Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier: mlZJTTaCrOwJgRdjmgkwQOCMuC1rPgecMEwQtBwx5vk=
Subject key identifier: 07:21:57:2C:E6:A1:A3:81:A7:C4:34:8D:40:D5:1C:FF:0A:82:ED:32
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial: 01A0CD10A4FB624EAD45DE2831212CE97C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number: 0F9B
Signing time: Wed 23 Sep 2026 07:00:15 +0000
Manifest this update: Wed 23 Sep 2026 07:00:15 +0000
Manifest next update: Thu 24 Sep 2026 07:00:15 +0000
Files and hashes: 1: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: xcNUySTR/6UePy+4QqXh9dlA0JCqyYXPshtQQGH+ZJ0=)
2: L81FjA0HBR4C3VRXIdzV9aijlDs.roa (hash: l6by3JK81dcZtTI2EAV3D8+hWiL6wJ47qGTRoCR1Fpc=)
3: Tb3ZP8jCF88QUUjfET9_-Hcpu9M.roa (hash: iQIVqlpU95wZ1Y2M7mnw2rHSBBZvM/n/nZYpuMemFV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:a4:fb:62:4e:ad:45:de:28:31:21:2c:e9:7c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Validity
Not Before: Sep 23 07:00:15 2026 GMT
Not After : Sep 24 07:00:15 2026 GMT
Subject: CN=0721572ce6a1a381a7c4348d40d51cff0a82ed32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:2b:10:fe:c2:d0:e5:db:25:5a:2c:4e:8a:
05:35:3a:e7:98:bf:16:7f:2e:ba:16:c7:0f:92:a9:
57:a4:a6:d6:cc:b0:39:b5:8d:d9:d1:55:92:1f:80:
1b:bc:da:90:3e:85:64:3d:d2:a9:b4:e2:5f:76:0d:
3f:79:f6:93:0a:77:78:e8:cd:0a:e0:17:b9:1b:d0:
f9:f9:c9:2a:d5:2d:13:b0:b0:71:e0:7d:8b:26:7e:
57:8a:75:ec:86:31:82:9c:5d:73:80:f8:65:58:7e:
0a:b7:a6:95:ee:26:2f:2b:22:0f:63:33:f2:5d:1f:
ff:21:03:cb:4f:06:7e:8d:c4:77:ab:70:20:7f:89:
3e:32:c1:00:7a:9c:5a:65:b4:5e:4e:0c:04:0f:d2:
21:70:e9:0d:c3:15:53:75:7c:ca:d7:ac:fc:05:d7:
b0:93:c0:44:16:7b:60:56:20:8d:c2:45:ba:4d:6e:
ca:d1:53:5c:ba:05:19:3e:29:51:15:08:dd:a9:3e:
2d:6b:ad:5f:01:99:a6:29:09:fc:6a:44:b4:ea:b9:
c2:b8:fe:a2:41:49:32:73:69:d4:28:f5:ea:f7:9c:
59:8e:9e:60:5c:30:5f:6e:25:04:92:cd:7a:91:6b:
1e:45:1f:3f:22:5c:6b:dc:79:20:55:1e:13:2a:80:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:21:57:2C:E6:A1:A3:81:A7:C4:34:8D:40:D5:1C:FF:0A:82:ED:32
X509v3 Authority Key Identifier:
keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e9:59:1c:02:dc:65:a9:53:0e:3e:68:62:93:cb:06:13:68:
e1:10:38:d6:e5:e9:96:76:c9:c7:44:62:28:3f:1f:9c:22:33:
9c:a4:30:8f:53:fe:cd:ec:a3:5a:91:59:8d:b4:b2:df:42:38:
1d:b1:2f:2a:de:ca:dd:ac:26:de:a4:4d:b7:de:a2:3d:4a:e6:
ed:2b:e5:7f:e0:9e:df:20:72:71:74:c7:62:7b:6a:5f:e5:e9:
a0:2b:0b:60:df:bc:0c:18:6a:72:39:f8:8c:bc:4d:83:2e:d4:
4c:5e:92:de:7a:a2:a4:f3:1c:02:30:30:24:01:fb:d7:64:14:
f2:f9:5b:da:31:b3:78:54:aa:34:99:c3:f7:a3:c7:9d:32:de:
0c:7e:1a:60:c7:c1:fe:00:6b:d5:48:23:70:88:dd:6c:05:0a:
f1:ba:b5:3c:b3:68:28:60:9a:ab:d2:d8:b8:5b:e9:95:0f:c1:
02:35:34:24:b2:3a:3b:56:89:1c:fd:e7:bc:5c:25:16:d2:f1:
50:63:c1:ae:fe:ac:2b:b2:df:0a:d8:8d:48:ff:09:c9:af:17:
ad:9f:45:41:be:03:9c:59:62:ed:c7:3e:a3:5b:0b:65:4f:81:
9b:e7:0e:41:89:76:87:fd:0e:55:ed:ff:38:44:3a:a5:9f:d8:
da:fd:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:47:42 2026 by rpki-client