Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
File: acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json)
Hash identifier: pgwSy0KLEs4GsUv3RwyNjMURDTVbOYf7lNAaChfnJGE=
Subject key identifier: FA:54:50:FF:2F:BC:09:95:78:7E:F6:4F:E1:49:10:2D:EB:B7:C0:59
Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Certificate serial: 019F954A343F3EB80672BAA6748D2DE8EC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 18:01:35 +0000
Manifest this update: Fri 24 Jul 2026 18:01:35 +0000
Manifest next update: Sat 25 Jul 2026 18:01:35 +0000
Files and hashes: 1: 6GMqaoNuem-rKgHvy1GiWJWKilw.roa (hash: nwMP8vU+agP8Pszmp+8gcADemNbpqE9xOsflD5H9lfw=)
2: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: MjZxlhn0643lZna+95raAJKPQ35pa7b9OLWjXrK7szo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:34:3f:3e:b8:06:72:ba:a6:74:8d:2d:e8:ec:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Validity
Not Before: Jul 24 18:01:35 2026 GMT
Not After : Jul 25 18:01:35 2026 GMT
Subject: CN=fa5450ff2fbc0995787ef64fe149102debb7c059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0d:dc:eb:e5:dc:b4:d3:8a:2a:8f:46:f6:96:
12:59:0c:bc:28:78:64:dc:fe:b3:e9:6c:c4:f2:98:
11:5c:c4:d5:fc:50:d0:de:bd:d8:40:dc:43:69:23:
59:64:7c:7c:77:22:25:8e:05:9f:e1:9d:3f:bd:51:
db:cd:f7:12:a4:25:6e:82:6f:17:32:46:63:b0:f4:
f3:29:5b:42:81:ce:ed:9a:e0:84:0e:52:81:de:16:
f3:89:d7:2e:11:e2:d6:0e:ee:87:5d:af:75:0d:7e:
dd:ce:53:01:e1:f5:3b:45:84:4a:46:6c:d2:5e:b7:
93:90:b4:1f:76:68:3e:7e:97:88:29:cd:9c:37:d0:
00:f8:86:da:9a:1e:bc:20:95:9a:39:a7:81:b4:93:
36:86:f9:f9:c0:83:44:3c:fb:62:00:e5:f2:fb:17:
cd:35:ef:64:74:1a:29:23:69:3f:5e:e7:1f:c8:ca:
47:e7:24:88:8f:2e:d9:75:66:e4:f5:00:60:c6:eb:
3a:60:14:95:eb:6b:79:17:c4:4d:8d:f9:0c:ba:c7:
45:f4:eb:94:39:86:2b:16:18:4b:ee:50:79:ba:b0:
ab:29:ee:f7:f6:db:96:4e:1c:bb:d0:eb:fa:30:72:
fd:75:66:42:63:50:ab:aa:3a:9c:fb:0b:b6:30:cc:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:54:50:FF:2F:BC:09:95:78:7E:F6:4F:E1:49:10:2D:EB:B7:C0:59
X509v3 Authority Key Identifier:
keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:da:e6:0a:00:cb:e8:d4:2c:15:5a:d1:85:3e:82:c8:8e:ee:
78:b3:cb:57:cf:31:e8:93:b3:ad:e9:c4:ca:74:e1:c8:fb:0a:
f8:e3:6b:8f:62:3d:57:21:96:bb:c7:50:2e:e0:45:47:f0:66:
ab:e6:7a:a9:f0:0c:53:12:56:51:4a:34:75:b9:ca:5f:01:ed:
95:65:61:dc:bf:6e:1c:12:fb:cd:02:a9:28:71:b9:61:70:e7:
0c:ba:c7:ef:ab:b0:f9:02:9f:70:5b:ce:10:ae:1b:4a:48:04:
5f:39:cb:2d:5e:90:1e:b2:59:3c:bf:d6:3c:eb:cc:16:37:57:
a1:7d:bd:72:36:ae:24:5d:70:d7:8a:ce:98:a8:17:20:1a:fb:
05:4b:2d:67:5a:f9:e9:5d:89:a7:13:4f:c2:1b:28:83:ac:fd:
b7:e6:a5:b2:cc:81:7a:46:8d:5d:59:5b:4c:c1:c5:28:68:63:
00:a2:d0:56:6a:84:d2:f0:25:e2:a7:bf:08:53:06:21:9b:c7:
20:bf:5d:38:01:17:0b:e9:b5:e3:7f:c1:a2:2c:05:40:de:07:
73:f7:0d:0f:99:40:fa:9b:00:fc:4e:88:57:e6:63:c2:94:fb:
b9:1d:3f:b5:a2:d6:11:09:d9:a9:0f:f8:ba:13:71:60:ed:4a:
26:77:99:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:07 2026 by rpki-client