Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
File: AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft (raw, json)
Hash identifier: i/HSbitgwtI6+/usKmn+9JEscVodOuUJGc/PfmJPE0w=
Subject key identifier: 1D:D1:14:06:5E:83:C0:30:47:79:85:AC:77:E1:C2:87:6F:83:99:F0
Authority key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
Certificate issuer: /CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Certificate serial: 019D32D089348D6A0AF44C8CB78CC55B71A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
Manifest number: 121F
Signing time: Sat 28 Mar 2026 05:00:20 +0000
Manifest this update: Sat 28 Mar 2026 05:00:20 +0000
Manifest next update: Sun 29 Mar 2026 05:00:20 +0000
Files and hashes: 1: AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl (hash: 8/Ts4rpaLxZqQYu+LdkBzBiLOHQWniLj7yLp3ZWy1lA=)
2: xGSQtxBpS573s4zPyTFpERUQH7o.roa (hash: 0qhIt2oCl1BBlwABDamfzBFWIJOyQt4+H4muS8E2+74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:89:34:8d:6a:0a:f4:4c:8c:b7:8c:c5:5b:71:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Validity
Not Before: Mar 28 05:00:20 2026 GMT
Not After : Mar 29 05:00:20 2026 GMT
Subject: CN=1dd114065e83c030477985ac77e1c2876f8399f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:3c:eb:98:29:80:45:16:cf:50:9d:3c:99:
b8:5f:3a:b5:f3:9e:85:3f:02:41:bd:11:b2:85:ce:
2f:68:94:6f:63:88:d3:f0:8f:c5:d1:c0:4a:ac:e6:
8e:25:07:59:c6:b7:4a:f4:44:47:0a:9e:19:05:b6:
b6:7b:72:a1:39:2d:3f:6f:e6:a1:59:87:bb:71:db:
35:47:74:82:42:f2:a2:0b:db:d5:30:f9:a7:e5:98:
44:ad:d1:9a:2b:2f:04:1c:47:a0:1d:3d:3e:2a:d0:
1e:f4:28:b2:8b:d2:34:31:e0:43:ff:27:81:1b:5b:
ac:e3:53:08:2a:03:b2:c4:0f:96:29:e3:c3:96:92:
59:0d:8e:17:be:7b:32:db:ec:3a:32:33:0c:05:d3:
e6:0b:13:1b:ff:26:1e:47:c6:2b:4e:cc:7f:fa:4f:
00:ac:27:c4:0d:87:03:30:fc:16:f1:1c:91:04:d1:
43:c9:56:cb:c7:a0:b0:3b:52:e2:59:7b:c1:f0:1a:
ab:c9:03:ae:b9:ba:cc:12:22:a6:0e:a5:e9:57:3c:
d2:23:64:c9:86:fc:3e:53:de:75:7d:40:57:fc:d6:
b0:dc:99:f4:76:40:c9:8f:a9:df:af:09:7a:96:82:
14:02:03:ae:2a:6b:cc:0a:9d:62:4b:21:bd:c8:26:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D1:14:06:5E:83:C0:30:47:79:85:AC:77:E1:C2:87:6F:83:99:F0
X509v3 Authority Key Identifier:
keyid:01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:26:74:03:24:f9:fa:3d:25:12:f3:17:bf:64:d1:6e:5d:68:
6e:1a:74:5c:9f:dc:c4:ff:2f:b4:56:0d:44:6a:5a:0a:23:cc:
f1:ec:e7:00:8e:f0:38:17:e9:e7:ae:16:48:11:a2:78:4e:58:
d4:22:a5:60:68:1c:f4:83:1e:89:ad:b9:4b:22:8b:3c:83:c1:
12:53:8b:24:70:57:bd:50:14:a3:fc:a6:2d:13:5f:58:00:ad:
d1:b5:b3:6f:e9:54:d5:f9:04:3e:71:aa:07:28:62:29:46:b1:
c3:d4:f1:50:b1:fb:a4:d6:6c:46:1e:44:ff:cd:ae:40:07:ce:
89:7b:05:4d:65:5f:e8:e2:b8:97:ae:47:28:18:72:d0:e6:18:
ea:4f:79:26:91:87:3a:d9:d6:91:a4:08:ef:2b:fd:a0:4d:82:
8c:d3:80:da:c6:a2:1c:79:8e:5a:eb:11:23:23:42:44:18:6c:
af:75:0c:df:b0:74:5e:2b:2e:49:cc:ee:77:f2:a6:f4:5e:2e:
70:3d:62:88:90:88:43:84:4f:60:d3:d9:1d:82:fb:69:77:a8:
a5:77:af:00:eb:60:3a:b5:a9:75:51:22:21:10:1c:49:36:ea:
1c:e6:85:d4:c2:28:0b:9a:11:92:53:5a:78:a5:46:2f:8c:15:
01:45:88:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:37 2026 by rpki-client