Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
File: Ac8qcbLHv1QcbMBBUc0CB402mSY.mft (raw, json)
Hash identifier: PBqANVpMobIom5F5GKRLZqP203g4W+F0fYxlZTcgznc=
Subject key identifier: 33:2A:17:E3:08:DF:2B:26:3C:6A:B3:D3:03:47:4B:73:09:DA:A0:56
Authority key identifier: 01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
Certificate issuer: /CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Certificate serial: 019D2996D0D954EB94BC54A7F3B559583B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
Manifest number: 058E
Signing time: Thu 26 Mar 2026 10:00:42 +0000
Manifest this update: Thu 26 Mar 2026 10:00:42 +0000
Manifest next update: Fri 27 Mar 2026 10:00:42 +0000
Files and hashes: 1: Ac8qcbLHv1QcbMBBUc0CB402mSY.crl (hash: D5gn6UAyO3XI/gsewyUwN5uE0y4Itc2day1SOCjUnE4=)
2: ldjE34Y5UHyQm9UPuMRXHapL2tQ.roa (hash: l2HlPn4UDyIXeMSyP3+IwTe3CYld8micBXtqct5ZxHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:d0:d9:54:eb:94:bc:54:a7:f3:b5:59:58:3b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Validity
Not Before: Mar 26 10:00:42 2026 GMT
Not After : Mar 27 10:00:42 2026 GMT
Subject: CN=332a17e308df2b263c6ab3d303474b7309daa056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:36:6c:e9:d9:40:c5:2f:88:7b:1c:cb:07:
52:c2:a9:38:69:1f:14:b8:bc:ac:1b:02:25:4a:34:
79:6f:f4:dd:d4:4b:03:9c:9b:b9:03:61:d5:de:f5:
89:af:d1:bf:da:94:8c:c4:1c:f4:0c:2f:6a:2f:45:
9a:48:93:37:dd:06:1f:26:a5:da:9b:d5:fc:4c:32:
5f:29:0d:ca:fe:80:4f:4d:25:da:b8:bd:43:8a:47:
61:2e:50:83:0f:a5:0b:7a:d9:2d:b0:83:e5:7c:14:
b4:f4:94:d4:29:e1:b0:fb:3f:ef:ff:86:e1:45:85:
da:1d:b1:03:7c:8f:38:5c:56:4d:58:6b:d8:4c:40:
6e:b1:2f:b0:ec:70:13:b0:d8:5f:72:c8:0b:4e:1d:
39:07:39:24:b1:37:40:37:16:2e:74:67:e8:24:f8:
65:68:82:28:a2:a5:6b:05:a8:27:94:bc:cb:d0:f4:
88:37:fc:9e:f4:cd:36:16:95:20:52:39:d0:0a:42:
63:c8:bb:3f:aa:42:89:98:d7:66:7a:94:95:26:5e:
ac:e1:8f:0b:3b:55:33:23:28:fc:67:61:04:c7:c8:
02:9c:a3:f5:52:20:bf:13:c3:e4:ae:d5:2b:8c:16:
9e:ca:e2:16:f9:ae:b7:ba:aa:66:81:00:84:73:8e:
96:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2A:17:E3:08:DF:2B:26:3C:6A:B3:D3:03:47:4B:73:09:DA:A0:56
X509v3 Authority Key Identifier:
keyid:01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ab:46:4b:bd:6f:68:be:55:9c:7e:a3:42:40:b0:9b:6a:fd:
2c:76:2d:05:f9:13:8e:ff:0e:a5:e3:8e:a8:27:8d:73:ee:64:
b4:2f:12:45:6e:d7:ec:2f:18:fe:2f:c0:96:b9:71:c4:21:16:
b6:24:b5:43:76:fd:91:98:8e:c5:2b:ea:d0:b7:6c:bc:8f:88:
46:3b:62:4c:90:91:b0:d3:2f:ea:0b:89:59:06:3a:7a:8c:5d:
4c:cd:87:b0:ed:c2:0e:0c:3f:81:82:c6:08:0a:ff:13:c6:f2:
d0:14:f2:c6:11:7f:b5:23:02:a5:cf:85:09:13:33:b1:60:d4:
b7:fb:81:cc:e5:41:d4:7c:4a:b7:3e:3d:f6:27:04:f3:2a:74:
ff:15:3c:2d:df:70:c9:d2:84:18:3c:12:55:d3:51:5c:15:1f:
dc:e0:96:7a:05:17:9b:d3:50:1d:23:1b:ca:d1:a9:ea:29:01:
5c:83:32:64:7f:4d:a1:ad:38:2f:93:9d:a6:c6:a1:2c:53:fe:
85:22:51:b9:43:b0:46:a8:13:b1:97:f3:87:ef:5b:79:3a:97:
32:54:a9:0e:ef:2c:06:f6:1d:2b:4e:f6:08:1f:77:d7:cb:49:
d5:e7:12:aa:f4:10:f9:61:8d:2b:27:c3:a5:4f:9f:bc:e5:75:
3c:ca:9a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:29 2026 by rpki-client