Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
File: ACzThauQKWJxijm7ez7JmqQE5cA.mft (raw, json)
Hash identifier: Svw41FyhuE39BD7qmCX4Ud2c0Ekk2xcj24zShkvngRc=
Subject key identifier: 2C:1F:A7:BA:85:9B:4A:DD:E9:22:7D:C9:A6:DE:FA:3A:43:01:CF:65
Authority key identifier: 00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
Certificate issuer: /CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Certificate serial: 01A0CBC8258BE5CE06EE0C8082BD055F6F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
Manifest number: 0DFA
Signing time: Wed 23 Sep 2026 01:01:26 +0000
Manifest this update: Wed 23 Sep 2026 01:01:26 +0000
Manifest next update: Thu 24 Sep 2026 01:01:26 +0000
Files and hashes: 1: ACzThauQKWJxijm7ez7JmqQE5cA.crl (hash: ZlZ8zPWjs1WBiZpvynSg6IVXyoCOmRo95gtABhJMkIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c8:25:8b:e5:ce:06:ee:0c:80:82:bd:05:5f:6f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Validity
Not Before: Sep 23 01:01:26 2026 GMT
Not After : Sep 24 01:01:26 2026 GMT
Subject: CN=2c1fa7ba859b4adde9227dc9a6defa3a4301cf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:be:1c:02:84:0d:dd:cf:36:ad:4e:ef:bb:fd:
93:0d:54:c9:8e:e9:93:91:f7:12:85:b6:11:bb:64:
06:e1:8b:93:52:ae:3d:5f:b1:57:e4:90:fa:b8:2a:
4a:19:23:8a:c0:c1:08:84:83:a0:1a:17:39:f2:c3:
e6:b1:9e:68:f2:96:cf:d4:87:74:27:28:8d:d6:b8:
2b:a1:52:1b:21:84:61:10:f3:58:db:02:d6:41:80:
b3:33:5f:bf:98:d7:ed:5f:19:2d:bc:25:04:5a:fc:
90:c3:fb:b3:e0:04:b3:d6:eb:23:91:ea:bb:a1:94:
aa:7e:4e:73:63:ba:19:c8:b7:10:fd:25:eb:b2:df:
51:ba:4b:62:45:ae:7b:22:86:76:e2:2f:c7:4c:e4:
95:1d:4e:7b:cf:16:fb:15:84:40:a0:87:8d:24:d8:
d2:bd:8b:fd:2a:e0:4d:1a:a4:92:7d:ff:66:d8:df:
e4:f7:15:48:9d:1a:aa:00:d2:60:72:3b:46:63:8e:
45:63:65:80:e2:2f:4d:9f:a5:b8:08:b2:7c:d3:75:
e9:cb:cd:45:6f:45:7f:24:91:d6:87:f0:4d:f6:9a:
3e:70:59:d0:7b:e9:d3:8f:29:3b:78:75:d5:ad:80:
bd:a1:65:7d:20:de:1d:ed:a4:9a:a7:f9:ee:77:ec:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1F:A7:BA:85:9B:4A:DD:E9:22:7D:C9:A6:DE:FA:3A:43:01:CF:65
X509v3 Authority Key Identifier:
keyid:00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:bc:d7:80:f3:20:85:41:7e:8f:0b:2d:19:f8:0c:8f:88:ff:
5f:13:f2:56:ad:45:e0:ef:69:96:1d:1d:9c:c2:2b:62:9d:82:
76:0d:24:2a:d5:fa:ac:c0:d6:aa:f0:75:1e:68:7c:33:f8:94:
2d:80:31:fc:70:28:61:3a:37:a6:f7:e4:b5:5e:8c:53:e5:ed:
c7:f1:05:d2:b0:13:24:60:29:c9:bc:06:32:96:39:d1:1b:3a:
22:3e:3b:67:e1:b0:37:f4:f9:0b:7a:99:1e:27:99:ec:23:0d:
e9:9e:ee:d2:bb:e7:4f:b8:2f:b9:11:f9:dc:5b:0b:10:ca:7f:
a8:56:fe:a5:6b:28:4c:b2:4f:75:91:a8:7a:e6:eb:4c:f1:94:
d7:55:2a:ee:20:43:7a:93:f8:96:d3:86:95:05:1c:f7:c2:5c:
b9:3a:32:66:18:41:78:3a:9f:4c:27:d7:ee:29:3b:96:f0:98:
de:a8:38:97:ca:d7:4c:98:b3:55:9c:e2:e4:6d:3c:86:02:53:
af:d9:e7:cd:d9:1d:7d:a1:72:96:a2:a4:4d:3a:18:4f:19:c5:
32:a5:eb:36:1b:74:50:db:53:5b:83:ab:d0:84:0f:04:97:35:
e5:9a:51:26:f1:e0:d9:69:1e:b0:50:09:0f:23:67:94:84:1b:
e3:6f:09:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:32:25 2026 by rpki-client