Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: gXqW5rMzMyThutdjGZ1Ni9g9CdhgOGZXa7ry700M4dQ=
Subject key identifier: 3B:71:B3:40:A6:2C:43:16:22:C6:55:8C:4E:49:0E:E4:C8:64:76:9A
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 019D265FC20BE8A2EAA543438F8B1B91AF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 1331
Signing time: Wed 25 Mar 2026 19:01:42 +0000
Manifest this update: Wed 25 Mar 2026 19:01:42 +0000
Manifest next update: Thu 26 Mar 2026 19:01:42 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: 8VUeI4u6Xh3T89clzYJVgJb0F70JM1ywnU+goTPDp0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c2:0b:e8:a2:ea:a5:43:43:8f:8b:1b:91:af:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: Mar 25 19:01:42 2026 GMT
Not After : Mar 26 19:01:42 2026 GMT
Subject: CN=3b71b340a62c431622c6558c4e490ee4c864769a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:e4:32:7e:97:9b:63:e2:bf:8d:31:6f:a9:
b9:70:38:7f:7d:cc:c2:e4:16:0f:dd:fc:5b:de:e0:
a0:99:fa:d4:3e:09:93:bc:e9:b3:e0:eb:2f:2c:db:
52:01:bd:ca:db:5b:ed:95:fd:d0:f4:c6:00:7d:74:
de:b7:06:8b:e5:20:72:c8:a7:6d:4e:2a:4c:ad:30:
45:82:62:fb:bd:f0:4b:db:32:c3:9a:61:94:06:58:
e3:2c:73:23:ab:f4:de:52:c6:46:81:49:8d:26:e6:
b9:d3:7e:81:7e:54:61:df:98:0e:0a:b4:66:1a:c7:
6d:78:ae:61:31:c0:21:9d:6e:53:30:08:f3:1d:ab:
a8:03:b3:97:82:ec:d7:b6:38:54:9d:cd:6a:90:45:
e6:1f:88:6f:00:7a:15:f6:12:73:20:4d:61:b6:11:
de:1a:5d:ca:89:1e:65:c2:68:63:19:f0:c0:bd:e4:
7a:97:29:42:41:6a:b9:28:d3:91:62:49:aa:33:e6:
ab:23:da:bf:56:8e:c8:51:08:1f:19:58:20:01:94:
c3:76:4c:29:c1:fc:ed:8e:0b:d1:87:12:1f:bb:24:
db:09:40:20:23:72:fc:38:28:d6:71:bb:f9:bc:3e:
2f:58:a2:48:6d:b8:d9:2c:6c:53:5c:2c:0d:e9:74:
a5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:71:B3:40:A6:2C:43:16:22:C6:55:8C:4E:49:0E:E4:C8:64:76:9A
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:df:c9:2a:9a:e1:84:d1:7d:65:f5:bf:d1:7e:b7:dd:fa:40:
af:9a:c8:d0:36:d5:55:8f:7d:b6:56:83:3f:49:63:e1:6e:dd:
27:f2:47:38:a0:b4:65:12:a8:c9:f1:55:2c:22:a1:1c:ad:cf:
d9:30:8a:21:87:77:d8:cd:9f:03:45:9b:2f:94:a7:cf:d5:04:
2c:e1:a2:83:ab:d2:bf:9b:47:be:b9:b0:0c:25:66:78:fe:c1:
db:e1:3f:95:db:9f:bb:7b:ff:85:df:ef:41:93:e8:cb:e2:ab:
2a:d3:8d:ff:0b:8c:4b:de:0d:56:38:3e:bd:7e:bc:42:99:98:
d1:5b:54:c6:f1:ff:f5:35:9d:53:8d:40:2a:39:3c:35:ee:58:
a5:ef:71:03:14:dd:c2:fe:ca:34:33:22:7d:fc:a2:fa:b3:e3:
ab:e8:04:33:61:29:54:7d:c1:2a:2e:05:01:f8:9e:5f:ca:f4:
73:6f:e3:ce:ad:6b:02:9a:20:7f:e0:35:02:84:22:a6:a0:91:
22:dc:4b:2b:49:13:81:26:4f:b8:86:e6:9c:62:11:5a:e1:8e:
88:98:8e:a4:d2:c5:89:ca:f3:62:21:5e:f1:df:e8:8d:b6:15:
bf:5f:6e:c7:21:c0:ba:4c:7e:1d:00:9c:e3:6e:3b:c0:67:99:
35:ed:47:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX8IL6KLqpUNDj4sbka+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMmFkZTY0YTNkMmJkYmU4ZjdjZTgzNjEwZDJlN2M2NWZi
MzNlYWQwHhcNMjYwMzI1MTkwMTQyWhcNMjYwMzI2MTkwMTQyWjAzMTEwLwYDVQQD
EygzYjcxYjM0MGE2MmM0MzE2MjJjNjU1OGM0ZTQ5MGVlNGM4NjQ3NjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse3kMn6Xm2Piv40xb6m5cDh/fczC
5BYP3fxb3uCgmfrUPgmTvOmz4OsvLNtSAb3K21vtlf3Q9MYAfXTetwaL5SByyKdt
TipMrTBFgmL7vfBL2zLDmmGUBljjLHMjq/TeUsZGgUmNJua5036BflRh35gOCrRm
GsdteK5hMcAhnW5TMAjzHauoA7OXguzXtjhUnc1qkEXmH4hvAHoV9hJzIE1hthHe
Gl3KiR5lwmhjGfDAveR6lylCQWq5KNORYkmqM+arI9q/Vo7IUQgfGVggAZTDdkwp
wfztjgvRhxIfuyTbCUAgI3L8OCjWcbv5vD4vWKJIbbjZLGxTXCwN6XSlVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtxs0CmLEMWIsZVjE5JDuTIZHaaMB8GA1UdIwQY
MBaAFAAq3mSj0r2+j3zoNhDS58Zfsz6tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNyZVpLUFN2YjZQZk9nMkVOTG54bC16UHEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84NjEzNGEtZWU0ZC00NjM3LWE0ZDQt
YzU3Y2Y4ZjFjZDU0LzEvQUNyZVpLUFN2YjZQZk9nMkVOTG54bC16UHEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS84NjEzNGEtZWU0ZC00NjM3LWE0ZDQtYzU3Y2Y4ZjFjZDU0
LzEvQUNyZVpLUFN2YjZQZk9nMkVOTG54bC16UHEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQt/JKprh
hNF9ZfW/0X633fpAr5rI0DbVVY99tlaDP0lj4W7dJ/JHOKC0ZRKoyfFVLCKhHK3P
2TCKIYd32M2fA0WbL5Snz9UELOGig6vSv5tHvrmwDCVmeP7B2+E/ldufu3v/hd/v
QZPoy+KrKtON/wuMS94NVjg+vX68QpmY0VtUxvH/9TWdU41AKjk8Ne5Ype9xAxTd
wv7KNDMiffyi+rPjq+gEM2EpVH3BKi4FAfieX8r0c2/jzq1rApogf+A1AoQipqCR
ItxLK0kTgSZPuIbmnGIRWuGOiJiOpNLFicrzYiFe8d/ojbYVv19uxyHAukx+HQCc
4247wGeZNe1HZg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:50 2026 by rpki-client