Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: Ee0t/Z/q3g0najAa9Z58MbP6QLDDujpCmTeJsW0/BLs=
Subject key identifier: E3:DF:9B:68:31:9F:09:5E:DB:24:6C:41:29:2B:F2:7F:48:D8:84:6B
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 019D265EF1EE582F3376321F2A0A089E50A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:00:49 +0000
Manifest this update: Wed 25 Mar 2026 19:00:49 +0000
Manifest next update: Thu 26 Mar 2026 19:00:49 +0000
Files and hashes: 1: 4pvzkyd81z5apygQK8vaJvAnbgI.roa (hash: MyU3Vlx3nSujsQMgN+1tqcR+k9UJKWDtwwM9zel9Hmg=)
2: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: SpZY3fLQuQEuUZE1dyNXeLqHihpf35t7syvTer4KFW4=)
3: JtNLS6T33Iz4vUIQlrXh2Qn6brY.roa (hash: N9H/VOJgXqokBoKRK1wd1YbpfMsGShL1Jc64VDN5pRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f1:ee:58:2f:33:76:32:1f:2a:0a:08:9e:50:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Mar 25 19:00:49 2026 GMT
Not After : Mar 26 19:00:49 2026 GMT
Subject: CN=e3df9b68319f095edb246c41292bf27f48d8846b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:01:f4:4c:71:0c:03:ed:09:39:cf:03:17:
05:9e:aa:41:b3:c4:07:df:f8:e9:af:72:b7:20:2b:
cf:19:69:43:5a:7a:d5:67:1b:5c:93:3f:ed:c1:a1:
ce:31:3c:61:19:1d:36:8f:f3:6a:c5:30:d2:b9:78:
4c:1f:e5:95:64:8c:71:15:95:6d:41:2b:76:17:17:
f6:a8:45:a4:5f:22:b7:2a:0a:f2:9c:bd:0e:bf:16:
90:64:8f:6a:d4:d8:51:1b:58:c3:21:b8:e4:d5:3f:
41:ec:c9:2d:56:ba:75:a5:fe:b5:18:a0:68:93:20:
f7:58:d3:a9:de:1c:c5:a3:6f:2d:0e:38:1c:2b:7e:
fd:0d:30:0c:5d:dd:0e:4c:be:21:03:7a:ce:c1:ce:
c4:a4:e1:06:d1:e8:e6:99:35:5d:34:6d:72:62:50:
46:a7:59:ca:be:a8:ae:39:38:57:3e:75:9c:16:77:
3b:fd:95:21:55:d9:52:a9:9b:57:ce:ad:bf:2b:aa:
14:b8:65:c3:fe:4f:5b:76:77:2b:bc:48:49:2a:83:
74:7c:07:7b:41:f7:f7:90:ee:26:c2:3e:0c:d6:39:
20:60:31:04:99:f8:1d:7a:e7:d3:33:93:8e:ae:1b:
1a:86:21:ad:f6:c6:d1:76:0f:78:9c:30:90:66:ec:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DF:9B:68:31:9F:09:5E:DB:24:6C:41:29:2B:F2:7F:48:D8:84:6B
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:03:20:19:39:f8:ee:7f:1a:89:f0:f5:e3:ff:0e:2a:20:74:
a3:04:39:7c:58:ea:16:c4:a5:f5:32:37:b7:27:25:3c:e1:f4:
04:a7:47:1a:eb:e0:57:fa:77:0e:81:84:5f:2c:6b:69:49:ce:
91:1c:95:21:c0:68:c3:bf:4c:60:1e:03:f3:0a:6f:c6:9d:58:
95:45:d0:14:c6:84:3b:1f:d6:99:5c:c2:27:21:e4:c6:4e:f9:
e7:1b:61:2b:7c:89:e1:7f:03:c6:47:26:51:77:85:37:8d:ce:
c2:44:40:ec:61:e8:6e:e2:63:08:13:72:45:0b:cf:d5:cc:a2:
e2:49:61:51:a9:7a:30:77:77:43:fc:55:da:5a:46:1a:2d:ab:
79:c2:c3:5d:9f:1c:8f:fb:1a:93:8e:30:68:6a:d0:f6:8f:bb:
af:40:bc:c8:e3:24:67:f5:6d:8c:50:a0:af:86:75:a4:8b:65:
f6:ad:4a:de:fe:52:fc:e5:29:cb:10:1f:9e:22:d5:bd:3f:f1:
76:14:8e:97:30:f1:7d:7f:11:b6:3a:d1:b1:26:59:fb:22:af:
4f:74:87:75:96:c2:53:55:b4:f1:c2:81:53:0b:89:85:14:5d:
f4:32:ca:d6:b1:53:40:63:f1:3d:1c:de:2b:bd:56:38:41:7a:
54:89:40:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:25 2026 by rpki-client