Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft
File: acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft (raw, json)
Hash identifier: KLR5IQHjRt1tWbfSWhBWeLX+WYTR1CODwLWDGqyNOEo=
Subject key identifier: 31:1F:9D:62:C9:17:7C:5E:7B:CF:D0:E8:38:4D:F1:D1:E7:30:00:93
Authority key identifier: 69:C4:66:D5:82:EC:55:8E:4B:EA:AE:E6:50:BE:50:07:70:9C:58:9F
Certificate issuer: /CN=69c466d582ec558e4beaaee650be5007709c589f
Certificate serial: 019F9549A642C4614B922BDACA5D6DDC94E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:59 +0000
Manifest this update: Fri 24 Jul 2026 18:00:59 +0000
Manifest next update: Sat 25 Jul 2026 18:00:59 +0000
Files and hashes: 1: 0TImoeOFobuAvAOMciF7V3TPB10.roa (hash: nUfjfiRcg/UYaizImww1B/czlUWqulii1BNxBqglWNk=)
2: 8bTaJMY9KA8sxo8C-PobXPhUnb0.roa (hash: kBR9btSmRDhhnq1VHoWKPZe1M57zc/8ujhKRSZXQCf0=)
3: acRm1YLsVY5L6q7mUL5QB3CcWJ8.crl (hash: cSZpOp67bnEA/9GYZ7oDXsu0k06huOE/BsrsRrcqkmY=)
4: gM-2NKzsRL5q1qBx4EqW33hVJ5w.roa (hash: s9y3WddOKeg5V2uaL8tmFWIaSe1uuSfJdfFDI6pSOAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:a6:42:c4:61:4b:92:2b:da:ca:5d:6d:dc:94:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c466d582ec558e4beaaee650be5007709c589f
Validity
Not Before: Jul 24 18:00:59 2026 GMT
Not After : Jul 25 18:00:59 2026 GMT
Subject: CN=311f9d62c9177c5e7bcfd0e8384df1d1e7300093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:c3:81:85:1e:d3:90:84:96:76:20:1e:73:
bb:c6:8c:30:be:62:20:3e:39:70:09:5c:6b:86:1d:
88:6c:81:26:9f:78:60:51:6b:5c:ba:3e:86:b9:39:
d7:93:36:0b:27:5a:a0:72:81:95:1d:91:c3:41:fc:
3e:73:ce:a1:93:98:8a:99:04:ce:51:33:b1:30:e1:
96:93:08:04:1f:4b:3e:f5:fd:ca:2a:fe:b9:d6:52:
b4:e9:44:49:84:c7:3c:5b:b9:9f:e7:25:d2:a9:6a:
a4:76:14:29:32:e2:99:f8:d8:ac:70:e5:cc:70:32:
5b:3f:ba:a3:0a:76:d9:59:53:60:1f:17:88:25:f0:
b1:f0:e7:3e:fd:74:b9:15:65:d0:6f:94:12:b1:03:
df:74:45:8c:ac:9d:d0:74:e3:11:a9:58:81:a7:3a:
8a:7b:55:b3:31:28:ed:50:9b:e7:15:66:9d:17:d8:
68:23:fb:2b:3f:97:4d:df:fa:86:a7:c3:80:9c:02:
64:a4:f2:3d:41:a9:b9:3e:28:5b:a9:f4:88:c2:71:
28:7c:09:b5:f3:4a:9d:3d:5b:a9:66:76:18:bb:d6:
b6:d0:9d:ca:e0:2e:9a:56:8a:38:ac:ca:db:1d:03:
f5:61:8a:25:89:d3:a3:ce:3a:8c:f6:ab:87:b7:e2:
e4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1F:9D:62:C9:17:7C:5E:7B:CF:D0:E8:38:4D:F1:D1:E7:30:00:93
X509v3 Authority Key Identifier:
keyid:69:C4:66:D5:82:EC:55:8E:4B:EA:AE:E6:50:BE:50:07:70:9C:58:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:04:79:cd:9f:d2:27:ff:2a:ef:ca:4a:39:e0:b0:0f:33:f0:
44:e1:98:a5:94:1c:c4:97:11:87:d9:dd:ea:80:97:52:77:33:
af:c4:dc:0d:59:a9:4b:ad:89:9a:44:f4:83:2c:51:f2:20:f6:
82:fe:ae:81:ad:44:b7:1c:71:d2:b6:a3:46:ec:ed:ac:ca:5a:
35:10:b4:67:5b:1d:3d:ce:8c:55:f5:40:3b:7b:76:a2:b1:35:
df:f3:60:6c:1d:1f:db:f0:fa:25:da:fb:32:45:eb:9f:fc:2a:
65:69:7b:a3:52:c6:c4:6b:5c:9c:fb:d7:3d:05:74:24:78:db:
b8:49:0a:04:b8:1e:96:3f:dc:fe:63:ee:33:41:9d:6a:fa:a3:
db:e1:70:bf:8d:65:f4:87:7a:a9:52:48:a7:12:ad:b6:62:28:
ae:0a:b3:71:9a:4a:c4:00:52:4d:32:2f:23:0e:ee:7c:f5:80:
16:35:b1:46:cf:4f:b7:34:75:8e:12:74:04:12:06:36:d8:d2:
06:5f:6e:a6:52:ad:e3:ad:67:1e:b6:a0:a6:15:45:03:64:37:
63:3b:be:75:ca:5f:b3:95:41:df:23:2d:f3:d5:48:a0:0b:dc:
22:2b:95:64:ce:81:e1:e7:72:87:b1:41:91:51:b3:74:06:65:
04:9d:b6:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSaZCxGFLkivayl1t3JThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YzQ2NmQ1ODJlYzU1OGU0YmVhYWVlNjUwYmU1MDA3NzA5
YzU4OWYwHhcNMjYwNzI0MTgwMDU5WhcNMjYwNzI1MTgwMDU5WjAzMTEwLwYDVQQD
EygzMTFmOWQ2MmM5MTc3YzVlN2JjZmQwZTgzODRkZjFkMWU3MzAwMDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwXDgYUe05CElnYgHnO7xowwvmIg
PjlwCVxrhh2IbIEmn3hgUWtcuj6GuTnXkzYLJ1qgcoGVHZHDQfw+c86hk5iKmQTO
UTOxMOGWkwgEH0s+9f3KKv651lK06URJhMc8W7mf5yXSqWqkdhQpMuKZ+NiscOXM
cDJbP7qjCnbZWVNgHxeIJfCx8Oc+/XS5FWXQb5QSsQPfdEWMrJ3QdOMRqViBpzqK
e1WzMSjtUJvnFWadF9hoI/srP5dN3/qGp8OAnAJkpPI9Qam5PihbqfSIwnEofAm1
80qdPVupZnYYu9a20J3K4C6aVoo4rMrbHQP1YYolidOjzjqM9quHt+LkJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEfnWLJF3xee8/Q6DhN8dHnMACTMB8GA1UdIwQY
MBaAFGnEZtWC7FWOS+qu5lC+UAdwnFifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNSbTFZTHNWWTVMNnE3bVVMNVFCM0NjV0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTkt
MWE4MzFiNTk5YzE4LzEvYWNSbTFZTHNWWTVMNnE3bVVMNVFCM0NjV0o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTktMWE4MzFiNTk5YzE4
LzEvYWNSbTFZTHNWWTVMNnE3bVVMNVFCM0NjV0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwR5zZ/S
J/8q78pKOeCwDzPwROGYpZQcxJcRh9nd6oCXUnczr8TcDVmpS62JmkT0gyxR8iD2
gv6uga1Etxxx0rajRuztrMpaNRC0Z1sdPc6MVfVAO3t2orE13/NgbB0f2/D6Jdr7
MkXrn/wqZWl7o1LGxGtcnPvXPQV0JHjbuEkKBLgelj/c/mPuM0Gdavqj2+Fwv41l
9Id6qVJIpxKttmIorgqzcZpKxABSTTIvIw7ufPWAFjWxRs9PtzR1jhJ0BBIGNtjS
Bl9uplKt461nHragphVFA2Q3Yzu+dcpfs5VB3yMt89VIoAvcIiuVZM6B4edyh7FB
kVGzdAZlBJ222A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:45 2026 by rpki-client