Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: /Wvf1IEHwaYZL8OZoyitoRWJzr184Edz2D9NR1v4sFs=
Subject key identifier: FB:8D:F8:CC:D0:60:99:B8:FF:44:49:D6:F7:B5:0F:37:BF:8B:64:DC
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 019D39AE8B5E12050EFA446B52F83855D492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 0305
Signing time: Sun 29 Mar 2026 13:00:33 +0000
Manifest this update: Sun 29 Mar 2026 13:00:33 +0000
Manifest next update: Mon 30 Mar 2026 13:00:33 +0000
Files and hashes: 1: RC8W-k4eKHGPmasSbosZROUwLd0.roa (hash: 5z5Yb5fi2XNF4cg27QOu2H4cPUEEs+tF3GD1VOWpis0=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: gs0ZXWN56xrk8JO2IZiMsdAbViSNt9zn7HaTzch1/1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:8b:5e:12:05:0e:fa:44:6b:52:f8:38:55:d4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Mar 29 13:00:33 2026 GMT
Not After : Mar 30 13:00:33 2026 GMT
Subject: CN=fb8df8ccd06099b8ff4449d6f7b50f37bf8b64dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1e:50:64:f9:d9:52:d6:22:fe:e8:a9:b8:d1:
a6:3e:22:c4:d0:71:ff:d8:2d:b8:63:d9:a9:4d:20:
4e:03:38:61:ad:be:87:cd:32:fe:b1:d3:28:2c:ca:
b6:3e:d6:6e:be:e4:10:28:d3:1b:50:af:6d:2e:e4:
f6:0c:28:10:a0:e0:d5:26:68:e8:dd:ab:f9:ed:bb:
5a:36:b2:f8:47:70:3d:d7:b1:1c:b5:20:8a:b2:a1:
8d:42:cb:5d:76:ad:fe:d8:ec:ee:c9:9b:a5:73:fb:
e2:ef:82:b9:30:e6:64:bc:ab:d2:30:a2:19:a3:02:
7f:61:ec:9b:8d:f1:18:f3:b3:ac:a0:b0:6c:73:1e:
36:ea:ba:cc:56:db:8c:2b:ee:d5:0a:74:c8:26:b0:
9e:12:32:5e:11:8f:f5:04:14:6c:fc:af:36:5b:76:
0e:4c:e3:82:77:13:68:6a:78:4c:09:03:99:19:e1:
f0:1d:05:3e:63:6c:ee:16:c1:79:4b:90:79:c3:3e:
f4:5a:71:c0:ce:32:20:10:b1:3b:a6:3d:1b:da:c4:
c3:a3:d1:ad:ba:29:82:6a:15:f7:58:53:52:b1:ae:
97:5f:2a:99:ec:07:63:93:27:aa:a5:07:86:1f:4f:
e4:25:5f:6a:48:75:82:d8:e5:fa:a4:3c:71:0d:f1:
c5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8D:F8:CC:D0:60:99:B8:FF:44:49:D6:F7:B5:0F:37:BF:8B:64:DC
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a4:57:46:1e:78:f5:84:59:a7:a9:34:3b:7e:43:2d:9c:10:
91:76:09:62:75:43:70:c6:34:2a:b4:b0:f6:5e:6a:52:36:52:
50:be:f6:94:0d:79:71:bc:99:c0:2c:97:95:13:71:5f:a6:c2:
af:b4:df:3a:60:dc:4d:c5:3f:55:62:f9:ab:73:d3:3a:29:04:
28:aa:7e:2d:be:1c:56:06:3b:3d:4b:92:1c:fc:2c:12:25:ae:
1e:0e:46:3d:30:27:b8:59:c9:d9:cb:91:09:12:1f:ca:f0:1b:
17:4e:a2:fc:56:ef:bb:26:c4:68:77:2a:fb:23:f8:4b:8a:6c:
ee:26:61:9d:14:63:90:d1:3a:7f:32:ef:ed:75:9b:39:3c:8c:
42:b9:79:10:21:ae:93:d6:c7:58:d2:fe:cc:d7:7d:71:e5:b2:
d4:21:cc:f3:5a:32:b7:94:24:10:c8:6b:69:af:a7:56:8f:fb:
66:0a:28:e3:4f:c2:16:ed:7c:01:76:11:46:cf:3b:06:04:a4:
9e:92:5e:d4:4f:c9:fd:8d:36:5f:2f:ac:0d:89:ea:9e:35:3d:
cd:a4:4f:65:db:fb:e7:91:f0:95:8d:20:b6:b2:9e:4e:2a:e2:
f8:09:c1:f7:90:3e:93:21:9d:bb:af:c8:04:75:3c:c6:54:38:
5e:c1:d4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:01 2026 by rpki-client