Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier: lrJFc6fz8dxgjrLCWzXjw6VmNO0oQjrugKZ+uzbtFKs=
Subject key identifier: 9B:E7:B2:E8:D9:60:AC:86:44:E0:E1:23:66:8F:24:DF:CD:42:2B:94
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 019D27041FAB5D796282FA05E040209A0908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number: 18B4
Signing time: Wed 25 Mar 2026 22:01:14 +0000
Manifest this update: Wed 25 Mar 2026 22:01:14 +0000
Manifest next update: Thu 26 Mar 2026 22:01:14 +0000
Files and hashes: 1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: 3Hj75+RV6mwEx6f37/+awD0VesetpFAV5QqbJkGF1UE=)
2: ov_yPvQnjCBOxMDQ0fxhQYRGf24.roa (hash: 87TB6uHBD00xhJxzxPfF6P3fX0oGRc/an9mxW40Dcho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:1f:ab:5d:79:62:82:fa:05:e0:40:20:9a:09:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Mar 25 22:01:14 2026 GMT
Not After : Mar 26 22:01:14 2026 GMT
Subject: CN=9be7b2e8d960ac8644e0e123668f24dfcd422b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:fe:ba:69:c4:84:a3:69:01:5f:c5:9c:01:
5b:25:e9:da:3c:96:76:18:3e:e7:67:33:f1:f1:5b:
47:83:78:b3:e5:48:a9:0d:ff:a7:62:e4:8a:fb:4f:
fc:61:c6:5b:d9:25:3f:1e:e2:88:f1:91:12:a8:c0:
9e:a3:1a:e8:ad:78:71:b9:7b:1a:8f:1b:ed:16:97:
a0:41:57:30:38:7c:dc:84:eb:4b:4a:52:f8:bf:8a:
df:a4:2d:6a:13:a0:af:5c:c6:8a:71:2c:16:70:a6:
8b:fb:50:ee:a6:c7:d5:cf:48:fb:0a:ea:dc:cc:c2:
bf:1a:39:ea:f8:b3:e4:d7:37:dd:48:2e:1e:e2:c9:
ef:01:1d:34:11:bd:8f:a1:c9:7f:14:94:59:8d:c9:
2d:e1:27:23:9b:a7:7e:bd:5c:e3:d7:d1:44:41:f3:
59:de:c0:a1:43:8a:5d:67:17:a4:45:50:d1:78:90:
9d:25:31:3d:fd:9e:4c:6f:7d:dd:9c:31:fe:72:89:
7a:7b:0d:2c:6a:42:3c:b7:1a:b4:65:5d:93:f3:42:
b3:8d:8e:70:68:4e:39:7e:37:4b:c7:79:69:af:61:
4e:ae:49:8f:bb:e1:53:0c:ef:93:95:0a:59:ed:3e:
f9:85:c7:70:6b:b4:a0:96:85:58:5d:cc:05:e1:2b:
23:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E7:B2:E8:D9:60:AC:86:44:E0:E1:23:66:8F:24:DF:CD:42:2B:94
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fc:41:6d:a5:75:f1:9c:16:b1:14:eb:88:34:69:34:a5:5f:
02:bf:10:24:17:11:31:aa:d7:11:84:8b:12:c5:14:43:62:12:
7e:87:d3:07:33:9f:83:bd:4f:2d:2d:bf:22:30:15:97:85:de:
72:55:59:50:02:38:ab:0b:68:81:ba:55:ec:8a:21:a4:6c:a5:
11:2b:ef:44:2e:fe:bd:34:ed:87:a9:71:e3:c3:11:9e:a0:5d:
7f:95:00:d2:3e:45:04:2c:1f:a5:10:0c:7b:89:ae:1c:1e:dc:
ef:bb:6b:43:30:f4:d4:53:e4:2a:f0:12:de:c1:10:fb:80:45:
d5:68:6e:b2:3b:17:e0:68:82:2e:4d:d0:56:a0:36:cb:98:11:
0e:99:ca:73:e0:1b:b5:ae:c0:05:c0:83:64:da:50:06:f9:d3:
8a:e0:72:0e:e5:93:72:f6:7a:06:ac:8a:bd:2c:17:21:e2:0b:
88:cf:54:c2:1c:9e:e1:9e:d0:33:23:5d:85:09:ae:c4:a6:b3:
9d:c5:78:29:27:3f:09:36:ca:4f:92:59:0f:13:d5:c6:c9:92:
ce:f7:5c:90:5e:05:50:3f:69:82:d6:db:c6:9c:30:e5:51:d7:
69:2b:4b:fe:00:e2:6f:de:b2:37:e1:95:3f:5e:a6:ba:2c:ed:
b6:9b:ca:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:54 2026 by rpki-client