4:db:37:4d:23:bd:7b:bf:76:c2:0c:a4:
df:c0:34:b5:68:cf:d0:a8:01:cf:4c:80:1c:e1:d9:
cd:4c:6c:51:31:57:9e:a9:4c:9e:b2:e6:f9:1a:d9:
84:fc:2c:d7:af:9b:e2:8e:c2:93:cc:54:03:34:1f:
c9:7a:8e:ab:cb:a1:3c:2a:7e:99:3d:f0:87:72:7d:
6c:c7:6c:8a:01:e4:f9:29:93:51:d4:23:1d:71:ea:
9d:62:cb:c6:07:fc:3c:71:83:b5:f1:43:53:ee:93:
7d:26:2a:71:02:40:1d:f0:aa:92:87:b5:d4:5a:53:
36:99:69:0a:e5:62:29:1d:04:39:d0:3d:11:12:37:
03:f6:34:46:29:7e:b1:d2:b1:47:0c:99:ff:7d:d2:
6f:bc:4a:64:58:9b:80:de:bc:21:2b:3d:19:01:cc:
2b:1c:94:ea:44:5c:30:75:02:4c:de:89:d0:68:f9:
49:c6:2c:c0:3d:e3:a9:8d:85:96:81:b9:90:a1:25:
bf:25:1a:e8:39:7f:4c:56:e4:d4:fb:5f:02:b8:98:
ae:c5:11:85:19:67:ed:a4:45:f9:f0:c5:ed:c0:c6:
75:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D2:63:1B:99:BC:11:75:BF:67:9A:D2:D1:0C:64:CE:40:E3:1B:F2
X509v3 Authority Key Identifier:
keyid:69:C4:66:D5:82:EC:55:8E:4B:EA:AE:E6:50:BE:50:07:70:9C:58:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ca:3a:b0:03:7f:bd:18:2d:8c:55:42:56:98:15:3c:f6:b5:
f5:b1:dd:cc:a8:7f:04:43:28:63:2a:8a:e0:7c:71:5e:b3:f4:
f4:eb:88:38:fc:bd:7c:c5:36:7b:b8:f0:28:e4:28:07:c9:4c:
75:08:60:65:dc:70:44:14:df:24:55:1e:a8:9e:43:97:ab:2f:
37:57:f7:07:35:b8:2b:01:4d:59:8d:3d:32:9c:20:c8:67:2a:
2f:95:0f:04:9c:1f:53:f7:c4:bb:f0:1a:7f:fe:9d:85:af:d5:
c8:08:5d:16:7b:1d:a4:70:11:7c:5c:b3:e2:54:16:2a:42:8f:
08:66:31:55:62:3d:41:e7:55:42:c3:cc:1d:3c:ec:ff:17:ab:
72:16:e3:0c:87:9e:3a:8d:4e:5a:84:5d:c0:c7:33:04:e1:4c:
51:2f:a3:2d:fc:1d:e2:0b:cf:77:3a:83:46:60:75:d2:94:f9:
f8:eb:78:de:1f:03:81:be:45:3b:3f:0d:5c:c3:4d:aa:9a:e4:
ab:3b:f0:fe:fc:78:db:55:22:75:39:93:0e:45:13:9b:fe:8b:
d3:4e:97:85:39:af:bd:17:59:0f:0d:38:58:62:78:10:c6:9f:
4f:a6:2e:c2:f3:43:3e:ef:15:77:71:f4:d2:6e:a4:ae:fe:95:
df:36:33:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDu+MqSXWD1Odj2NF3TMO00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YzQ2NmQ1ODJlYzU1OGU0YmVhYWVlNjUwYmU1MDA3NzA5
YzU4OWYwHhcNMjYwOTI5MjEwMTE3WhcNMjYwOTMwMjEwMTE3WjAzMTEwLwYDVQQD
EyhkMWQyNjMxYjk5YmMxMTc1YmY2NzlhZDJkMTBjNjRjZTQwZTMxYmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBSFOjXgd9MU+QKbIeq4piAsyqaJ
+DohC5cnXcUXn3rE2zdNI717v3bCDKTfwDS1aM/QqAHPTIAc4dnNTGxRMVeeqUye
sub5GtmE/CzXr5vijsKTzFQDNB/Jeo6ry6E8Kn6ZPfCHcn1sx2yKAeT5KZNR1CMd
ceqdYsvGB/w8cYO18UNT7pN9JipxAkAd8KqSh7XUWlM2mWkK5WIpHQQ50D0REjcD
9jRGKX6x0rFHDJn/fdJvvEpkWJuA3rwhKz0ZAcwrHJTqRFwwdQJM3onQaPlJxizA
PeOpjYWWgbmQoSW/JRroOX9MVuTU+18CuJiuxRGFGWftpEX58MXtwMZ16wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHSYxuZvBF1v2ea0tEMZM5A4xvyMB8GA1UdIwQY
MBaAFGnEZtWC7FWOS+qu5lC+UAdwnFifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNSbTFZTHNWWTVMNnE3bVVMNVFCM0NjV0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTkt
MWE4MzFiNTk5YzE4LzEvYWNSbTFZTHNWWTVMNnE3bVVMNVFCM0NjV0o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTktMWE4MzFiNTk5YzE4
LzEvYWNSbTFZTHNWWTVMNnE3bVVMNVFCM0NjV0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMo6sAN/
vRgtjFVCVpgVPPa19bHdzKh/BEMoYyqK4HxxXrP09OuIOPy9fMU2e7jwKOQoB8lM
dQhgZdxwRBTfJFUeqJ5Dl6svN1f3BzW4KwFNWY09MpwgyGcqL5UPBJwfU/fEu/Aa
f/6dha/VyAhdFnsdpHARfFyz4lQWKkKPCGYxVWI9QedVQsPMHTzs/xerchbjDIee
Oo1OWoRdwMczBOFMUS+jLfwd4gvPdzqDRmB10pT5+Ot43h8Dgb5FOz8NXMNNqprk
qzvw/vx421UidTmTDkUTm/6L006XhTmvvRdZDw04WGJ4EMafT6YuwvNDPu8Vd3H0
0m6krv6V3zYzzg==
-----END CERTIFICATE-----
Generated at Wed Sep 30 03:49:55 2026 by rpki-client