Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier: tTDlei+sQi/M8Y77HlojY78HUWnmUoAEC0AsL+i7XuY=
Subject key identifier: 04:82:AD:6C:78:EB:D0:08:70:10:9E:74:F1:C4:45:D2:EC:13:4E:C5
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial: 019F9059DBC9DF4A6920736EA178DF0CBA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number: 0EF7
Signing time: Thu 23 Jul 2026 19:00:35 +0000
Manifest this update: Thu 23 Jul 2026 19:00:35 +0000
Manifest next update: Fri 24 Jul 2026 19:00:35 +0000
Files and hashes: 1: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: k1hVVnNMkigX2wLHdacTysN0AMMa+Unhtv1Hl9/M4MI=)
2: L81FjA0HBR4C3VRXIdzV9aijlDs.roa (hash: l6by3JK81dcZtTI2EAV3D8+hWiL6wJ47qGTRoCR1Fpc=)
3: Tb3ZP8jCF88QUUjfET9_-Hcpu9M.roa (hash: iQIVqlpU95wZ1Y2M7mnw2rHSBBZvM/n/nZYpuMemFV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:db:c9:df:4a:69:20:73:6e:a1:78:df:0c:ba:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Validity
Not Before: Jul 23 19:00:35 2026 GMT
Not After : Jul 24 19:00:35 2026 GMT
Subject: CN=0482ad6c78ebd00870109e74f1c445d2ec134ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c8:41:5f:67:09:5e:1f:52:cb:a4:2a:4e:83:
57:57:9a:e4:68:05:9b:14:a4:3f:62:1b:3e:bb:16:
8e:17:fe:6b:f8:8d:ae:22:42:66:65:d1:46:c0:f5:
ee:d3:39:e2:42:11:48:11:ed:0b:87:81:ac:f5:b9:
58:37:12:df:10:c7:5a:e1:b4:2d:c0:51:89:9d:84:
15:40:4d:d2:47:ca:60:58:ec:8a:eb:0e:23:4b:32:
ec:21:92:a8:1b:e7:43:ac:6c:d2:bc:2e:85:85:4f:
15:22:2c:3e:e7:5a:44:f6:0e:f5:89:13:2d:9b:a9:
aa:47:f5:25:23:4a:80:db:64:73:d5:03:d7:6f:73:
67:37:03:56:d8:49:ca:df:8a:47:bc:8e:4e:00:4e:
2b:85:34:db:99:ae:54:d0:62:83:39:61:21:be:92:
f1:8f:f6:0f:65:ca:84:fc:bb:9d:a2:71:09:0b:aa:
3f:26:21:01:d8:51:ac:fa:cb:27:b9:8b:9a:8d:be:
e5:b3:e5:d8:ce:ff:75:35:4a:ce:c7:ad:a5:ac:e5:
b4:ff:84:3f:9f:30:04:cb:d7:6e:6d:6e:a2:d0:85:
01:6d:67:3c:ba:05:15:58:c7:a9:ae:d8:23:e4:5f:
54:a2:eb:4f:51:64:df:f7:41:47:3c:07:69:de:b9:
62:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:82:AD:6C:78:EB:D0:08:70:10:9E:74:F1:C4:45:D2:EC:13:4E:C5
X509v3 Authority Key Identifier:
keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8d:1f:13:5a:b8:ce:7f:59:eb:4f:b8:82:26:4e:f3:52:47:
a0:56:ce:5a:08:d7:a3:d7:ec:27:0a:2d:03:4d:3c:20:4d:a0:
97:4b:75:2c:6a:e9:98:5b:b9:2e:10:a4:1f:df:9f:20:c4:39:
14:5d:67:76:3e:23:e1:e9:8a:9e:5d:7d:df:30:26:85:06:d6:
b5:fd:f5:82:4d:8d:32:ba:b8:49:2b:56:01:a4:ed:9a:29:ab:
73:b7:be:43:a1:8d:02:85:fd:52:5a:cc:5e:23:6c:62:f9:de:
c1:fc:b3:c4:be:da:28:f4:bc:2e:09:5c:79:73:f7:dd:c2:88:
a6:35:03:9d:c2:4f:3e:e1:ea:0b:2e:9d:07:f9:37:7b:1b:16:
eb:69:c2:21:30:df:e0:60:0c:ea:17:c5:18:1b:0e:ee:6c:d9:
6c:b9:5b:a4:48:34:57:bd:e4:c0:44:87:0b:ef:4a:3c:05:61:
09:4f:2d:46:6d:97:80:db:ce:57:25:c5:37:e8:e4:a4:44:5a:
bc:ab:21:95:c2:02:d2:6e:34:c6:b5:c2:f0:af:8c:1f:b9:41:
a1:e6:ac:2b:b8:a2:c1:9c:64:70:77:4b:c9:f1:09:8b:5b:e2:
09:1e:3c:28:d2:b2:27:bd:37:d3:86:59:06:76:5d:ec:b0:2b:
64:43:79:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWdvJ30ppIHNuoXjfDLpyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjRiMWYxMzU5MTEwYmZmOTkxZTlhYzZmNTE0NjlmZGNi
NDg3YWYwHhcNMjYwNzIzMTkwMDM1WhcNMjYwNzI0MTkwMDM1WjAzMTEwLwYDVQQD
EygwNDgyYWQ2Yzc4ZWJkMDA4NzAxMDllNzRmMWM0NDVkMmVjMTM0ZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28hBX2cJXh9Sy6QqToNXV5rkaAWb
FKQ/Yhs+uxaOF/5r+I2uIkJmZdFGwPXu0zniQhFIEe0Lh4Gs9blYNxLfEMda4bQt
wFGJnYQVQE3SR8pgWOyK6w4jSzLsIZKoG+dDrGzSvC6FhU8VIiw+51pE9g71iRMt
m6mqR/UlI0qA22Rz1QPXb3NnNwNW2EnK34pHvI5OAE4rhTTbma5U0GKDOWEhvpLx
j/YPZcqE/LudonEJC6o/JiEB2FGs+ssnuYuajb7ls+XYzv91NUrOx62lrOW0/4Q/
nzAEy9dubW6i0IUBbWc8ugUVWMeprtgj5F9UoutPUWTf90FHPAdp3rli4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASCrWx469AIcBCedPHERdLsE07FMB8GA1UdIwQY
MBaAFAAksfE1kRC/+ZHprG9RRp/ctIevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUt
MmRhNjI1ZWI3MjQyLzEvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUtMmRhNjI1ZWI3MjQy
LzEvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHI0fE1q4
zn9Z60+4giZO81JHoFbOWgjXo9fsJwotA008IE2gl0t1LGrpmFu5LhCkH9+fIMQ5
FF1ndj4j4emKnl193zAmhQbWtf31gk2NMrq4SStWAaTtmimrc7e+Q6GNAoX9UlrM
XiNsYvnewfyzxL7aKPS8LglceXP33cKIpjUDncJPPuHqCy6dB/k3exsW62nCITDf
4GAM6hfFGBsO7mzZbLlbpEg0V73kwESHC+9KPAVhCU8tRm2XgNvOVyXFN+jkpERa
vKshlcIC0m40xrXC8K+MH7lBoeasK7iiwZxkcHdLyfEJi1viCR48KNKyJ70304ZZ
BnZd7LArZEN5iA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:55 2026 by rpki-client