
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
File: AclpL7GkCf800a87grjj2mRnXDI.mft (raw, json)
Hash identifier: vewD8Y/4AQhbP0QoV0jBN9u/uaZutC4aHMTymfSgvGI=
Subject key identifier: 7D:98:87:35:81:F1:58:92:6E:AF:07:9D:29:D3:9F:3B:22:55:11:F3
Authority key identifier: 01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
Certificate issuer: /CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Certificate serial: 01A0D72821260A14FAAA1490784939ACB157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
Manifest number: 0FE4
Signing time: Fri 25 Sep 2026 06:02:06 +0000
Manifest this update: Fri 25 Sep 2026 06:02:06 +0000
Manifest next update: Sat 26 Sep 2026 06:02:06 +0000
Files and hashes: 1: AclpL7GkCf800a87grjj2mRnXDI.crl (hash: zd5OT+OVZx+n51wgW2TwxHBNt1IY2HJUE5djCqEF9Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:28:21:26:0a:14:fa:aa:14:90:78:49:39:ac:b1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c9692fb1a409ff34d1af3b82b8e3da64675c32
Validity
Not Before: Sep 25 06:02:06 2026 GMT
Not After : Sep 26 06:02:06 2026 GMT
Subject: CN=7d98873581f158926eaf079d29d39f3b225511f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7f:9d:fd:28:e7:7e:21:dc:17:59:08:46:15:
b5:c2:c4:c6:e9:30:e9:24:38:98:12:bb:c2:25:5b:
bd:f2:ff:fb:98:19:5e:4d:c7:fb:25:be:b5:81:73:
5a:16:f8:d7:98:33:fe:8f:35:bd:eb:27:84:58:71:
b5:69:0e:59:7f:85:29:36:06:10:f1:d0:b8:ea:1c:
4e:f3:25:e4:0e:95:4b:a3:8b:77:c7:15:af:b5:6a:
62:62:ad:e8:39:62:b0:ea:5d:1e:80:08:9b:2c:f9:
6c:b9:ab:5e:8b:c3:9e:5b:16:b9:67:a5:d0:82:84:
e2:b0:d2:fe:61:29:32:56:db:8a:12:ae:5a:f8:d8:
ca:73:f0:f7:70:e8:f4:33:9b:af:da:da:0c:18:00:
64:ad:f9:8b:6d:15:6a:8d:96:60:6f:f1:95:22:6a:
31:4b:12:de:76:6c:f3:dd:72:f8:df:80:a0:01:a8:
72:36:95:93:25:35:e4:2c:30:81:40:66:85:8a:16:
39:54:b2:dc:d0:62:e4:97:b1:43:7b:a5:70:99:33:
40:c5:d8:f4:8f:4a:99:58:33:98:9d:97:16:f6:a5:
e9:11:32:1d:47:d2:52:4a:e8:20:38:df:1c:a8:fe:
53:bb:8d:7d:ac:c2:d2:d1:5f:5e:27:2d:e0:34:a1:
9e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:98:87:35:81:F1:58:92:6E:AF:07:9D:29:D3:9F:3B:22:55:11:F3
X509v3 Authority Key Identifier:
keyid:01:C9:69:2F:B1:A4:09:FF:34:D1:AF:3B:82:B8:E3:DA:64:67:5C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AclpL7GkCf800a87grjj2mRnXDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/630fec-dd56-46ac-a038-ddb890d78fe9/1/AclpL7GkCf800a87grjj2mRnXDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:63:ed:2f:0d:6c:10:37:ba:bf:0c:f0:34:4c:f5:10:f7:56:
c0:63:f9:52:0c:13:c5:e8:3a:da:79:f5:60:ab:70:7c:92:36:
b3:2a:46:bd:3c:8c:fa:bf:e8:cc:0d:45:49:41:11:e9:c5:26:
12:08:c6:57:73:51:5d:24:69:7a:7e:4e:95:c7:96:79:8c:63:
5f:ad:07:eb:d3:98:1b:cd:87:c2:e9:2c:2d:8b:e1:78:cc:46:
26:8b:84:0c:0a:ee:a6:83:a4:e4:30:68:66:40:2c:cc:af:c1:
dd:b9:e0:0d:aa:3e:c1:a7:ac:0a:ec:cb:cb:84:23:f8:f1:b3:
06:33:d6:5a:4a:af:f6:ec:3f:b8:47:89:f0:56:95:5d:83:7e:
24:7e:6b:ed:3e:a5:22:63:d7:e9:d2:04:ee:ba:98:bb:62:e9:
a2:8f:b2:d1:f4:dc:64:be:06:93:48:35:c6:13:70:cc:dd:14:
d7:66:3b:04:82:2a:8d:e2:3e:7d:82:ab:bf:1d:31:9b:dd:ae:
6b:71:6a:62:32:02:0d:b2:9d:01:94:13:e6:57:8b:78:18:38:
be:1d:1b:03:09:1f:a8:3e:d5:20:f1:6e:8e:95:3e:d4:f8:98:
5e:6c:c1:52:0b:d0:36:75:2e:f3:45:0e:ea:5d:5d:c5:41:2c:
fb:2f:ff:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:37:24 2026 by rpki-client