Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
File: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json)
Hash identifier: J8YmmG04JROYZuR9WF+EcXRbDi33LBsVubGfairtf0o=
Subject key identifier: 8E:C8:F3:11:D6:D4:1F:A5:D9:E4:B2:D1:5F:BF:C4:B3:CC:11:37:E6
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial: 01A0DA5FBFE37CA6CFBAE88CC36C4D3C9866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
Manifest number: 10A2
Signing time: Fri 25 Sep 2026 21:01:43 +0000
Manifest this update: Fri 25 Sep 2026 21:01:43 +0000
Manifest next update: Sat 26 Sep 2026 21:01:43 +0000
Files and hashes: 1: 2N3mFTgRGbmrw_7vATxV81Kq2dE.roa (hash: /FX8Wxrk3OXbha8szh70fBjGa2R8m1TJYbOuwC3Rhiw=)
2: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: /6ZpKuZDdQN+lEpKevsSSW8/YNDakzsucuvryZ03JjI=)
3: dvLxlkeTDaml7PrAVt8aczTEUAc.roa (hash: mpKOb113r9nmfGJNe12CHy39u2fx6Hc3Jd1CYKZC8AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:bf:e3:7c:a6:cf:ba:e8:8c:c3:6c:4d:3c:98:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Validity
Not Before: Sep 25 21:01:43 2026 GMT
Not After : Sep 26 21:01:43 2026 GMT
Subject: CN=8ec8f311d6d41fa5d9e4b2d15fbfc4b3cc1137e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:3a:62:dc:42:d8:3c:28:19:7f:5f:18:7c:
96:d4:87:6b:13:a7:89:2e:d2:b6:88:62:58:6d:30:
e2:9a:13:85:97:5e:17:99:53:a9:ac:0b:8e:98:b6:
7c:83:5e:ed:da:b5:e4:6c:20:89:c9:77:3f:54:66:
6c:6f:e2:20:cb:38:71:00:ac:ac:e8:fb:5e:ea:a7:
a7:45:a8:1c:a1:64:d3:b5:4f:3a:7e:af:da:b1:1a:
dc:87:f6:e6:7e:72:60:04:87:8b:c5:1f:8a:bc:80:
45:5d:72:35:c5:3f:7e:9f:a6:bd:7d:d0:04:35:f9:
95:20:99:fb:ba:36:52:ca:28:13:6e:8b:cd:a5:83:
d2:86:cd:8f:88:48:b0:42:bf:d1:a7:ca:d2:55:30:
fe:31:c0:76:f6:e6:ec:47:54:70:6f:65:97:09:2d:
a3:5f:01:a2:7b:4b:a8:82:4b:20:d3:cb:86:6b:d8:
cf:86:a5:91:3d:97:82:d6:bf:70:74:44:8e:bc:7c:
89:66:2a:22:7d:ab:9a:26:76:73:c7:68:8c:8d:a9:
c7:c6:15:8c:c7:96:91:21:b8:b7:ce:ca:03:da:03:
b4:22:22:a4:19:a6:02:7d:e7:37:fd:18:e0:a4:dc:
d4:3b:02:51:6f:d4:ec:e2:9c:45:0e:f2:1b:86:e8:
ad:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C8:F3:11:D6:D4:1F:A5:D9:E4:B2:D1:5F:BF:C4:B3:CC:11:37:E6
X509v3 Authority Key Identifier:
keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:77:d7:6f:60:ee:11:50:5a:86:e9:55:4b:41:0f:0e:d4:b4:
f6:6d:e8:4d:cf:75:e6:dd:ca:de:a6:5b:ef:37:d7:34:13:12:
5c:03:94:4e:bb:b5:1f:65:ca:d5:13:38:42:6f:ee:c2:0e:b6:
cd:1f:a6:04:be:97:17:9d:bb:a3:6d:52:f0:90:e5:ec:5b:90:
87:f5:67:61:fd:88:ef:bb:88:e9:60:f9:bb:46:0b:90:de:34:
b6:e4:93:ae:9d:f6:ad:a2:ac:aa:54:01:60:db:74:25:3d:f9:
26:c1:03:49:01:97:02:9e:ae:28:67:17:72:58:73:1a:0a:3a:
9a:26:2a:ad:28:87:a6:80:42:47:31:84:39:45:0e:6e:d5:11:
cd:d2:d5:2d:5c:84:29:36:10:06:bd:f7:6b:ea:78:f8:a0:86:
e0:cc:8e:7e:06:c3:ac:06:6c:d1:e9:0d:f8:9a:cf:f1:46:8b:
27:a6:8e:ff:05:dc:30:be:c7:f8:10:d7:10:05:9c:18:a0:b7:
ad:c5:81:12:bb:e9:b2:4a:9d:fe:0a:69:ce:50:27:f8:b1:51:
75:e1:54:a3:3f:b6:27:5c:3d:20:33:93:db:f0:98:a4:b9:d9:
1b:64:68:7c:f7:db:ad:dd:1b:b3:5b:95:07:cb:9a:f7:7d:50:
c4:ab:fd:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaX7/jfKbPuuiMw2xNPJhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMmM4ODY1YmMyYTA3ZTRhY2ZlYjI2M2I0ZDljZjYyNDYw
ZmQ1MjMwHhcNMjYwOTI1MjEwMTQzWhcNMjYwOTI2MjEwMTQzWjAzMTEwLwYDVQQD
Eyg4ZWM4ZjMxMWQ2ZDQxZmE1ZDllNGIyZDE1ZmJmYzRiM2NjMTEzN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0c6YtxC2DwoGX9fGHyW1IdrE6eJ
LtK2iGJYbTDimhOFl14XmVOprAuOmLZ8g17t2rXkbCCJyXc/VGZsb+IgyzhxAKys
6Pte6qenRagcoWTTtU86fq/asRrch/bmfnJgBIeLxR+KvIBFXXI1xT9+n6a9fdAE
NfmVIJn7ujZSyigTbovNpYPShs2PiEiwQr/Rp8rSVTD+McB29ubsR1Rwb2WXCS2j
XwGie0uogksg08uGa9jPhqWRPZeC1r9wdESOvHyJZioifauaJnZzx2iMjanHxhWM
x5aRIbi3zsoD2gO0IiKkGaYCfec3/RjgpNzUOwJRb9Ts4pxFDvIbhuitfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7I8xHW1B+l2eSy0V+/xLPMETfmMB8GA1UdIwQY
MBaAFAAsiGW8KgfkrP6yY7TZz2JGD9UjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kN2ZhZGMtMWViZi00MmRhLTliMjIt
YTYwYzIwYzhmNzE3LzEvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kN2ZhZGMtMWViZi00MmRhLTliMjItYTYwYzIwYzhmNzE3
LzEvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHfXb2Du
EVBahulVS0EPDtS09m3oTc915t3K3qZb7zfXNBMSXAOUTru1H2XK1RM4Qm/uwg62
zR+mBL6XF527o21S8JDl7FuQh/VnYf2I77uI6WD5u0YLkN40tuSTrp32raKsqlQB
YNt0JT35JsEDSQGXAp6uKGcXclhzGgo6miYqrSiHpoBCRzGEOUUObtURzdLVLVyE
KTYQBr33a+p4+KCG4MyOfgbDrAZs0ekN+JrP8UaLJ6aO/wXcML7H+BDXEAWcGKC3
rcWBErvpskqd/gppzlAn+LFRdeFUoz+2J1w9IDOT2/CYpLnZG2RofPfbrd0bs1uV
B8ua931QxKv9hg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:56:57 2026 by rpki-client