Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
File: acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json)
Hash identifier: ika9jhYRYUO/uygLZ/8XdFIPUcTy5hn6Ld0Dn5OS4qc=
Subject key identifier: 66:F1:95:76:48:7F:D6:50:A3:7E:E6:EA:F0:5F:B4:59:96:14:A2:97
Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Certificate serial: 01A0FC7D74E0FE940C354C989C7A26ED721E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
Manifest number: 1A82
Signing time: Fri 02 Oct 2026 12:01:15 +0000
Manifest this update: Fri 02 Oct 2026 12:01:15 +0000
Manifest next update: Sat 03 Oct 2026 12:01:15 +0000
Files and hashes: 1: 6GMqaoNuem-rKgHvy1GiWJWKilw.roa (hash: nwMP8vU+agP8Pszmp+8gcADemNbpqE9xOsflD5H9lfw=)
2: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: orB8smQpOIDyW59ZVcAM+c3oDh8B/C5tAymfmlPgiuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:7d:74:e0:fe:94:0c:35:4c:98:9c:7a:26:ed:72:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Validity
Not Before: Oct 2 12:01:15 2026 GMT
Not After : Oct 3 12:01:15 2026 GMT
Subject: CN=66f19576487fd650a37ee6eaf05fb4599614a297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:63:65:84:b2:64:53:f1:26:2a:ac:03:ef:2d:
c3:95:a1:5c:e3:10:67:05:e2:3b:99:60:7a:64:ac:
24:01:01:11:cb:b4:80:47:52:aa:3a:a2:af:92:eb:
04:74:f6:b7:29:65:cf:26:8b:2b:3b:4d:e4:7b:e4:
95:36:66:16:29:1e:12:9e:b6:f4:f2:1c:e5:71:8c:
6a:b1:25:22:3d:6a:a0:3a:d1:6e:4c:da:60:c1:20:
62:b6:26:5b:30:9c:2d:76:ef:ff:aa:91:8a:ab:e5:
d9:58:ae:d8:49:cf:9e:7b:14:7b:24:f8:65:48:c7:
3d:af:38:d7:7a:4f:8b:4e:11:04:6a:c9:e9:f3:f5:
de:fe:49:ec:7e:cb:fb:3c:8a:bd:b5:2f:b4:0e:65:
f2:c5:f6:c6:c7:f7:b8:2e:bd:53:c6:9c:6c:63:67:
bf:38:62:8a:f5:95:fd:30:7c:cc:5b:8b:35:9e:30:
ff:5a:e4:90:c7:d9:04:7f:a3:14:d7:12:82:8d:64:
c2:70:d3:35:92:30:19:67:68:00:f3:9b:c3:e7:ff:
a1:79:30:33:e5:a1:9a:f6:8e:f8:47:cc:77:31:6a:
73:e5:71:a1:a2:a3:78:b8:c9:60:c4:6d:50:90:ee:
43:73:d8:40:3e:7b:21:15:5c:a2:b8:ce:80:da:dd:
c2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F1:95:76:48:7F:D6:50:A3:7E:E6:EA:F0:5F:B4:59:96:14:A2:97
X509v3 Authority Key Identifier:
keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b3:51:8b:c6:4f:15:7f:1f:b0:ff:7a:9e:26:61:d8:ff:a6:
95:e8:ff:88:e9:aa:87:d8:ad:7d:44:d7:1b:02:01:9b:cd:b2:
a5:48:00:f2:a5:e6:cf:34:e7:35:d5:1b:92:6b:ad:ee:e5:c5:
f3:e5:5a:d6:f5:36:22:88:a9:6a:38:bc:6c:e9:ae:25:90:f7:
49:83:ba:8c:fe:fe:3f:f8:0b:c3:52:eb:bf:07:b8:f2:83:94:
07:ad:67:6b:19:f3:41:12:26:ec:51:f8:22:c9:d6:b0:89:4b:
b2:7b:c1:f3:d5:72:f6:6a:3a:56:3f:d6:0f:d9:49:fa:6b:91:
d7:2d:5a:f1:d2:12:6e:25:17:a9:e5:fe:19:41:14:24:40:9a:
0f:9e:32:a0:78:99:95:15:93:76:be:92:83:cb:4f:4f:50:7e:
95:ec:17:31:11:3c:76:60:1b:6b:34:66:7f:2c:4a:10:cd:89:
8a:10:88:e3:fa:7a:4f:99:17:ca:a4:71:48:b2:7c:4c:ae:14:
a7:dc:02:e7:04:71:de:70:f4:e1:92:5d:cc:cd:a1:52:4b:9f:
49:10:c3:be:a4:38:8b:34:08:2b:10:1d:77:93:73:7f:c0:bd:
df:3c:0f:4a:ce:4b:ec:92:07:36:88:6a:10:a3:64:f9:a5:ff:
4d:4a:46:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 19:00:04 2026 by rpki-client