Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
File: ACzThauQKWJxijm7ez7JmqQE5cA.mft (raw, json)
Hash identifier: 6NC7WCQNLGqcxXD7InhP13e5I9cjbQam4Hd8E25Keko=
Subject key identifier: A9:E2:E3:FA:98:13:AC:75:23:7E:56:A5:86:A4:1A:97:41:A5:45:25
Authority key identifier: 00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
Certificate issuer: /CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Certificate serial: 019E1C4734BFECEF8A7587EA5B93E18A09F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
Manifest number: 0C96
Signing time: Tue 12 May 2026 13:01:29 +0000
Manifest this update: Tue 12 May 2026 13:01:29 +0000
Manifest next update: Wed 13 May 2026 13:01:29 +0000
Files and hashes: 1: ACzThauQKWJxijm7ez7JmqQE5cA.crl (hash: NIVByzOgkZra4kIzRIUkbf0EZpDcsPKVikMVVydZ5WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:34:bf:ec:ef:8a:75:87:ea:5b:93:e1:8a:09:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Validity
Not Before: May 12 13:01:29 2026 GMT
Not After : May 13 13:01:29 2026 GMT
Subject: CN=a9e2e3fa9813ac75237e56a586a41a9741a54525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:3f:22:1c:d4:6c:e6:68:6e:ae:5e:83:ff:
f1:b3:fa:3d:3b:4f:1c:4a:fe:67:b3:dc:36:7d:c1:
86:53:fd:e5:54:b1:51:7e:21:16:d9:18:58:25:cd:
88:70:df:ce:db:07:7b:cc:5b:d8:bc:86:4e:9a:2f:
25:0f:21:0b:c3:43:31:eb:a1:03:42:76:97:61:ce:
39:95:49:10:18:42:46:d5:f5:90:70:cf:a5:e1:0c:
1c:66:73:cc:e9:58:b1:e2:d9:78:b2:3f:e0:84:af:
c9:34:31:1e:e6:5c:a2:db:04:24:47:63:b2:e9:af:
7b:71:ec:e4:e4:9b:df:b8:0e:44:99:03:2a:5a:4e:
a3:94:37:86:57:d4:0c:25:70:ec:be:a8:49:97:db:
b7:10:d2:ce:0e:cf:f5:81:23:1c:22:bc:e7:0e:ff:
2a:d9:c5:21:fc:d9:07:57:ef:e8:b0:41:b2:cd:11:
ff:20:3b:74:c4:ed:c8:50:12:ac:e9:23:f9:2d:71:
2b:dc:62:ff:2e:d3:d0:9f:2c:0b:ac:02:ad:79:b4:
a6:85:79:08:14:a1:fc:09:fb:17:c9:af:08:d3:4a:
a9:ea:f8:2b:b3:68:51:06:20:d6:8c:e4:c1:3b:03:
d6:43:3e:f3:77:a0:fa:73:3a:ca:21:10:c8:5d:bf:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E2:E3:FA:98:13:AC:75:23:7E:56:A5:86:A4:1A:97:41:A5:45:25
X509v3 Authority Key Identifier:
keyid:00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:86:51:8a:46:1f:b9:eb:32:25:09:59:da:48:bb:5c:7e:18:
bd:cc:7d:9c:cc:13:a6:88:6e:4b:76:85:43:4e:12:95:45:4b:
a6:48:08:27:29:bf:4c:07:69:a5:60:1e:f1:ce:32:a4:39:55:
a5:2b:2a:fd:d3:56:6a:09:85:70:90:03:7d:94:c3:e9:30:73:
cf:d4:53:40:67:d5:7f:5f:c8:f5:31:b4:ce:58:3a:58:69:1d:
84:a7:d2:8f:59:8c:44:1b:95:09:ba:39:a4:0c:1c:d5:19:c6:
6a:d3:31:4c:1d:50:86:b7:a9:ff:29:c9:29:57:84:bd:a9:b8:
dc:7c:ed:f6:95:60:78:5d:f4:46:dc:2b:17:dc:15:25:55:dd:
0c:61:9b:1b:a2:40:bd:28:7e:d7:6a:88:04:f2:24:fb:69:5a:
87:5b:34:e5:54:1a:44:4c:36:00:b2:21:60:5e:af:ef:dc:a3:
32:33:d1:33:01:d1:6b:cc:63:16:f6:64:44:37:76:3c:47:c7:
ee:1c:c5:9d:0d:6e:a9:81:4f:75:b5:94:06:21:72:3b:a8:1b:
3c:dd:69:fc:b0:7f:e2:91:87:6a:64:b1:c3:24:54:e1:37:60:
4d:58:97:d3:a9:45:d1:24:5c:a8:7d:af:9a:d0:ae:41:a4:b5:
d0:b9:a9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:28 2026 by rpki-client