Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier: xfBWV8LzHAuEcDpnvfiYaP8wm8H80vCJr3vfFsbK/60=
Subject key identifier: D0:0A:A3:BE:79:3C:E9:10:22:1A:F4:A0:B5:35:F8:52:7E:6B:C1:CD
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial: 019E1D908F98B9A243FD04F63B5FE61E3F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number: 0E37
Signing time: Tue 12 May 2026 19:01:13 +0000
Manifest this update: Tue 12 May 2026 19:01:13 +0000
Manifest next update: Wed 13 May 2026 19:01:13 +0000
Files and hashes: 1: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: UKeAkuvyhaKwbba5dPVDptfsRtA7eW4pklW4fTQDRRI=)
2: L81FjA0HBR4C3VRXIdzV9aijlDs.roa (hash: l6by3JK81dcZtTI2EAV3D8+hWiL6wJ47qGTRoCR1Fpc=)
3: Tb3ZP8jCF88QUUjfET9_-Hcpu9M.roa (hash: iQIVqlpU95wZ1Y2M7mnw2rHSBBZvM/n/nZYpuMemFV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:8f:98:b9:a2:43:fd:04:f6:3b:5f:e6:1e:3f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Validity
Not Before: May 12 19:01:13 2026 GMT
Not After : May 13 19:01:13 2026 GMT
Subject: CN=d00aa3be793ce910221af4a0b535f8527e6bc1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:c6:49:dd:e5:4c:3d:a6:02:85:a8:0a:07:
3c:77:0a:63:75:0a:90:62:46:4d:75:7c:44:46:06:
79:d6:61:b0:fe:f3:07:97:f5:0b:8f:2c:24:42:17:
32:6b:bb:69:af:93:70:2d:81:5c:c9:8d:03:ef:de:
b5:22:2b:6c:e6:87:2f:d4:96:1f:00:79:62:e7:59:
8a:86:19:e9:e3:1a:41:bb:b6:5c:12:bc:9d:f1:d3:
c5:2c:95:7f:73:84:7c:08:6a:35:a5:f4:39:06:3e:
98:53:7b:5c:a0:ec:63:6c:57:1a:2d:de:60:60:2b:
9c:a8:71:ef:e0:2d:6c:b9:42:b6:e8:93:ce:16:a9:
87:1f:ec:83:ff:bd:a0:70:6e:17:06:b1:8d:37:1e:
a5:29:e2:b2:b0:3c:9d:b9:a7:65:98:25:28:1d:db:
94:25:ca:33:73:80:93:76:ed:ed:36:46:06:f7:3e:
59:99:67:99:3d:ca:2d:80:e9:f1:71:e7:45:f2:a2:
97:06:78:58:53:61:74:da:d4:95:f0:c3:26:a7:72:
eb:73:68:88:05:01:da:36:27:c6:82:c6:f9:ef:07:
33:b7:2c:dd:7e:16:42:b4:67:81:fa:68:81:0a:ac:
8e:bd:95:88:fc:b4:33:ff:e8:e8:6c:56:46:9b:b2:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0A:A3:BE:79:3C:E9:10:22:1A:F4:A0:B5:35:F8:52:7E:6B:C1:CD
X509v3 Authority Key Identifier:
keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:73:b9:c8:8e:8a:17:56:e9:03:65:68:aa:32:7b:cc:aa:5c:
a0:8c:a9:ca:a3:e2:0d:f4:f1:15:87:ca:eb:7f:2c:0c:3b:90:
a0:42:66:69:b5:51:8d:54:2f:b0:58:56:69:28:eb:72:ab:ff:
ec:cf:86:e3:a5:59:0c:da:1a:99:6b:5b:e0:b6:4f:c2:0a:6e:
cd:41:1a:ad:47:a8:e1:1a:3d:d8:a5:b1:e8:d3:ca:4c:22:18:
29:95:cd:c6:4d:ce:90:05:1c:51:b5:42:01:50:b0:a1:e9:0c:
19:d7:4a:0c:bd:8b:1d:5d:9d:ab:b5:e8:78:13:c5:91:7b:de:
76:20:7e:db:9b:0a:38:50:54:91:87:4a:c8:57:62:a2:b1:49:
4f:30:c1:ce:66:bd:7d:76:74:4e:49:b4:50:7c:b6:a4:1d:85:
b6:57:56:eb:c3:6a:1f:20:0a:fd:77:af:5f:3f:c0:c6:b0:51:
7b:1d:77:89:86:18:2c:bf:ab:b1:fd:17:57:29:90:fc:fe:12:
ae:bd:91:c6:0d:d7:00:e6:87:ba:f8:27:b3:5c:c8:fb:d5:f0:
9e:ff:fd:30:45:45:ba:bf:f4:9c:2d:aa:da:e7:6d:2c:3e:02:
b0:1f:83:d4:45:38:96:a1:36:ca:c3:3c:76:32:9c:b7:c3:b1:
d6:c0:14:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkI+YuaJD/QT2O1/mHj8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjRiMWYxMzU5MTEwYmZmOTkxZTlhYzZmNTE0NjlmZGNi
NDg3YWYwHhcNMjYwNTEyMTkwMTEzWhcNMjYwNTEzMTkwMTEzWjAzMTEwLwYDVQQD
EyhkMDBhYTNiZTc5M2NlOTEwMjIxYWY0YTBiNTM1Zjg1MjdlNmJjMWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/PGSd3lTD2mAoWoCgc8dwpjdQqQ
YkZNdXxERgZ51mGw/vMHl/ULjywkQhcya7tpr5NwLYFcyY0D7961Iits5ocv1JYf
AHli51mKhhnp4xpBu7ZcEryd8dPFLJV/c4R8CGo1pfQ5Bj6YU3tcoOxjbFcaLd5g
YCucqHHv4C1suUK26JPOFqmHH+yD/72gcG4XBrGNNx6lKeKysDyduadlmCUoHduU
Jcozc4CTdu3tNkYG9z5ZmWeZPcotgOnxcedF8qKXBnhYU2F02tSV8MMmp3Lrc2iI
BQHaNifGgsb57wcztyzdfhZCtGeB+miBCqyOvZWI/LQz/+jobFZGm7LzPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAKo755POkQIhr0oLU1+FJ+a8HNMB8GA1UdIwQY
MBaAFAAksfE1kRC/+ZHprG9RRp/ctIevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUt
MmRhNjI1ZWI3MjQyLzEvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUtMmRhNjI1ZWI3MjQy
LzEvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnO5yI6K
F1bpA2VoqjJ7zKpcoIypyqPiDfTxFYfK638sDDuQoEJmabVRjVQvsFhWaSjrcqv/
7M+G46VZDNoamWtb4LZPwgpuzUEarUeo4Ro92KWx6NPKTCIYKZXNxk3OkAUcUbVC
AVCwoekMGddKDL2LHV2dq7XoeBPFkXvediB+25sKOFBUkYdKyFdiorFJTzDBzma9
fXZ0Tkm0UHy2pB2FtldW68NqHyAK/XevXz/AxrBRex13iYYYLL+rsf0XVymQ/P4S
rr2Rxg3XAOaHuvgns1zI+9Xwnv/9MEVFur/0nC2q2udtLD4CsB+D1EU4lqE2ysM8
djKct8Ox1sAUzg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:22:47 2026 by rpki-client