Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: K6FRKfopth5PQkWeBLP4LZeKC4XLUBfpG8DQY0FmL5g=
Subject key identifier: B3:BC:1E:7B:17:F4:BA:1A:C1:E2:E5:EE:1E:75:0D:6C:D6:7C:F6:99
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 01A0CB22BC3441696BF7E718269BD950C49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 22:00:46 +0000
Manifest this update: Tue 22 Sep 2026 22:00:46 +0000
Manifest next update: Wed 23 Sep 2026 22:00:46 +0000
Files and hashes: 1: 4pvzkyd81z5apygQK8vaJvAnbgI.roa (hash: MyU3Vlx3nSujsQMgN+1tqcR+k9UJKWDtwwM9zel9Hmg=)
2: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: qU1r5c6thkqgpDAX3IfsEEoXKZbKnZxmmbhrt9kt35E=)
3: JtNLS6T33Iz4vUIQlrXh2Qn6brY.roa (hash: N9H/VOJgXqokBoKRK1wd1YbpfMsGShL1Jc64VDN5pRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:bc:34:41:69:6b:f7:e7:18:26:9b:d9:50:c4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Sep 22 22:00:46 2026 GMT
Not After : Sep 23 22:00:46 2026 GMT
Subject: CN=b3bc1e7b17f4ba1ac1e2e5ee1e750d6cd67cf699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:80:0b:e0:6b:40:8a:b8:8e:51:6b:b1:5b:
84:6e:c1:70:5b:b7:6b:31:39:c4:5b:51:0b:17:c6:
fc:1a:3f:d1:72:c1:7a:3e:60:bf:3d:ab:95:22:db:
25:6b:e9:09:5f:79:86:d9:bf:6f:1e:99:c8:3c:c4:
07:9a:a0:e4:3b:5f:42:a4:6e:b9:08:b8:9f:f7:62:
10:7f:4e:a5:47:ba:9e:be:d2:16:4a:e1:a6:48:e7:
38:12:cc:00:46:e2:b5:bd:e1:cd:dc:6d:2d:3d:1a:
b2:79:b3:7d:34:31:39:68:cf:8b:0b:53:f4:15:27:
96:a3:c5:54:7b:ac:f2:62:88:78:68:6a:69:8a:3f:
d2:d1:fc:6b:53:44:f9:ca:c3:35:cf:e4:8f:86:6f:
4d:d0:93:1e:75:b8:1d:3d:58:e7:1c:44:65:d5:f5:
4a:a8:6a:56:54:7f:29:27:ba:1f:0c:47:7d:55:8b:
57:8b:ac:6e:66:57:1d:94:7c:6e:23:9b:6b:dc:20:
fd:55:a8:b9:c2:c0:54:a9:02:b6:b0:cc:e4:e4:4a:
71:8b:22:ea:0f:4f:b1:bc:31:98:b5:a8:69:e1:ed:
f6:15:d6:7c:61:9a:52:10:6c:a3:06:9b:25:3a:16:
78:ab:f4:8d:50:f8:24:e8:2b:70:aa:f8:14:74:66:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BC:1E:7B:17:F4:BA:1A:C1:E2:E5:EE:1E:75:0D:6C:D6:7C:F6:99
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:43:97:ed:d2:c9:7b:13:af:15:71:83:f8:4d:20:91:a6:48:
e7:e1:80:33:7e:d8:f8:11:7e:91:c2:98:a4:13:23:18:ba:b2:
4a:09:b9:87:ec:6f:ea:92:09:de:c0:0a:91:a0:61:e7:75:21:
bb:a4:d6:3d:fa:27:d3:42:e5:fe:c8:55:29:3d:dc:48:a5:d1:
ad:cc:2d:af:eb:ca:56:20:81:1d:0c:5e:e6:df:29:08:77:94:
31:bb:a3:ae:16:2e:73:e0:dc:96:2e:24:74:7e:c8:1a:b2:22:
4b:52:96:b0:01:39:b5:f1:2c:48:0c:38:dd:b4:95:3c:a0:d7:
cc:a4:03:2a:b9:f8:55:2a:38:72:47:01:8b:79:b0:a0:ce:d6:
1a:a7:dc:24:3a:2e:5e:97:c5:eb:d6:49:d7:e0:04:c0:aa:5e:
99:f9:0f:57:f4:db:ce:f6:67:30:41:e1:35:e6:82:c3:9d:f6:
16:70:5a:d7:30:e5:a6:2c:5d:3d:36:f8:a9:be:d3:40:f0:09:
09:1d:d4:fb:dd:e9:94:69:e7:61:8f:00:3c:ab:ca:d3:3d:99:
67:74:dd:8b:c0:94:73:f3:0b:a2:6c:d9:df:8b:4f:ac:89:e0:
6f:1a:22:25:91:1e:be:f6:6a:90:0e:66:0c:d7:19:c2:ed:29:
d3:73:9c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:03:16 2026 by rpki-client