Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: llMLoISUhMCtA0FzZK4rCLoLVaa2b5j6VQtVcElpsBI=
Subject key identifier: 2A:38:94:11:46:0D:3A:0D:42:53:5A:D0:B1:2C:38:AA:BF:F8:5D:29
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 019F9059A106FD29D56CF5C9180F836DE3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 19:00:20 +0000
Manifest this update: Thu 23 Jul 2026 19:00:20 +0000
Manifest next update: Fri 24 Jul 2026 19:00:20 +0000
Files and hashes: 1: 4pvzkyd81z5apygQK8vaJvAnbgI.roa (hash: MyU3Vlx3nSujsQMgN+1tqcR+k9UJKWDtwwM9zel9Hmg=)
2: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: bavGcN//GBKUTJ9f6LTBgUDy4bNrmZwe+w5Je0+oc4o=)
3: JtNLS6T33Iz4vUIQlrXh2Qn6brY.roa (hash: N9H/VOJgXqokBoKRK1wd1YbpfMsGShL1Jc64VDN5pRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:a1:06:fd:29:d5:6c:f5:c9:18:0f:83:6d:e3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Jul 23 19:00:20 2026 GMT
Not After : Jul 24 19:00:20 2026 GMT
Subject: CN=2a389411460d3a0d42535ad0b12c38aabff85d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:34:22:20:ab:e3:b8:1b:ea:64:80:4c:b8:
40:9a:52:4b:4f:01:57:7f:3b:5a:8f:8c:7d:b3:67:
c5:81:cf:7b:fb:a7:05:b8:06:08:96:56:23:5b:91:
d3:77:22:5a:53:17:67:f3:b8:38:42:fb:e1:08:f4:
f8:2a:66:bc:ef:8c:6b:9c:eb:93:47:92:07:0e:bd:
8c:fb:e1:45:1c:64:00:3c:a6:02:c5:93:a9:00:fb:
86:4f:0c:20:3e:a1:65:f3:1d:ce:c4:d6:ed:90:e7:
0c:1f:8d:3e:65:11:2f:be:74:8a:fa:24:2e:41:a2:
04:c9:23:86:03:0d:0a:42:45:f4:d6:37:7c:27:68:
ee:52:fe:e0:2b:0f:6e:f3:1c:e0:39:e0:ac:1f:5a:
5e:81:a3:5f:b2:93:7f:47:66:c8:17:0e:33:a4:bd:
05:19:46:e7:ec:7e:4c:86:53:2c:1c:f5:1a:e4:d0:
04:10:30:9f:b1:2c:09:a1:7a:f6:97:80:fa:72:61:
96:82:6a:d4:96:35:84:e5:bc:52:c0:8b:56:ad:d3:
4e:00:b5:bc:fe:3d:03:cb:4f:8b:03:60:86:78:fd:
e4:d6:0f:f7:c8:10:b1:d2:21:83:93:d7:ef:93:0b:
52:0e:e1:c8:64:e0:b9:83:83:a0:f1:2a:8a:d9:04:
58:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:38:94:11:46:0D:3A:0D:42:53:5A:D0:B1:2C:38:AA:BF:F8:5D:29
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:d4:fd:da:ad:54:31:62:fb:cc:49:9d:61:73:b0:f0:c6:2e:
ac:a8:ed:70:9f:46:98:77:99:77:a6:26:fa:75:57:d4:11:43:
53:b6:8a:f5:22:86:a5:68:5c:f5:e5:97:8b:1f:3e:1f:27:8c:
1e:10:ca:9a:33:85:ae:10:f8:2b:f0:d6:62:18:0e:ad:79:7a:
9a:2c:18:3e:b3:20:10:f0:52:f8:38:9d:f3:73:c1:bd:14:c6:
71:a5:ec:68:df:cf:85:09:05:99:5f:5e:58:0f:55:e7:5b:a3:
0f:d5:04:8f:85:07:26:32:fc:36:a6:79:08:19:33:2b:1f:1b:
7c:e2:44:13:c2:d3:97:54:1a:6b:b2:28:04:ef:9f:ec:d7:2b:
aa:14:8f:9f:64:18:83:3e:e4:46:f6:52:c7:cc:20:8f:ae:0e:
49:82:91:c4:04:26:df:19:50:b0:f6:db:b7:24:1e:4e:57:a7:
9c:58:ab:82:1d:4b:f9:9f:ea:d8:74:cf:ce:4e:f9:b3:e7:5a:
74:26:a7:c0:df:31:9d:2e:62:ea:b9:07:8e:73:51:37:e7:59:
c7:61:11:92:a6:fb:89:2b:24:91:c1:13:c4:4e:33:4b:a6:1e:
61:8c:40:ce:de:17:f6:de:46:1b:2a:18:fe:e4:02:75:1d:b7:
79:7f:d4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:10:07 2026 by rpki-client