Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: DFOjJDtCzIHWzNw8KfUvdle/zYmQb8NGTu9Y58sWEEc=
Subject key identifier: A3:7E:38:99:EF:63:83:27:CF:C5:2A:66:18:46:EB:67:06:47:D8:32
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 019F9090CECAF9E662A02D8E8E08970BD931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 135C
Signing time: Thu 23 Jul 2026 20:00:36 +0000
Manifest this update: Thu 23 Jul 2026 20:00:36 +0000
Manifest next update: Fri 24 Jul 2026 20:00:36 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: /9iRsozDAGhRhEqLHRPotfS8R4zdb2tEVpTW0hF21mc=)
2: Ea0xhlOm2YvTSj2LUGD3BIPNRR4.roa (hash: xQErZJEOiu3EHRTQnTGckBJupDV77OKBDm1q8oFWOjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:ce:ca:f9:e6:62:a0:2d:8e:8e:08:97:0b:d9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Jul 23 20:00:36 2026 GMT
Not After : Jul 24 20:00:36 2026 GMT
Subject: CN=a37e3899ef638327cfc52a661846eb670647d832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:3f:a3:e9:ee:1d:bc:fb:f3:d9:5a:75:08:
f8:d8:64:a7:1a:78:71:31:41:43:ca:bb:98:9b:34:
4d:fc:c0:da:e5:0b:15:23:81:7b:19:df:80:e7:f8:
fe:fd:4b:07:46:99:5e:ae:ab:3e:29:e1:67:76:01:
fb:78:25:f8:c7:38:1c:1b:02:ae:32:ea:67:c2:1a:
eb:68:93:d8:04:5a:26:85:85:bc:d4:38:be:58:a6:
9b:51:c2:e1:64:1e:07:3c:d5:09:b5:85:65:85:eb:
09:63:62:5c:cd:26:60:46:eb:da:dc:c3:5d:67:05:
7b:4d:98:7e:f4:65:49:bf:73:c4:0d:c5:a2:ef:63:
db:ab:86:0d:06:cd:86:0d:1e:43:19:4d:b8:d7:0a:
14:79:2c:77:6d:78:87:85:86:ab:ab:51:39:e3:46:
d4:26:af:d2:c1:57:ba:03:3f:40:1c:b9:40:d2:dd:
48:75:e8:e6:45:32:73:2b:0e:36:75:8f:a4:d4:ec:
c0:f5:eb:54:9f:ec:02:a6:d4:9f:5d:cc:ab:bb:57:
d6:5e:bb:80:91:3c:4e:46:43:b5:35:44:c0:a4:ab:
6a:38:04:07:17:98:c6:f7:4b:5f:35:f7:17:db:91:
81:12:9a:d9:db:b7:75:84:2c:0c:9e:4f:b0:89:1c:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7E:38:99:EF:63:83:27:CF:C5:2A:66:18:46:EB:67:06:47:D8:32
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d4:7f:07:4c:cc:66:e4:cf:0f:fd:98:9c:4b:ef:77:b4:76:
5f:d2:53:5f:d8:43:a9:99:af:c0:4c:2d:eb:27:57:b7:7e:6e:
60:ad:f4:01:cf:e9:63:93:82:ec:05:de:fd:75:73:4f:97:d3:
63:a6:c4:4a:58:08:8e:92:18:f3:b5:1e:42:11:fe:fc:85:4d:
92:eb:f4:b5:29:cf:8d:cf:6a:a1:b4:b0:97:c1:38:78:e4:13:
6b:90:09:24:ca:f1:86:c1:3e:81:5c:eb:fe:e5:ad:83:df:c5:
e7:76:45:da:23:c8:be:57:e6:4e:ed:7d:d0:5e:e6:1d:14:f0:
f7:82:0d:fb:3d:19:78:4e:c3:65:8c:b1:24:4d:0e:69:a1:fd:
6f:28:e0:91:27:ce:aa:a2:77:ac:6c:e2:b7:7b:60:9d:a5:1a:
19:61:e6:80:27:13:61:2a:80:fb:dc:8a:6b:23:2b:19:06:b3:
ea:26:4d:e6:a8:ce:60:5a:23:94:e7:0d:d4:42:ec:b8:17:69:
c7:e1:a1:f0:86:33:d4:66:ad:39:bb:af:19:3b:57:4e:b3:04:
e1:dc:bc:cb:df:6a:60:1a:8f:cf:6a:95:b9:51:ed:04:d9:ad:
82:d6:ff:0e:ac:fc:fd:74:5e:f6:d1:9c:16:0b:63:27:02:d5:
2f:e6:dc:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkM7K+eZioC2OjgiXC9kxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzI4NjNhNjQzOGIzNDAyNzUyYTQ3NDBlOTBjZTQyZWI1
ODkxMjkwHhcNMjYwNzIzMjAwMDM2WhcNMjYwNzI0MjAwMDM2WjAzMTEwLwYDVQQD
EyhhMzdlMzg5OWVmNjM4MzI3Y2ZjNTJhNjYxODQ2ZWI2NzA2NDdkODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc0/o+nuHbz789ladQj42GSnGnhx
MUFDyruYmzRN/MDa5QsVI4F7Gd+A5/j+/UsHRplerqs+KeFndgH7eCX4xzgcGwKu
MupnwhrraJPYBFomhYW81Di+WKabUcLhZB4HPNUJtYVlhesJY2JczSZgRuva3MNd
ZwV7TZh+9GVJv3PEDcWi72Pbq4YNBs2GDR5DGU241woUeSx3bXiHhYarq1E540bU
Jq/SwVe6Az9AHLlA0t1IdejmRTJzKw42dY+k1OzA9etUn+wCptSfXcyru1fWXruA
kTxORkO1NUTApKtqOAQHF5jG90tfNfcX25GBEprZ27d1hCwMnk+wiRzL2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKN+OJnvY4Mnz8UqZhhG62cGR9gyMB8GA1UdIwQY
MBaAFAHChjpkOLNAJ1KkdA6QzkLrWJEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQt
YjU0MDU4MzRmMGM1LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQtYjU0MDU4MzRmMGM1
LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtR/B0zM
ZuTPD/2YnEvvd7R2X9JTX9hDqZmvwEwt6ydXt35uYK30Ac/pY5OC7AXe/XVzT5fT
Y6bESlgIjpIY87UeQhH+/IVNkuv0tSnPjc9qobSwl8E4eOQTa5AJJMrxhsE+gVzr
/uWtg9/F53ZF2iPIvlfmTu190F7mHRTw94IN+z0ZeE7DZYyxJE0OaaH9byjgkSfO
qqJ3rGzit3tgnaUaGWHmgCcTYSqA+9yKayMrGQaz6iZN5qjOYFojlOcN1ELsuBdp
x+Gh8IYz1GatObuvGTtXTrME4dy8y99qYBqPz2qVuVHtBNmtgtb/Dqz8/XRe9tGc
FgtjJwLVL+bcnA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:51:17 2026 by rpki-client