
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
File: ACQ0xzoO6iLG5EEHLpPbd8foovE.mft (raw, json)
Hash identifier: BjwqXzms6JmRhQidtIO1fUdxoOrnGsacXoQOqPrbBYQ=
Subject key identifier: 83:47:1D:5C:16:EC:07:2B:6E:7C:E2:64:17:F5:B1:DE:A7:78:F3:2A
Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
Certificate issuer: /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Certificate serial: 019D2AA9CE57564675C7EDB922927FCCEEBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 15:01:04 +0000
Manifest this update: Thu 26 Mar 2026 15:01:04 +0000
Manifest next update: Fri 27 Mar 2026 15:01:04 +0000
Files and hashes: 1: 3f0OD4dlHSwjQv-RWApp0mQcS1U.roa (hash: zApjSqCbN1NEV6FYS7IwB61yFfS8f5dDYUsMqrkHk3M=)
2: ACQ0xzoO6iLG5EEHLpPbd8foovE.crl (hash: Gf59OKz6RR5u53vyoNY8Bb7YXEEexBov21C/yHrMKLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:ce:57:56:46:75:c7:ed:b9:22:92:7f:cc:ee:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Validity
Not Before: Mar 26 15:01:04 2026 GMT
Not After : Mar 27 15:01:04 2026 GMT
Subject: CN=83471d5c16ec072b6e7ce26417f5b1dea778f32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:a3:8b:8b:49:c4:8e:e3:6d:3d:20:06:c4:
21:e6:d2:fd:f0:40:d7:f6:e7:ce:a7:76:1f:39:df:
e6:04:f5:ee:71:74:b3:5b:c0:91:9a:e1:46:2b:28:
4f:90:70:d4:96:9a:da:46:b9:de:af:6b:45:fe:d0:
7b:fa:c5:ca:a2:b3:7c:b0:d0:9c:47:4f:ec:b4:4e:
66:cc:ed:73:32:b6:fd:98:99:8f:eb:0b:11:5b:c5:
a5:db:0d:ea:f1:aa:0b:c0:3b:18:ba:e1:da:c7:19:
af:20:9c:43:57:b1:41:ce:01:95:c4:fd:4a:ad:bd:
b0:e1:6d:6f:b9:03:cb:89:80:24:5f:3a:46:c9:16:
05:c6:65:31:fb:35:f2:15:d6:ce:c5:7b:e3:cd:4e:
f7:14:8d:dd:6c:39:b6:15:4a:02:cd:01:5d:7b:5d:
4a:1d:f0:dd:fa:16:a2:73:3f:3e:3d:f3:ed:88:aa:
49:13:be:50:3f:e2:64:9b:67:33:32:16:ed:7a:46:
54:d4:7a:e1:fe:ee:3d:5c:d0:b0:de:47:a4:1f:bf:
16:a9:8d:d9:41:e5:98:6f:20:10:fc:7d:c3:a3:6a:
90:94:db:96:3e:12:d3:d4:14:11:56:a2:b2:22:e6:
cb:6c:64:b6:19:d7:3f:54:a4:b6:bc:6f:15:07:01:
f9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:47:1D:5C:16:EC:07:2B:6E:7C:E2:64:17:F5:B1:DE:A7:78:F3:2A
X509v3 Authority Key Identifier:
keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:58:4c:01:66:b9:66:ac:20:e3:ca:50:6a:d9:63:dd:db:b6:
d8:e1:55:cc:f4:55:4d:9b:24:8a:55:d8:0a:5c:a9:89:5b:f6:
80:67:ff:4d:45:34:9e:0d:f3:a2:cc:ce:e7:02:2f:4c:62:5a:
c4:d3:19:2a:44:98:f7:4a:f3:09:f5:89:92:c7:15:0b:a2:aa:
ed:ca:6f:33:1e:a3:ac:e0:e8:cb:6a:c6:27:81:3a:dc:c0:64:
d7:00:46:cc:07:1a:7c:5c:85:10:ce:61:88:aa:4d:37:8c:81:
fd:aa:2f:3e:ec:08:f5:fb:2d:42:54:60:f6:a0:3d:2e:5c:ba:
33:41:11:59:ed:db:04:fd:2c:12:38:23:8d:6b:76:bf:ab:14:
31:fd:97:e2:81:81:52:9a:21:9b:88:fe:9a:6e:2b:34:e3:79:
ab:4e:f0:9c:d1:df:ac:e6:55:fa:a8:74:2e:ff:9e:64:e3:5f:
b5:1c:cd:40:5f:f0:57:a7:d1:11:c4:b2:8c:60:6a:56:64:61:
62:12:ec:5c:91:bc:f7:d9:f4:3d:59:fd:1d:66:95:02:e5:66:
14:06:f7:77:a1:70:2f:7e:ee:c2:1f:e8:59:ee:e8:08:ef:06:
b5:a5:6e:60:9c:3b:bd:14:f7:f8:88:05:a1:19:77:4c:91:33:
f4:32:e9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:37 2026 by rpki-client