Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier: ZTWbouIUGWiVEQvvZVbGqDFPONNcKHJP6kHwOgf/BV4=
Subject key identifier: 8C:14:AF:CB:A7:FA:2B:8A:5E:43:10:66:40:97:34:17:28:BE:A9:3C
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial: 019D265F936965D8D289BE9144985ABDEB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number: 0DB7
Signing time: Wed 25 Mar 2026 19:01:30 +0000
Manifest this update: Wed 25 Mar 2026 19:01:30 +0000
Manifest next update: Thu 26 Mar 2026 19:01:30 +0000
Files and hashes: 1: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: 68VioftO/9sss3Elxjkkn2H8CCULzZHNEFhcV6jtypI=)
2: L81FjA0HBR4C3VRXIdzV9aijlDs.roa (hash: l6by3JK81dcZtTI2EAV3D8+hWiL6wJ47qGTRoCR1Fpc=)
3: Tb3ZP8jCF88QUUjfET9_-Hcpu9M.roa (hash: iQIVqlpU95wZ1Y2M7mnw2rHSBBZvM/n/nZYpuMemFV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:93:69:65:d8:d2:89:be:91:44:98:5a:bd:eb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Validity
Not Before: Mar 25 19:01:30 2026 GMT
Not After : Mar 26 19:01:30 2026 GMT
Subject: CN=8c14afcba7fa2b8a5e4310664097341728bea93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e7:20:fc:df:80:99:2c:07:da:81:61:01:48:
b6:f5:74:00:7c:f6:be:5c:cf:07:c4:78:92:7b:18:
f8:51:7b:f7:4d:58:c3:7a:ea:f6:4a:2b:32:4f:98:
80:c1:54:ab:00:e6:b5:2a:c2:fb:8e:c2:df:72:5e:
3a:e5:c1:b8:0b:20:3c:d4:56:6e:2d:ab:1c:76:db:
6a:1a:f4:71:79:01:93:13:e2:76:35:01:3a:a5:ec:
74:bb:fa:21:cd:14:b5:7d:e7:7c:11:9c:70:14:57:
42:c0:a3:35:91:1a:88:c7:02:ae:35:1f:a7:80:5c:
16:41:98:49:f1:ef:69:37:0b:88:19:dd:07:a6:a7:
1d:35:db:0f:53:40:eb:ef:3b:e8:d3:b0:ac:1d:63:
7d:3d:17:67:55:41:0c:a7:26:64:61:20:db:62:a1:
17:9c:09:c4:9d:e5:49:ca:8e:e4:60:29:20:fc:35:
b4:7e:6c:db:32:7e:fd:5c:bd:0e:3d:8a:14:d1:09:
dc:a5:41:c7:99:56:47:07:d7:02:cd:35:38:df:69:
fe:1f:4b:98:fe:ab:9b:f1:eb:5c:63:6f:c4:7a:a9:
ee:71:40:8d:e4:66:e6:d1:05:4d:12:19:84:95:fc:
7c:79:d0:76:e7:5f:1d:c9:1d:42:73:ab:02:61:75:
1a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:14:AF:CB:A7:FA:2B:8A:5E:43:10:66:40:97:34:17:28:BE:A9:3C
X509v3 Authority Key Identifier:
keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4d:e4:ed:0e:48:58:58:55:da:f0:38:70:03:84:d5:cc:9b:
74:0d:f0:f8:8a:87:59:16:cb:3b:1f:f1:3c:46:e7:cb:bd:fb:
c5:80:a4:4e:62:f5:5a:04:ff:63:7f:f2:0d:70:c6:8b:a7:f9:
8a:66:eb:31:43:47:e0:db:c1:5a:2b:ec:33:9b:e0:97:6b:02:
4d:f7:3e:2a:30:19:db:87:ef:72:74:f9:c5:59:65:47:5f:0a:
24:dd:80:c7:2f:0a:de:24:8d:28:33:16:71:e8:0d:d6:0b:37:
c4:89:74:39:dc:46:60:38:5f:e6:74:ac:5c:df:da:eb:28:9d:
3a:88:d3:36:44:ea:96:52:7e:16:77:a0:26:73:b4:34:76:6e:
f2:ff:bb:b7:3b:42:af:c3:82:b7:cb:d0:0c:3c:18:d6:3e:f4:
6a:e4:26:27:af:d5:44:34:07:c6:00:ac:47:d8:30:d8:c3:45:
4e:d3:ba:d3:28:c6:64:50:57:f9:af:27:bc:c6:d5:98:74:85:
c1:37:02:c8:18:d4:4c:31:5f:a7:20:09:d4:ae:2f:79:f2:6b:
1c:79:bf:7a:c6:b6:b3:7b:29:63:51:17:a5:b8:24:1d:b4:24:
2c:f7:9d:09:17:f3:ec:04:4c:e6:15:dd:e4:71:35:a9:c2:8d:
fa:6d:4f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:41 2026 by rpki-client