Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: jC8Io+pLzAmyt5EL8QrWv2xW7y1Nxk2Fp5oHefHj1Z0=
Subject key identifier: B7:8E:BC:0A:AB:5E:C9:EC:46:ED:20:D4:8C:44:3E:F0:68:8C:36:52
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 01A1D980BA6AEC78E64ABD8D6C58A33C81A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 15A0
Signing time: Sat 14 Nov 2026 10:00:54 +0000
Manifest this update: Sat 14 Nov 2026 10:00:54 +0000
Manifest next update: Sun 15 Nov 2026 10:00:54 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: eqjIGEUP0dR6W5IVmZl5YcOTY0KJx1Syydrxm00DXdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:80:ba:6a:ec:78:e6:4a:bd:8d:6c:58:a3:3c:81:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: Nov 14 10:00:54 2026 GMT
Not After : Nov 15 10:00:54 2026 GMT
Subject: CN=b78ebc0aab5ec9ec46ed20d48c443ef0688c3652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e5:6a:b0:b4:20:af:0f:6b:bb:9d:6c:8e:3e:
b1:a5:df:91:70:08:7c:54:af:71:18:5d:0e:42:ac:
17:65:20:fe:9f:47:85:d9:1e:b1:d0:0e:5d:a0:e0:
04:10:32:50:d0:39:20:da:f5:1e:ef:35:44:2a:61:
80:bb:eb:9c:e1:ad:b5:95:81:1b:ac:6d:5f:44:52:
e8:b2:d3:9c:1e:5f:98:66:22:2f:7a:3e:2b:fa:39:
87:b7:da:9f:92:60:55:92:31:8c:88:f8:0f:42:36:
50:f8:e3:6a:b8:8f:f8:d9:91:be:e3:04:3b:87:1d:
24:62:38:1b:a1:f0:92:46:a3:40:e3:b9:37:3a:ab:
eb:3f:57:9b:b3:af:9f:ad:f7:29:00:77:59:f9:76:
df:0e:08:5f:c4:92:a1:37:2f:43:0b:08:5d:cc:0d:
bc:2b:e5:ea:d0:45:77:37:a5:90:ee:75:3d:99:d7:
96:6c:5d:bb:ad:f0:1c:1e:29:de:e4:a1:23:66:e5:
6a:3a:9a:5a:54:b8:ca:d1:fe:1e:8a:75:b8:df:9a:
a9:70:a9:20:14:bf:eb:35:f9:21:73:40:3f:00:46:
86:3a:1c:ab:6c:a2:c7:9e:45:26:17:01:29:5c:ff:
a1:6b:c1:9e:0a:fa:28:ef:9a:ca:b2:14:34:3d:e6:
d1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8E:BC:0A:AB:5E:C9:EC:46:ED:20:D4:8C:44:3E:F0:68:8C:36:52
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:da:38:2e:f0:62:83:7e:e7:25:7c:55:3c:55:8d:ab:48:09:
18:d2:d9:94:8e:27:b9:9c:7b:97:b4:29:be:70:00:d6:bf:8c:
80:2a:1a:1d:44:d0:b1:c7:56:e3:45:d0:2f:80:41:cd:17:45:
0f:d5:9e:ac:88:f6:10:7a:e6:00:03:1b:f7:a8:0b:5d:b1:e8:
a6:37:89:f3:34:34:66:73:b6:ed:e5:d4:12:a3:71:bf:42:09:
01:72:b2:a3:fb:b9:b5:5f:63:b7:7b:c0:5c:c1:d9:af:98:d8:
73:0a:ca:74:b5:c3:ac:88:46:22:9c:95:06:75:8b:79:12:7a:
d3:e7:54:05:36:2a:f8:0d:6b:3c:89:f9:18:99:8b:3d:49:17:
dd:f2:34:a7:3c:f1:32:4d:e1:c9:b5:e6:2a:df:1f:ff:84:a4:
ed:2f:9e:55:06:9f:bd:99:25:e9:b0:fb:ce:e1:3e:1a:eb:bb:
84:8c:25:a2:62:43:71:fd:cb:e5:37:64:ba:ca:61:da:8e:d8:
d9:06:5d:4e:67:2d:e8:0a:12:9d:ab:af:a9:e4:2d:b3:6e:3c:
79:52:9b:a4:52:b1:48:05:a3:e3:6e:f7:ba:8a:49:4a:a8:fa:
3a:5e:56:e3:8c:29:b4:d3:d2:14:31:06:40:25:4e:40:10:7c:
cc:56:24:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:15 2026 by rpki-client