
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: S1c2V737nzjgFgeIYhP8pupgDVsi7O9z56ffww/VtHw=
Subject key identifier: 69:60:1E:3C:11:65:D0:80:CD:DE:A8:DA:62:73:19:2E:EC:44:A7:17
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 019E1D9046258C6874AA9C582E441BC94391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 13B1
Signing time: Tue 12 May 2026 19:00:54 +0000
Manifest this update: Tue 12 May 2026 19:00:54 +0000
Manifest next update: Wed 13 May 2026 19:00:54 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: i6UwVWqPBQvmlpPuaLuAc+MxKot+GD4hYdvN+6AP4yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:46:25:8c:68:74:aa:9c:58:2e:44:1b:c9:43:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: May 12 19:00:54 2026 GMT
Not After : May 13 19:00:54 2026 GMT
Subject: CN=69601e3c1165d080cddea8da6273192eec44a717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:ed:86:ee:8a:bd:a9:10:73:92:58:d3:bf:
b1:10:a0:0e:2e:d6:08:eb:c2:89:61:fa:8e:3a:75:
89:5a:cd:bc:36:94:01:e6:ec:58:55:6f:d9:7a:50:
c2:f2:4d:80:7a:7f:76:ed:11:35:eb:0f:5a:40:6d:
eb:c0:f7:8f:0d:2c:8b:97:c4:b3:60:1a:d2:6d:ab:
22:03:b4:82:d0:2a:e8:52:9a:b4:7b:4a:48:f5:da:
81:f7:f8:7d:47:3a:64:c7:81:24:87:1f:1c:2e:f2:
2b:72:43:37:ae:21:69:8c:4f:77:76:bd:e0:31:b5:
7d:6a:33:11:a4:5b:4c:78:4c:73:53:48:c9:94:e3:
7e:48:f3:ee:67:45:26:42:c9:4e:18:c8:e5:8a:33:
be:e9:1b:4d:2e:23:c2:fa:9f:52:40:31:f3:5d:30:
3c:5c:64:a1:13:41:b5:31:38:cb:57:95:90:37:ff:
9d:0c:d6:2d:7c:3a:c7:54:17:49:fe:e5:e8:6c:f7:
c5:d0:af:dc:f2:6c:b1:f2:22:2f:74:ac:e8:cd:70:
e7:57:c3:51:bd:25:ec:6f:2d:da:47:c2:5d:ea:dc:
a1:c7:b0:bd:b5:47:00:35:24:0e:b7:12:7d:34:bd:
50:29:c1:e2:91:d3:9b:a2:8a:1f:3a:f9:61:71:ba:
a7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:60:1E:3C:11:65:D0:80:CD:DE:A8:DA:62:73:19:2E:EC:44:A7:17
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8d:94:93:4b:90:c6:7d:df:4d:be:79:0a:ee:90:a9:24:fa:
82:29:45:d2:ca:b9:ab:07:07:ef:e0:38:37:5c:7c:be:e7:e8:
31:c9:d8:30:fd:86:0f:2f:f5:f8:3e:c4:7a:b7:eb:35:8d:93:
f3:cb:fa:b3:44:da:af:cd:c9:93:42:13:84:a3:c4:23:28:73:
e7:54:7c:59:ae:87:a1:10:c4:d5:9a:66:40:91:a2:e8:ed:91:
3a:a0:cf:ff:e1:c8:96:b1:70:62:5e:7a:1c:76:41:53:3a:5a:
87:ee:da:2c:69:c0:a9:d2:83:07:9e:75:d3:12:16:f1:da:b0:
15:83:80:a3:95:95:61:97:d9:44:65:31:68:81:1f:dc:4c:cb:
67:32:3a:10:1d:45:70:f2:12:5a:60:22:06:47:80:f8:9e:7b:
fd:26:e4:72:3a:28:e9:22:f4:e6:bc:3c:2d:50:da:95:36:e8:
b4:00:65:6e:92:c4:ad:76:8e:fe:f2:b4:dd:9c:b5:a9:4c:b0:
7c:4c:d8:89:6e:12:1c:c6:45:56:36:c8:0a:71:02:c7:cc:b2:
78:50:77:ed:ac:b4:42:04:28:50:81:79:11:a6:f2:b8:05:88:
f3:e4:98:96:bd:56:3f:70:b3:ce:57:d2:e3:5e:b6:6b:be:0c:
e0:b2:69:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:55 2026 by rpki-client