Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
File: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json)
Hash identifier: Ng2ycIjUgc3zzIxFud2aIbn+QQ4N9q3Z6KaUu/DWgXs=
Subject key identifier: 3A:0E:82:F7:CF:CF:77:0B:40:02:7A:DF:77:6D:84:D7:6E:3B:49:8B
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial: 019D281651D343AC09FB036D68847059E9F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
Manifest number: 0EB7
Signing time: Thu 26 Mar 2026 03:00:44 +0000
Manifest this update: Thu 26 Mar 2026 03:00:44 +0000
Manifest next update: Fri 27 Mar 2026 03:00:44 +0000
Files and hashes: 1: 2N3mFTgRGbmrw_7vATxV81Kq2dE.roa (hash: /FX8Wxrk3OXbha8szh70fBjGa2R8m1TJYbOuwC3Rhiw=)
2: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: 5vJPXA5rliezu87PLy7zpSmAqL22BKKCxEedaXViPkc=)
3: JfAxYSslNRgXCvxTlHkjURGg_tA.roa (hash: 1wkFd6nRFSOKqVQcfvyLq2KKje8vaNBC709RUWhAcGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:51:d3:43:ac:09:fb:03:6d:68:84:70:59:e9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Validity
Not Before: Mar 26 03:00:44 2026 GMT
Not After : Mar 27 03:00:44 2026 GMT
Subject: CN=3a0e82f7cfcf770b40027adf776d84d76e3b498b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:b7:94:cb:0f:2e:32:16:32:ba:60:2e:a9:
4f:d2:71:32:18:8d:4d:f6:01:aa:b8:89:28:47:b9:
4b:8d:a5:0f:b1:44:ff:6f:84:ff:4f:08:ec:76:fe:
7e:08:eb:37:78:e7:f4:13:cc:4e:15:b0:db:2f:1c:
ce:48:26:17:1e:99:63:d8:5b:ab:15:85:a8:06:b2:
12:af:81:83:1e:8a:c9:22:3f:2e:11:ed:8c:82:21:
a5:92:7b:ff:04:95:23:24:82:89:2a:5f:8a:b7:b2:
c8:c7:85:89:95:e4:a4:fc:b8:fc:f8:fb:80:a8:1c:
99:1d:30:79:13:4d:d5:08:ca:6d:3d:b5:0a:fc:47:
e4:14:8b:f9:e4:44:d9:23:0c:a9:af:84:97:eb:3b:
47:2d:5c:de:88:78:d6:af:72:6d:60:30:f7:12:44:
34:41:ef:ff:cd:71:66:15:f8:23:ef:13:9d:22:aa:
92:10:26:f5:1d:6f:6d:53:39:0b:30:3a:32:19:6a:
93:b5:07:ca:8d:15:9d:d4:26:98:3b:e7:47:63:96:
b8:41:2f:87:ed:e3:f1:5b:1b:40:28:3d:26:fe:2c:
a1:d6:75:ba:f3:b6:ea:61:7a:55:4b:c8:26:54:5d:
52:a8:11:39:2a:b7:28:65:5d:c3:6f:5e:9e:e7:7d:
e0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0E:82:F7:CF:CF:77:0B:40:02:7A:DF:77:6D:84:D7:6E:3B:49:8B
X509v3 Authority Key Identifier:
keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:08:ee:e2:a5:f0:b8:12:3f:b8:36:02:94:44:e6:c1:7e:04:
16:7e:03:4b:97:89:0d:f0:3f:1e:a3:d2:2a:75:0f:b4:76:f6:
69:71:e0:ef:fc:4d:8a:6f:a3:9b:f8:b7:da:d5:16:8a:b4:7a:
1d:89:86:80:de:47:58:54:e5:14:3b:66:6a:fe:c1:98:6e:ea:
f1:ab:2d:84:aa:31:1f:7a:6a:54:e7:36:fb:70:6e:1a:21:c1:
dc:8f:d3:9a:f0:c8:e6:f0:42:36:25:d1:81:32:b2:ae:33:e5:
78:ca:95:18:da:f9:d0:ab:17:56:bf:3d:0e:62:e0:9f:77:0d:
b6:10:4e:46:db:b0:20:c9:97:2d:96:9b:3e:fa:ab:31:f2:4e:
42:8e:88:8f:d1:dd:29:29:1e:88:5d:b3:80:a6:94:71:65:e9:
93:7c:b2:5e:40:d9:22:bd:15:00:45:e1:0e:57:0c:d3:a9:e1:
fc:c6:f1:41:ca:5f:b3:53:3b:4b:ff:87:11:8a:a3:92:1b:42:
74:48:db:55:f5:ee:60:69:16:5d:b2:63:79:fb:a7:d8:77:e3:
61:e8:85:59:ff:a1:fc:40:46:1e:5a:ce:88:54:1a:64:7e:1b:
2a:85:0c:a9:d5:fb:35:b7:9a:4c:b7:76:46:17:13:3c:09:fb:
31:cc:8e:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFlHTQ6wJ+wNtaIRwWenzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMmM4ODY1YmMyYTA3ZTRhY2ZlYjI2M2I0ZDljZjYyNDYw
ZmQ1MjMwHhcNMjYwMzI2MDMwMDQ0WhcNMjYwMzI3MDMwMDQ0WjAzMTEwLwYDVQQD
EygzYTBlODJmN2NmY2Y3NzBiNDAwMjdhZGY3NzZkODRkNzZlM2I0OThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5+3lMsPLjIWMrpgLqlP0nEyGI1N
9gGquIkoR7lLjaUPsUT/b4T/Twjsdv5+COs3eOf0E8xOFbDbLxzOSCYXHplj2Fur
FYWoBrISr4GDHorJIj8uEe2MgiGlknv/BJUjJIKJKl+Kt7LIx4WJleSk/Lj8+PuA
qByZHTB5E03VCMptPbUK/EfkFIv55ETZIwypr4SX6ztHLVzeiHjWr3JtYDD3EkQ0
Qe//zXFmFfgj7xOdIqqSECb1HW9tUzkLMDoyGWqTtQfKjRWd1CaYO+dHY5a4QS+H
7ePxWxtAKD0m/iyh1nW687bqYXpVS8gmVF1SqBE5KrcoZV3Db16e533gmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoOgvfPz3cLQAJ633dthNduO0mLMB8GA1UdIwQY
MBaAFAAsiGW8KgfkrP6yY7TZz2JGD9UjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kN2ZhZGMtMWViZi00MmRhLTliMjIt
YTYwYzIwYzhmNzE3LzEvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kN2ZhZGMtMWViZi00MmRhLTliMjItYTYwYzIwYzhmNzE3
LzEvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQju4qXw
uBI/uDYClETmwX4EFn4DS5eJDfA/HqPSKnUPtHb2aXHg7/xNim+jm/i32tUWirR6
HYmGgN5HWFTlFDtmav7BmG7q8asthKoxH3pqVOc2+3BuGiHB3I/TmvDI5vBCNiXR
gTKyrjPleMqVGNr50KsXVr89DmLgn3cNthBORtuwIMmXLZabPvqrMfJOQo6Ij9Hd
KSkeiF2zgKaUcWXpk3yyXkDZIr0VAEXhDlcM06nh/MbxQcpfs1M7S/+HEYqjkhtC
dEjbVfXuYGkWXbJjefun2HfjYeiFWf+h/EBGHlrOiFQaZH4bKoUMqdX7NbeaTLd2
RhcTPAn7McyO8Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:19 2026 by rpki-client