Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
File: AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json)
Hash identifier: fMqZyfedzVKXGAvCf8llH6sVE6T63oDI3CkgESzISx8=
Subject key identifier: 8E:B5:60:39:54:8D:3B:62:47:44:F9:0E:5E:8C:1B:D6:45:0A:46:53
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Certificate issuer: /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial: 019D2B4F05C0229A9EC6771FF378C53525BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
Manifest number: 1859
Signing time: Thu 26 Mar 2026 18:01:32 +0000
Manifest this update: Thu 26 Mar 2026 18:01:32 +0000
Manifest next update: Fri 27 Mar 2026 18:01:32 +0000
Files and hashes: 1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: ZWwUIGqRw0mHz5gaA2RQx5oKEnW3YtVZcumD1/r1C9A=)
2: qT2NrCiJquJtfq_3e7nF2gYWJ5s.roa (hash: eAGHZA4lhxkkeWMCuFkx9WVGsrMFd32m7CFLgSd01WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4f:05:c0:22:9a:9e:c6:77:1f:f3:78:c5:35:25:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Validity
Not Before: Mar 26 18:01:32 2026 GMT
Not After : Mar 27 18:01:32 2026 GMT
Subject: CN=8eb56039548d3b624744f90e5e8c1bd6450a4653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:95:bb:65:de:32:92:e2:f5:de:e3:07:2e:
78:e1:19:da:f3:44:14:46:86:da:b2:54:0e:e0:fa:
a5:2c:a6:b3:0d:40:12:e4:d1:f4:c2:35:c6:53:1e:
80:df:dc:d1:5e:a5:3b:35:99:e5:cc:e7:d5:7a:d2:
2f:25:91:9c:8e:a5:1a:a9:ec:64:de:3c:3a:43:53:
ba:bf:33:8a:b9:73:20:2a:f7:0a:b8:37:b7:cf:c6:
b8:e2:bd:b9:6c:6a:29:a9:ff:7a:88:ee:9f:ad:fc:
27:41:6b:f6:1b:f6:b7:9c:66:e0:a3:35:04:00:60:
e5:3f:5a:d9:d1:b1:1f:c6:d9:c5:b3:66:a4:e8:82:
f5:ec:03:c5:e0:9b:0a:45:e7:77:88:f8:4b:98:f8:
94:41:7d:20:af:de:98:d9:0e:04:5a:22:2f:1f:86:
b1:3c:b1:43:c7:d9:40:59:43:a2:7b:19:f9:15:82:
21:84:f7:4d:72:d0:ed:78:60:72:48:f2:5d:a2:55:
15:18:4c:08:f8:36:13:cc:92:9e:15:85:ff:8b:1f:
ab:e7:8a:4e:f3:aa:55:45:55:6d:9c:fb:47:f6:b6:
96:f7:b0:7f:7a:2e:05:32:b7:82:ed:77:00:5b:82:
bf:fe:5e:96:2c:e9:d9:33:3a:31:b8:ac:cf:83:42:
d9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B5:60:39:54:8D:3B:62:47:44:F9:0E:5E:8C:1B:D6:45:0A:46:53
X509v3 Authority Key Identifier:
keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4a:43:3c:d9:86:bc:1b:e1:13:17:61:0c:7b:5f:e8:92:2e:
32:5a:cf:ac:5c:88:1c:d9:c8:71:57:58:72:49:9b:fe:2b:bb:
e1:32:72:72:4f:34:60:e4:38:fb:06:82:31:26:f8:57:4a:4b:
a7:70:bd:56:af:12:34:9e:4d:e3:79:82:86:6b:ff:e3:03:4c:
58:8b:31:ff:bc:00:f1:d1:d5:ce:25:d7:b6:19:8d:30:e1:e9:
fb:9f:b7:a7:bd:6c:60:05:c6:e9:99:ba:04:51:ba:9a:01:14:
bb:57:d8:26:5a:8b:fc:6a:55:8a:84:f9:fa:a5:bf:d2:62:ab:
8e:0f:5c:74:dc:35:c4:1a:38:c3:fc:8d:ea:5c:56:e2:1a:5f:
fa:2c:d1:3e:61:bd:a4:73:da:e3:70:dc:9a:78:aa:ca:ee:af:
ba:42:44:0a:70:7d:af:65:a2:14:10:2c:d7:7c:28:c8:77:3a:
0c:15:bc:1d:00:d3:62:60:3e:7a:16:0c:60:80:83:80:32:ed:
7f:a9:9b:9f:d9:bb:d6:bb:29:4d:ee:42:23:46:73:e2:d3:a3:
2a:bd:27:d1:65:9e:e9:f8:8a:9f:be:22:7a:97:05:34:a5:f4:
1d:6e:6e:3f:55:a3:42:a8:8b:b0:79:36:7f:66:7e:f4:fc:7a:
14:0d:d3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:13:52 2026 by rpki-client