Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: W+61zwy/tumlyIaQBizgNbPuU6UFaz62aJRoqN9k4xU=
Subject key identifier: 6D:D3:0E:3A:6A:31:1B:88:7E:1E:4A:60:1D:C5:11:55:3A:03:07:71
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 019F9059CCAB9920ABA9FE8641F6399BBC6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 1471
Signing time: Thu 23 Jul 2026 19:00:31 +0000
Manifest this update: Thu 23 Jul 2026 19:00:31 +0000
Manifest next update: Fri 24 Jul 2026 19:00:31 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: dJSdbZjowyt67eig98/nrQE5q3/1TZ7Q0daD7uBQZho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:cc:ab:99:20:ab:a9:fe:86:41:f6:39:9b:bc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: Jul 23 19:00:31 2026 GMT
Not After : Jul 24 19:00:31 2026 GMT
Subject: CN=6dd30e3a6a311b887e1e4a601dc511553a030771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:1f:8e:a0:9b:16:55:3c:c7:de:1c:eb:9b:
4a:31:d2:d0:93:42:95:be:9c:e9:e3:36:c0:5b:96:
41:71:b5:73:4a:57:85:81:cd:c3:fc:04:01:89:b9:
b2:b6:42:7f:66:52:32:0d:02:43:86:0d:1c:8e:e8:
87:8a:85:a7:be:0f:cb:ca:57:81:3d:69:f8:ef:02:
ca:8a:1a:2a:7b:b3:cf:2e:2b:7b:3a:ad:45:86:ea:
fd:4d:ad:27:fe:40:29:6f:76:a6:6d:58:61:9a:2f:
f8:18:b4:1d:4d:71:36:ff:61:a6:e4:50:92:38:49:
01:bb:0e:97:40:8c:9b:0f:14:b2:6b:bc:7a:1d:fc:
be:7f:ba:6e:9f:b4:98:53:c3:ce:36:4f:7e:18:2d:
27:d1:73:fe:8f:3e:0a:82:68:73:56:33:cc:f8:8a:
91:8a:10:a9:df:87:fb:4e:aa:ee:b0:a0:be:9a:a5:
2d:60:f3:39:a2:05:82:ef:22:31:cb:14:57:06:88:
a5:fc:16:4e:87:7f:fe:ba:ac:48:b9:b8:e1:61:bf:
14:59:2b:66:49:32:86:19:9a:41:3c:fb:69:b3:e8:
92:82:39:11:61:eb:6a:fc:6c:33:35:7a:de:fd:73:
44:6c:b4:7f:7a:24:5c:70:9d:a3:03:b6:11:1c:9d:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D3:0E:3A:6A:31:1B:88:7E:1E:4A:60:1D:C5:11:55:3A:03:07:71
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:47:07:bf:e3:1c:55:5a:4d:51:77:50:94:d0:97:fb:00:f0:
94:23:f2:eb:8a:9e:ef:05:c9:03:f4:be:54:a4:d6:56:f9:f6:
db:02:43:22:50:d4:96:bf:b2:7d:5b:76:10:c7:95:b3:e0:58:
b8:ea:8a:f4:cd:07:c0:50:11:61:2e:de:ad:09:e1:14:d0:fc:
15:5c:56:26:63:d5:8b:fe:ea:b9:28:d7:0a:40:65:0a:55:0f:
f4:df:fc:e0:81:47:f2:58:d6:dd:1c:51:4f:9d:8d:ff:e3:bd:
35:1e:e0:32:a2:83:db:9d:a3:75:88:1a:af:2c:7d:d1:02:32:
85:62:fe:16:9d:d6:82:31:90:e1:aa:f7:ab:3c:0f:bc:93:dc:
bd:24:28:34:2b:af:52:00:f2:fd:64:46:74:b2:d6:3c:6c:d7:
3f:9c:a0:37:f5:f7:70:50:77:dc:9b:55:3a:8e:d1:a7:26:d1:
a6:d5:12:13:0d:9a:cf:46:2f:cd:ed:b6:ce:da:2a:35:ac:35:
b5:51:75:1d:37:59:a4:f4:f8:93:6e:8d:74:9f:05:ed:06:8c:
c7:7d:41:e0:9c:00:33:77:00:b3:09:e8:41:94:40:54:96:17:
6a:32:42:39:d3:08:95:14:b3:e4:ce:f1:2d:4a:16:9e:ae:f1:
3b:8e:95:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:09 2026 by rpki-client