Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
File: ACzThauQKWJxijm7ez7JmqQE5cA.mft (raw, json)
Hash identifier: 8dZnNiilDgWOMWhS/L3GOk1VJgMG5JBjkybUAHfnZBU=
Subject key identifier: A1:FD:37:75:2F:A8:E6:3B:13:66:AF:35:1F:4B:57:F9:7C:8C:44:B7
Authority key identifier: 00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
Certificate issuer: /CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Certificate serial: 019D27044173A6A14F902EC25CBCE3B70AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
Manifest number: 0C17
Signing time: Wed 25 Mar 2026 22:01:23 +0000
Manifest this update: Wed 25 Mar 2026 22:01:23 +0000
Manifest next update: Thu 26 Mar 2026 22:01:23 +0000
Files and hashes: 1: ACzThauQKWJxijm7ez7JmqQE5cA.crl (hash: SD60473Z3AQeS88yecVYosvAZ31+bFOz5tOsazn3mHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:41:73:a6:a1:4f:90:2e:c2:5c:bc:e3:b7:0a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Validity
Not Before: Mar 25 22:01:23 2026 GMT
Not After : Mar 26 22:01:23 2026 GMT
Subject: CN=a1fd37752fa8e63b1366af351f4b57f97c8c44b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:4b:79:4d:39:75:71:d5:01:59:cf:8d:5b:
ff:7c:08:0a:d3:9a:65:6a:e9:ce:4c:c3:71:58:66:
c4:86:b9:ce:6d:2b:d1:a1:99:ed:db:69:43:48:45:
f5:00:94:fa:d0:16:8d:16:5d:bb:78:64:4a:a4:14:
b1:90:e9:cd:74:49:13:94:63:60:aa:c2:83:38:8f:
09:2f:ea:00:dd:7d:b6:28:eb:3d:1b:d9:87:60:06:
04:84:fc:3b:27:49:47:e4:cf:54:49:73:77:a5:e8:
89:9c:ed:26:47:c8:47:49:e8:e1:4f:35:20:d3:81:
88:c7:50:b9:79:1e:37:45:39:60:ca:4b:10:6b:09:
53:97:a5:7f:6e:57:ed:cd:ca:3d:84:c7:af:04:ae:
fe:e0:fa:47:eb:98:60:ab:0c:0f:21:30:fd:37:c3:
50:42:77:78:29:f8:f8:98:18:57:50:d9:66:ca:a2:
1f:80:6f:04:d4:41:a2:76:3d:69:4d:bf:82:b2:14:
ff:23:62:50:d1:74:68:4a:23:26:8c:4f:22:db:ba:
8d:46:19:d5:80:e8:ee:bc:ed:b4:d1:61:3f:68:a6:
eb:57:ef:1f:4f:a0:e7:8d:25:b5:75:b2:36:dc:13:
fb:e5:39:4d:40:83:d9:b9:2f:1c:ef:72:1f:80:80:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FD:37:75:2F:A8:E6:3B:13:66:AF:35:1F:4B:57:F9:7C:8C:44:B7
X509v3 Authority Key Identifier:
keyid:00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:90:69:26:37:01:02:78:59:b2:eb:ef:39:c8:26:77:c4:14:
2a:0a:fb:7f:bf:4d:6c:2b:fd:ce:44:ad:7b:db:1e:16:33:05:
a2:cd:90:17:8a:22:a7:f9:13:b3:97:b0:9f:4d:8e:16:e6:e3:
64:6c:31:8e:16:1d:2a:54:48:11:9c:3c:5e:7d:7a:ee:e5:61:
ee:cc:e0:d6:bf:97:3c:52:72:b3:83:e2:2e:04:16:f1:5d:03:
26:9b:f0:62:86:cc:30:6b:25:c5:00:ba:62:09:49:e8:2d:3c:
18:e8:e0:d0:bb:26:55:d9:fb:43:d0:99:e8:b8:a9:37:d0:d2:
3b:bb:f8:3b:a8:46:31:06:cd:3d:6e:29:03:55:15:92:93:f9:
46:8b:c8:02:e2:3b:a9:8c:6c:40:03:28:10:41:1a:64:8c:38:
71:b4:2d:50:c9:79:a7:f1:43:a4:0c:2c:8b:d0:f1:78:f4:f2:
53:99:7a:5e:5e:65:c2:17:a6:10:78:ee:6b:d9:23:5a:b1:81:
72:f6:b3:c7:5f:65:e6:cd:76:e2:6c:63:b7:34:b4:c5:7b:7a:
89:5c:34:be:24:5a:ef:cf:95:84:67:b7:02:3f:ad:14:c9:12:
d9:e6:a6:e4:2a:27:4a:64:ec:51:85:f8:c4:50:1b:7e:4c:2c:
b2:97:fe:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:32 2026 by rpki-client