Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
File: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json)
Hash identifier: KXD6QvWC+b7hl1GccCiRb6wKlxD9Zca6yRGQ0MSKZj0=
Subject key identifier: AF:00:DA:BA:DD:3F:20:02:2F:FA:3B:DA:53:0D:D9:7D:02:7F:DB:33
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial: 019F9022ED2B6D477D72DBD2159768C34DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
Manifest number: 0FF7
Signing time: Thu 23 Jul 2026 18:00:35 +0000
Manifest this update: Thu 23 Jul 2026 18:00:35 +0000
Manifest next update: Fri 24 Jul 2026 18:00:35 +0000
Files and hashes: 1: 2N3mFTgRGbmrw_7vATxV81Kq2dE.roa (hash: /FX8Wxrk3OXbha8szh70fBjGa2R8m1TJYbOuwC3Rhiw=)
2: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: y2TDsDc3p2lrtWsfkX4GNEzO+PDUURjHK2qFxASPF+M=)
3: dvLxlkeTDaml7PrAVt8aczTEUAc.roa (hash: mpKOb113r9nmfGJNe12CHy39u2fx6Hc3Jd1CYKZC8AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:ed:2b:6d:47:7d:72:db:d2:15:97:68:c3:4d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Validity
Not Before: Jul 23 18:00:35 2026 GMT
Not After : Jul 24 18:00:35 2026 GMT
Subject: CN=af00dabadd3f20022ffa3bda530dd97d027fdb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:d6:e5:d1:28:cc:d5:29:01:0f:88:4a:06:
fd:4e:55:33:36:12:d3:30:ed:b5:5d:3f:47:c6:e4:
d0:8a:04:d2:2d:94:4c:66:21:e9:b1:83:c6:e1:a9:
13:7c:ce:5d:28:19:b8:a0:28:70:5f:39:29:7b:67:
16:71:dd:64:81:ea:46:dc:92:09:14:67:40:ce:7c:
21:d2:94:9a:e2:d5:8a:79:46:43:85:4b:9d:0a:22:
25:10:77:0d:2e:3a:56:ff:41:a1:a0:90:fc:79:46:
00:81:b2:68:61:eb:5d:2f:4d:87:f6:0a:17:66:68:
59:30:92:65:d5:e4:35:b5:25:67:f8:5d:43:88:2d:
0d:cb:f1:8a:8a:50:fe:af:d8:65:a5:38:f9:30:70:
3c:bb:d9:b9:9d:36:f5:aa:c4:27:33:c7:3c:05:b5:
97:1f:14:76:c0:a8:4a:8a:e3:52:ca:0f:3e:76:7a:
fd:cb:82:82:ac:72:69:78:23:b2:ea:a5:1f:d0:72:
7a:bd:c3:2f:40:35:53:30:d5:21:88:b5:65:50:f5:
d6:2d:40:9a:b3:c5:39:a3:b9:6e:e0:bc:34:3d:63:
da:8f:7b:b8:4c:f7:00:94:44:a7:56:db:41:3a:81:
83:93:90:36:f0:08:cb:3b:fa:5f:22:2b:47:88:bf:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:00:DA:BA:DD:3F:20:02:2F:FA:3B:DA:53:0D:D9:7D:02:7F:DB:33
X509v3 Authority Key Identifier:
keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2c:3b:e8:bc:da:0d:77:7b:1f:e4:50:99:1b:5e:66:8f:e2:
61:d6:1d:68:2a:1d:64:ad:4e:1f:ad:76:a7:11:66:8b:a1:78:
ef:5b:5c:7d:7a:1b:fb:c0:d3:77:d6:c4:d2:e2:7e:4d:f0:ce:
09:ef:a0:d7:85:29:40:f3:e8:e2:26:4e:f1:69:db:0e:ad:0c:
61:7f:dd:34:bf:68:63:84:d7:86:48:4e:06:d6:88:cb:80:9e:
dd:f4:fb:17:29:02:cd:80:38:33:a6:df:3b:73:af:c4:fd:39:
bc:54:b0:16:d4:39:07:ba:a5:de:99:ca:26:5e:88:fa:41:12:
fb:c3:9e:d0:c9:ec:20:3f:99:ae:c8:9e:1c:cb:d7:80:26:ab:
b7:d4:4f:fc:43:87:d2:b1:41:80:6a:97:4b:34:df:f7:b9:58:
d7:65:8b:15:3c:e8:35:1a:2b:ef:02:49:91:3c:58:d5:5f:9c:
9e:7e:a8:4d:37:05:be:59:70:41:a6:c0:ca:b3:ed:0e:29:be:
eb:d9:12:9c:ce:09:33:c2:b2:14:b3:e7:3c:41:a0:b3:9e:93:
9c:ac:4f:5e:6a:4b:2d:e8:58:64:3d:b5:98:03:3f:96:c5:ef:
57:a1:c3:8b:c7:40:f3:7c:11:f2:01:53:f5:d5:5e:66:9f:72:
54:fb:df:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:12 2026 by rpki-client