Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
File: Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft (raw, json)
Hash identifier: rI2wCuAVe+MdfRaYTPcn6uL/DZE3JTgHkUW2qAm+XIM=
Subject key identifier: 5D:FA:7A:B9:3B:50:B0:0A:3C:91:CA:CC:5D:43:ED:43:BD:8C:54:D9
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Certificate issuer: /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial: 01A0CC355F04FBE35AEAF357B2F0118F0C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 03:00:44 +0000
Manifest this update: Wed 23 Sep 2026 03:00:44 +0000
Manifest next update: Thu 24 Sep 2026 03:00:44 +0000
Files and hashes: 1: Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl (hash: qeWYGDw9CRY+qKz7BiSsho2TvAbvJB6unRYwyMJVxeU=)
2: tLACRLHJMNO7pkHg2BdbS9oOBUU.roa (hash: 9tUxOLxvWwiq+19ZOnFgqeZk3zELbv4Ra0UrW4JTYYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:5f:04:fb:e3:5a:ea:f3:57:b2:f0:11:8f:0c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
Validity
Not Before: Sep 23 03:00:44 2026 GMT
Not After : Sep 24 03:00:44 2026 GMT
Subject: CN=5dfa7ab93b50b00a3c91cacc5d43ed43bd8c54d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:e8:e5:98:b2:69:12:e4:9d:63:82:d2:0c:
d2:84:5b:ab:46:ba:a7:af:0f:9e:d3:3c:cf:f4:4c:
c5:1a:20:db:c2:a6:fd:df:16:b4:56:9e:95:d3:30:
27:44:0d:25:60:96:87:d5:ad:4c:25:a2:5b:e3:46:
87:41:fe:38:82:be:c0:d6:53:4d:6b:ec:73:55:ea:
e1:a8:77:dd:09:27:da:a7:43:a6:81:95:3c:7c:08:
3a:01:e4:0b:cb:ee:2c:3a:26:d0:1a:24:b2:c4:ff:
a3:8e:ae:05:bb:4d:14:20:a9:87:fa:1b:9c:7c:a6:
f7:b6:71:11:37:51:3a:3c:98:de:e2:a9:1a:f0:ef:
8a:4e:49:79:ae:d5:ee:06:7a:c0:d9:9a:a1:b5:d7:
c8:38:b5:36:ae:f2:67:13:46:88:62:9d:a1:a4:77:
ff:cd:0b:bf:09:94:a1:90:c3:eb:31:6c:20:8a:ca:
90:fb:d6:af:2b:b3:2a:c4:7b:a6:7f:b3:11:e6:91:
73:c2:c4:0f:77:6f:d9:f5:8d:13:80:ac:91:be:2e:
22:7d:02:a5:ec:6b:51:81:44:00:b8:d6:b3:c1:d0:
31:ad:b9:33:7d:e0:58:df:74:b1:68:83:5d:06:b0:
11:ca:30:e1:7c:e9:9d:cf:e7:a3:e5:31:1b:74:cd:
2c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FA:7A:B9:3B:50:B0:0A:3C:91:CA:CC:5D:43:ED:43:BD:8C:54:D9
X509v3 Authority Key Identifier:
keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:da:9b:2b:20:18:cd:71:21:85:a9:0e:3f:f9:8e:ac:c9:b8:
cf:a4:30:b1:e7:28:52:ad:e2:c7:09:ef:6c:16:ae:54:c8:f9:
5c:b8:e7:6b:57:f4:7a:e1:7e:2e:65:a7:ab:45:5f:30:b8:ef:
53:82:a4:49:ff:cc:e8:94:21:b3:56:ac:01:be:38:29:45:d9:
02:29:39:cc:2c:7d:2f:9d:f4:78:6c:c4:82:7f:41:9e:53:20:
7b:32:b5:89:7b:e7:0f:bc:a6:73:74:61:ab:b4:62:61:c0:10:
be:38:e3:3d:2c:61:ae:28:dd:e0:52:d1:bb:bc:76:d6:4a:a0:
46:50:d2:e1:59:58:d2:be:89:65:9b:ab:cd:7a:e7:9f:cd:d4:
a7:14:f5:bc:df:b1:0c:06:7a:f2:ce:3d:1a:d3:1c:cf:63:41:
95:d7:91:92:33:c6:8c:1a:d9:3d:a2:8f:07:df:65:00:83:b8:
3f:d8:82:80:2a:bf:23:7b:76:2f:11:60:a2:09:d1:31:0c:71:
a5:ac:95:3c:d6:4a:aa:80:2a:ad:7f:3d:7b:6e:89:3f:7d:30:
45:ab:27:c1:83:b4:b5:b0:40:ba:e9:88:87:60:bf:8c:97:b9:
39:5b:75:23:d3:f6:7d:22:ef:9f:30:ff:22:47:3f:b3:06:cb:
a7:f2:74:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:02:15 2026 by rpki-client