Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
File: AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json)
Hash identifier: aDc+mg8VuN3h7bY+MM/DvCtYaY2IoUuxDd/xJtMoPy4=
Subject key identifier: 11:65:47:A8:FB:FA:83:6A:28:F5:F2:8D:AA:52:F5:EC:7C:A3:38:ED
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Certificate issuer: /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial: 01A111BC2249FC65A7C64836850CC838DBDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
Manifest number: 1A5E
Signing time: Tue 06 Oct 2026 15:01:44 +0000
Manifest this update: Tue 06 Oct 2026 15:01:44 +0000
Manifest next update: Wed 07 Oct 2026 15:01:44 +0000
Files and hashes: 1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: bXCmJ+Igi6ZJ/d0mLquEJR8oO845C/RJVVwhe+wyY9Y=)
2: qT2NrCiJquJtfq_3e7nF2gYWJ5s.roa (hash: eAGHZA4lhxkkeWMCuFkx9WVGsrMFd32m7CFLgSd01WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:bc:22:49:fc:65:a7:c6:48:36:85:0c:c8:38:db:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Validity
Not Before: Oct 6 15:01:44 2026 GMT
Not After : Oct 7 15:01:44 2026 GMT
Subject: CN=116547a8fbfa836a28f5f28daa52f5ec7ca338ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:19:67:f8:df:e2:07:b4:36:38:4c:4b:07:
6b:41:db:c8:c3:4c:9f:dd:3e:c2:d7:07:e0:02:c0:
b2:d4:30:e6:47:5d:f8:04:fc:8e:a3:a7:d0:50:88:
51:ad:81:f3:6a:fb:92:ce:10:ea:af:bd:ad:e0:8d:
4a:ab:c8:13:d6:35:81:12:17:0d:e4:25:6d:d7:06:
64:65:ac:57:e3:45:84:19:84:b3:cc:f9:fc:ec:ed:
0c:bb:c8:66:c1:13:9c:2a:6f:b7:c3:24:38:fb:eb:
10:ae:3f:1e:c3:ce:16:c9:3c:71:62:15:4b:29:38:
c9:9a:d4:e9:c7:cf:7a:04:dd:a6:e6:bd:2c:9d:62:
83:a9:79:a3:98:97:ae:5e:c6:1b:bc:5e:0f:36:06:
1d:7c:7f:c7:93:14:8c:94:34:e3:30:1d:d0:6f:e5:
65:32:06:7a:35:9f:10:e5:5f:44:70:32:10:a0:76:
39:32:e2:a8:3b:65:4f:67:9c:11:18:fc:37:7a:59:
98:4a:70:fc:5c:b4:aa:c7:da:ef:75:11:0d:38:00:
89:c7:13:d8:15:b3:5e:d3:38:98:3b:ea:d1:96:ac:
ab:e4:3e:5b:3d:5b:04:6f:c5:60:a4:2e:a8:20:00:
12:0e:29:f0:e6:13:31:36:8f:df:c8:48:33:b6:a2:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:65:47:A8:FB:FA:83:6A:28:F5:F2:8D:AA:52:F5:EC:7C:A3:38:ED
X509v3 Authority Key Identifier:
keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:23:36:2d:ae:ab:09:3f:5b:5b:7c:30:71:2a:70:be:40:c2:
9b:a7:75:8d:9b:47:05:14:b1:39:c8:5b:17:62:d8:d9:1a:9a:
c8:80:3e:e4:c3:42:0a:6c:6e:85:a5:e3:35:9d:a0:08:37:dd:
63:5a:f1:36:2c:d7:60:18:78:db:dd:04:ae:44:91:bc:14:cd:
43:4e:79:f0:a5:3a:00:dd:39:25:24:a2:2b:d6:c0:db:e7:8a:
a7:64:42:0c:11:c2:39:a2:24:bf:22:44:30:69:7a:ad:d7:c4:
a2:42:0f:b3:db:bb:8e:2c:41:78:c9:1c:38:53:d6:9b:83:f7:
a8:33:34:e8:a7:17:5d:5f:cd:9d:ae:98:2e:c4:6d:6b:3c:84:
bf:22:56:0c:43:69:48:b4:63:65:c4:e6:41:58:48:27:be:8b:
b8:dd:42:f3:09:98:60:fd:10:6d:60:cc:16:f7:82:98:65:84:
c5:b2:19:f7:f6:fd:70:30:bb:7b:da:2b:c8:e4:bd:b0:19:86:
ee:da:6d:ea:8d:fa:62:95:ae:77:00:0b:30:40:b7:65:5f:14:
9d:be:09:f3:40:08:66:2c:e5:32:54:46:6e:73:b0:4e:6f:23:
d3:0f:16:d0:ae:87:1b:eb:d8:82:74:01:67:e2:9a:71:00:47:
cd:4d:28:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:23:17 2026 by rpki-client