Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: 1+E+Rq826ebSvzSlW2onrC+7hZsb3+h+NM+JFdGOAyk=
Subject key identifier: 78:85:C3:94:12:98:01:F6:F8:49:A8:48:DA:BA:98:09:AD:36:75:10
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 019D26960EB2C4EF94CBACB3945CF159A354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 121C
Signing time: Wed 25 Mar 2026 20:01:01 +0000
Manifest this update: Wed 25 Mar 2026 20:01:01 +0000
Manifest next update: Thu 26 Mar 2026 20:01:01 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: KMAzyj+C52dxJ6flKpYbd3YhO6RZa3fLi/oyZ0Je6V8=)
2: Ea0xhlOm2YvTSj2LUGD3BIPNRR4.roa (hash: xQErZJEOiu3EHRTQnTGckBJupDV77OKBDm1q8oFWOjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:0e:b2:c4:ef:94:cb:ac:b3:94:5c:f1:59:a3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Mar 25 20:01:01 2026 GMT
Not After : Mar 26 20:01:01 2026 GMT
Subject: CN=7885c394129801f6f849a848daba9809ad367510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:e0:7c:55:f8:31:87:6c:ce:b6:22:88:e0:
5f:fd:34:59:ac:cb:5a:fd:84:cf:fa:bc:c2:0f:0a:
bb:ff:d2:1e:69:6a:dd:30:a6:8f:69:49:1d:5a:b2:
91:23:a6:9b:73:6b:35:28:c9:e5:c4:ec:c9:4d:7d:
b5:8d:e0:d9:b9:b3:4f:f6:92:03:8a:6c:9d:46:48:
50:d4:cf:68:21:3c:57:2a:aa:63:e6:30:43:71:18:
f7:a1:9f:81:d0:29:42:c4:f9:cc:ae:1f:09:0d:a1:
3c:fb:f4:40:dd:ce:96:8c:5e:66:ee:e6:54:de:a3:
48:c2:cb:db:55:2c:46:6f:69:dd:e0:f7:67:e8:dc:
a6:fc:98:7b:b3:ae:e7:19:a5:94:71:30:0c:44:29:
cb:a2:90:0d:0d:66:96:a9:fe:82:49:ff:c3:25:62:
d8:6b:fa:22:6c:ae:7e:34:ed:dd:62:59:f4:7b:04:
8f:d2:3a:16:d2:0e:22:e5:21:17:b1:ed:95:29:ad:
f2:7d:ec:3c:3e:b9:b8:0d:fd:a2:98:24:25:b9:1f:
aa:6b:8a:d1:53:7a:0c:76:c6:db:60:f0:5c:1d:5d:
03:a3:13:f2:56:e6:55:8f:7a:4d:30:a2:86:cb:d4:
3e:31:0f:85:d5:0c:c7:ed:c5:44:08:c7:27:9e:08:
6d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:85:C3:94:12:98:01:F6:F8:49:A8:48:DA:BA:98:09:AD:36:75:10
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:17:3c:75:0f:80:12:4b:f7:6e:a8:c4:9a:37:c3:df:fe:b8:
83:b4:61:46:e0:09:3b:fe:bf:c5:25:85:ff:8d:31:28:b9:35:
d0:b5:c1:30:32:be:8a:4d:91:1d:58:44:b5:45:62:dd:86:38:
0f:58:c6:d0:c9:d6:ac:7c:bb:e7:b0:13:a3:01:76:b2:bf:bb:
eb:8a:a4:b4:b7:71:de:a9:90:38:d8:61:1e:16:cd:e2:65:35:
2b:ee:c4:0d:32:cd:8c:9b:20:4f:33:fe:6b:e5:c7:51:2a:64:
47:9f:7f:8d:56:4c:ef:29:e1:85:ac:d4:6f:23:41:83:bc:9c:
b5:7b:05:ba:7e:5f:5d:e7:3b:bd:f0:8b:d9:91:e3:76:74:1d:
10:62:68:5d:9c:80:67:75:5a:c4:1e:f8:b9:77:76:69:a9:e4:
cd:56:dc:05:c8:c1:20:f9:76:0e:f1:2f:c8:92:79:cf:b4:e6:
4f:50:77:9b:26:6f:05:a7:57:64:0c:38:b1:c8:8e:4d:be:7b:
4c:c2:70:bd:9a:79:ba:0e:4e:1c:99:d2:2f:36:47:dd:ea:5a:
77:0e:d1:85:85:7f:2b:f6:46:96:42:6e:3f:d2:0a:b9:06:bc:
b2:29:26:b6:e2:3c:36:69:08:f4:00:03:0b:fe:8a:32:01:47:
1c:61:37:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:19:13 2026 by rpki-client