Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: uXT0LMn0JDT9rjFhWQ80W0pHtvgYHz7uycS/O7+ru0k=
Subject key identifier: 08:B2:67:08:0B:E0:07:9A:92:3B:45:0D:53:28:EF:C8:8B:FF:BB:4B
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 01A0CD11078D1D8D6ACD149F3A74D96ADA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 1515
Signing time: Wed 23 Sep 2026 07:00:40 +0000
Manifest this update: Wed 23 Sep 2026 07:00:40 +0000
Manifest next update: Thu 24 Sep 2026 07:00:40 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: e1exNGV/w1VWsnyIalby1EkZL2tEKxGu7M2+ToeUQeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:07:8d:1d:8d:6a:cd:14:9f:3a:74:d9:6a:da:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: Sep 23 07:00:40 2026 GMT
Not After : Sep 24 07:00:40 2026 GMT
Subject: CN=08b267080be0079a923b450d5328efc88bffbb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:2d:22:79:0f:7f:f2:47:fb:15:c5:64:f1:
71:c7:32:25:8f:cf:18:e5:5d:c7:4c:1e:e7:51:67:
5f:d0:62:dc:d1:68:cc:2c:92:c8:3d:68:c0:cb:6d:
15:b1:e6:86:e0:26:80:c8:fa:a0:e6:df:ed:80:34:
a4:d6:e9:91:7b:3f:ee:bf:cb:e2:a6:0e:93:ee:6c:
2a:26:51:d5:c4:69:85:52:f9:5f:71:18:7b:26:64:
e2:d3:fc:95:a1:c9:58:75:d0:0d:db:3e:39:a6:94:
fc:1c:55:80:93:b4:71:b4:d9:1b:9d:55:7e:af:96:
4f:81:5a:09:f0:80:b8:3a:49:86:7f:fd:57:34:45:
fa:85:d2:b1:d8:ca:af:9e:83:4c:b4:d5:e7:dc:10:
62:00:15:68:d4:c7:a3:ea:87:02:ed:a5:3d:b7:71:
d6:0e:4e:f6:ee:54:a6:9f:bb:3f:9a:72:b6:2a:7a:
e5:b9:e2:7f:22:28:e3:fd:16:bc:5e:32:18:18:ef:
e0:29:6a:4c:d5:78:76:7f:85:cf:b6:8b:c8:f0:e9:
e0:86:ba:52:7b:76:cb:58:86:e6:24:bd:84:ab:a2:
ad:dd:93:3d:f3:aa:ba:8c:af:3e:3a:17:61:a1:8d:
a5:96:60:4f:79:56:55:f1:cd:0b:cd:07:34:86:3a:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B2:67:08:0B:E0:07:9A:92:3B:45:0D:53:28:EF:C8:8B:FF:BB:4B
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:b3:41:aa:bc:32:79:2b:7d:d3:52:e6:87:3f:72:d7:54:8d:
e2:a8:78:28:d0:db:bb:12:98:95:9a:8a:86:02:75:8a:ea:3b:
e2:fb:ec:ca:83:c6:86:4a:df:f1:a5:88:74:b4:ef:a6:f9:4b:
90:bd:e3:7d:7d:64:ee:09:ba:36:75:00:76:81:e2:5e:1e:44:
0f:df:fb:78:e5:3e:ad:2e:88:13:1c:ca:b7:db:7e:82:f6:52:
f3:8f:94:48:8a:0b:18:15:3b:be:27:20:cb:a7:05:6d:9d:e4:
5b:c3:c1:7f:d0:bc:4c:98:7d:41:81:61:cb:d1:44:60:2a:06:
23:1c:ea:04:27:bb:bb:20:49:92:9d:63:bb:ae:f0:88:eb:23:
54:d3:55:e0:a7:2e:ff:e9:b5:0f:08:08:20:14:6d:70:4c:1c:
77:0d:e3:9e:99:31:41:41:ca:e5:af:22:14:42:23:e4:00:60:
36:ab:99:ce:82:e9:95:ed:95:8b:09:ef:f5:45:0a:ab:fc:4d:
c3:db:4d:f1:77:10:f6:78:1a:e3:89:e7:4e:f1:21:a2:92:f0:
86:ce:05:18:f6:58:b9:ec:a5:58:79:4d:4c:5d:be:0e:16:88:
e8:51:4c:3e:19:e9:e7:11:0d:25:83:0f:5f:04:c5:d5:2e:0c:
a4:46:5a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:27:46 2026 by rpki-client