Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.mft
File: c9Vwx5bTmPHwjMRQxTJh4aHlW8M.mft (raw, json)
Hash identifier: /MU0xSEMwoa83FD2TUWhvgM391ichhJvkLC5uaeKjOc=
Subject key identifier: 65:1F:55:F2:10:5F:A2:D7:B0:6E:0C:4A:4D:78:1A:39:18:4A:FC:F3
Authority key identifier: 73:D5:70:C7:96:D3:98:F1:F0:8C:C4:50:C5:32:61:E1:A1:E5:5B:C3
Certificate issuer: /CN=73d570c796d398f1f08cc450c53261e1a1e55bc3
Certificate serial: 019FF835741929413C46005C3DC8814A885C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.mft
Manifest number: 52
Signing time: Wed 12 Aug 2026 23:01:20 +0000
Manifest this update: Wed 12 Aug 2026 23:01:20 +0000
Manifest next update: Thu 13 Aug 2026 23:01:20 +0000
Files and hashes: 1: 1_9CTD55fA31dYiJKaTyCL4OIrM.asa (hash: djqucbZDGesAiVO1pouZlPrp0+NsNKU7ArDEE8maUzA=)
2: c9Vwx5bTmPHwjMRQxTJh4aHlW8M.crl (hash: 5U/LmgLjrGMYwiX0Y8lUZ0tVohjhEjsANbxIVea3AuY=)
3: l4-X8_eXswBGFxKXYsID689ysSg.roa (hash: 1gHzp+nOp9wIINJxkvsFKvC4ESGAANBEssCiAndsb1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:35:74:19:29:41:3c:46:00:5c:3d:c8:81:4a:88:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d570c796d398f1f08cc450c53261e1a1e55bc3
Validity
Not Before: Aug 12 23:01:20 2026 GMT
Not After : Aug 13 23:01:20 2026 GMT
Subject: CN=651f55f2105fa2d7b06e0c4a4d781a39184afcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:49:03:90:81:75:6e:10:f1:d1:e9:1b:f3:
fb:55:f3:47:e4:8c:19:ec:35:f3:e6:e8:69:bd:cd:
66:7b:5b:49:62:09:3e:e4:53:02:86:c6:8a:c5:b9:
e9:97:96:70:db:41:70:c9:ef:82:c9:b4:a0:55:ac:
41:ef:36:d4:b8:f8:dd:36:98:01:66:fc:2d:17:1f:
92:24:ac:12:a3:75:85:43:0e:ce:e0:fa:db:14:f9:
29:d0:a4:98:06:4c:57:d5:29:21:7e:99:b1:0d:fc:
13:b7:21:4c:36:67:4f:38:23:cf:cf:52:0b:36:9b:
1a:e5:6e:24:42:67:83:e6:0c:d4:6b:c4:13:6e:60:
1a:e1:64:de:41:9d:03:16:34:db:4c:4f:ea:d8:27:
21:3d:8d:40:e3:52:f5:70:34:15:92:ae:9b:1b:5a:
38:21:a7:65:00:a8:f2:04:88:ff:1e:95:84:1c:f2:
c9:d9:ee:ab:86:be:42:53:cc:7d:5d:e3:43:31:5f:
c1:1c:2e:da:22:4b:12:55:8d:0d:2f:e5:07:b6:4a:
a2:a1:da:e1:c1:c1:60:9e:17:df:8d:fa:32:c4:16:
78:fb:5b:46:86:26:6f:84:5e:49:8d:49:6f:de:18:
35:ca:c2:84:f5:6a:eb:e0:f0:82:89:eb:24:90:d7:
17:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1F:55:F2:10:5F:A2:D7:B0:6E:0C:4A:4D:78:1A:39:18:4A:FC:F3
X509v3 Authority Key Identifier:
keyid:73:D5:70:C7:96:D3:98:F1:F0:8C:C4:50:C5:32:61:E1:A1:E5:5B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8b:b7:c4:b8:a7:ac:61:ec:a1:ef:43:4c:a5:bf:3f:05:3d:
c8:28:b4:d7:55:76:b6:20:17:2e:a7:59:80:59:45:d2:67:96:
5b:e2:bf:77:ec:ef:91:ce:8a:b9:40:db:f9:b0:74:26:f5:ed:
7e:8a:fb:f6:72:58:a1:b9:ea:db:a8:05:c3:06:c6:5e:58:10:
65:2d:9e:af:62:c1:bc:66:cf:d7:7c:ea:32:06:57:13:27:ea:
fd:4b:48:aa:48:90:be:1b:8c:82:1f:ea:54:90:a0:14:bf:ee:
40:14:c2:a3:8c:98:8d:0f:1d:69:e6:26:31:25:e2:88:d2:49:
7f:b8:cb:54:a9:47:f6:89:68:bc:df:88:cf:ca:87:b2:e9:7e:
04:ec:97:82:cc:17:37:7b:2d:39:c1:f6:ee:7c:93:eb:74:db:
f1:6a:09:27:f1:e4:81:b0:68:b8:6b:05:ef:06:e3:c9:98:de:
45:f7:91:4d:2e:79:ec:35:4c:3e:a5:ab:39:3c:54:9c:fd:71:
e7:19:5b:8b:c1:15:6f:bd:7e:07:05:f3:93:b7:75:ad:0a:b8:
f0:32:05:f2:6c:b5:e4:16:4f:15:a1:ae:2b:5f:bc:88:8f:6b:
64:97:27:b1:f5:12:d9:ee:5c:b8:6a:60:54:0c:25:6a:ea:88:
93:e0:6c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:46:32 2026 by rpki-client