Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: RkiQrRc9Rq5wId9+ZukinLzQcPdcl6ZfdBzDO8W6f+0=
Subject key identifier: AC:CC:73:FC:93:81:C4:05:04:24:5E:80:95:8A:89:95:6F:63:D6:3F
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 019E1D9082F1CC0C08277D4834CB48AFD621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 19:01:10 +0000
Manifest this update: Tue 12 May 2026 19:01:10 +0000
Manifest next update: Wed 13 May 2026 19:01:10 +0000
Files and hashes: 1: 4pvzkyd81z5apygQK8vaJvAnbgI.roa (hash: MyU3Vlx3nSujsQMgN+1tqcR+k9UJKWDtwwM9zel9Hmg=)
2: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: mxV2lyeWrlH5wnO3WUuu/PF5j6GlhpW3WUBZfOaWKGE=)
3: JtNLS6T33Iz4vUIQlrXh2Qn6brY.roa (hash: N9H/VOJgXqokBoKRK1wd1YbpfMsGShL1Jc64VDN5pRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:82:f1:cc:0c:08:27:7d:48:34:cb:48:af:d6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: May 12 19:01:10 2026 GMT
Not After : May 13 19:01:10 2026 GMT
Subject: CN=accc73fc9381c40504245e80958a89956f63d63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7b:da:94:e1:23:da:1c:4f:42:64:ed:3d:76:
ce:85:a5:78:ff:71:a0:c9:79:b1:c5:29:cb:00:e0:
26:18:1c:02:af:95:3f:0a:92:60:de:a4:8b:38:cf:
c8:c3:77:b5:2a:d0:a1:89:e9:bd:d5:c4:c0:c3:aa:
84:4b:38:c6:12:f9:7e:1a:5e:d1:0f:81:44:1d:1e:
69:56:4c:e3:19:a1:ec:c0:0a:2e:fc:01:29:ce:71:
90:b5:10:5a:39:8d:1f:2c:ab:e7:4f:3a:ae:73:a4:
11:66:5a:0f:1f:57:11:ea:d4:98:e8:5e:45:09:03:
fa:10:60:f3:24:d5:d4:41:de:e7:b5:0b:10:78:61:
5a:35:63:c5:86:3a:f0:60:8d:ef:e4:8a:45:2a:5f:
f7:cc:a6:ba:41:0e:f5:bc:fd:12:d1:33:43:e8:58:
37:d1:a5:69:85:5d:8d:9c:e4:b8:76:11:0a:8b:0a:
f2:ce:fa:e1:b0:13:b5:b2:0a:b8:e1:af:cb:cb:e2:
97:ff:7c:a8:f7:63:cb:07:af:4f:4f:1e:58:c8:e0:
b5:5d:7b:e4:5c:90:8d:26:d8:d6:6e:a7:db:33:c4:
fc:d3:78:5c:1a:ee:a6:29:c4:e8:5c:12:e0:d4:96:
cc:05:22:ed:72:a9:82:51:67:3b:09:be:19:c3:b0:
71:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CC:73:FC:93:81:C4:05:04:24:5E:80:95:8A:89:95:6F:63:D6:3F
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5b:9e:4b:46:73:81:7a:66:17:09:38:d4:f5:08:c9:02:7a:
9c:91:af:5a:0f:dd:bd:10:b9:fa:16:a8:39:16:4b:f1:ed:ef:
74:83:94:f8:cc:44:3d:0d:20:77:c4:90:5e:ee:b0:6d:74:33:
14:04:44:fe:89:6f:cd:e8:6e:50:71:1c:91:54:02:92:77:77:
21:f9:bf:6a:fa:49:dc:c2:20:a9:9f:c8:57:23:88:3f:c6:1b:
91:4d:23:0c:6a:10:77:a9:0f:46:6e:49:a1:61:d7:6e:f4:07:
24:91:6c:db:8a:10:b4:7d:52:e2:7b:82:11:c5:67:52:45:44:
c4:74:e1:d3:41:2f:73:69:6e:f8:ed:7b:dd:35:27:0b:32:4d:
86:1c:58:8f:fa:c2:68:cc:eb:af:db:0d:49:81:c1:3a:a6:e2:
c9:79:c7:1c:e6:85:75:4c:e1:84:ac:64:8a:c3:0f:ba:11:20:
fe:1f:3c:54:07:4f:f8:49:d8:e4:3f:74:87:35:e3:00:66:09:
a4:64:46:f8:34:12:ae:6b:73:86:06:60:43:10:ea:dc:a1:7d:
f1:f8:a2:f4:80:2d:a1:60:33:75:a2:da:64:d8:3e:cc:53:be:
1b:7c:ba:0e:df:ba:b0:8e:7a:d2:6c:5a:31:50:04:cf:bb:b3:
16:aa:87:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:30 2026 by rpki-client