Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: qeNOLFNRb/lEa95PD2t3vECQp0hGblPt+nA6s8BVhTI=
Subject key identifier: 5D:A9:74:EB:37:A6:B4:9A:37:1B:7C:56:D9:86:E6:5E:B4:83:5A:B3
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 019E30E07A3A030CB617B19870619ECB2280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 0385
Signing time: Sat 16 May 2026 13:01:18 +0000
Manifest this update: Sat 16 May 2026 13:01:18 +0000
Manifest next update: Sun 17 May 2026 13:01:18 +0000
Files and hashes: 1: RC8W-k4eKHGPmasSbosZROUwLd0.roa (hash: 5z5Yb5fi2XNF4cg27QOu2H4cPUEEs+tF3GD1VOWpis0=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: vY5ryeSehxLNqobFwZ+yLE3zfuPq3oPDTBBHZ/Z9ehg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:7a:3a:03:0c:b6:17:b1:98:70:61:9e:cb:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: May 16 13:01:18 2026 GMT
Not After : May 17 13:01:18 2026 GMT
Subject: CN=5da974eb37a6b49a371b7c56d986e65eb4835ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:68:79:c4:54:2f:3e:a5:3c:4b:cb:33:c7:66:
d9:79:4e:4d:0c:25:c1:d4:94:8f:3c:b4:b2:e3:76:
6d:80:7e:f7:3f:2e:53:c4:69:6a:b1:da:cb:65:f5:
12:c2:2b:44:8a:b7:3c:e6:17:cf:8e:2e:6f:be:94:
6c:ac:4b:40:e2:99:d2:82:58:a9:29:38:16:c7:55:
77:fd:a8:a0:a3:2d:b3:73:90:de:b5:90:23:2f:da:
30:fb:6e:c1:17:3c:a3:f6:d1:b7:2f:e9:c3:a2:1d:
c1:98:65:c7:68:cf:3d:bd:e5:e8:3c:1e:3c:5d:49:
a7:05:2b:d5:99:15:ca:f7:a2:c9:9f:8d:cb:8b:c8:
31:75:e1:a4:a4:6e:3b:99:f7:bc:53:c6:34:cc:48:
95:c4:bd:37:45:24:4d:55:92:86:99:1f:4f:66:1b:
88:09:35:63:42:2a:b6:82:a4:2b:7b:cf:dc:42:48:
b4:23:84:c7:4a:cd:70:30:e0:1b:0e:59:e7:ca:0c:
77:89:26:7e:38:fa:6f:bf:30:ea:00:5c:74:5f:bf:
7a:90:42:6c:e6:8c:0a:03:62:e5:11:27:b8:d3:28:
b0:80:ac:a4:3a:96:2b:7f:2c:c7:0d:71:c0:a2:d7:
03:73:2f:dc:b3:1e:19:f0:9e:fb:0d:33:64:cb:cb:
59:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A9:74:EB:37:A6:B4:9A:37:1B:7C:56:D9:86:E6:5E:B4:83:5A:B3
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6a:d0:05:eb:58:05:82:10:55:cc:7d:d1:eb:7f:20:9e:13:
09:5f:26:56:56:c1:dd:d0:c8:a3:38:9a:c2:a3:37:84:93:c9:
22:2f:02:d8:7b:7a:68:97:fa:26:b2:3a:68:23:48:6e:ae:8e:
e3:bc:6b:a9:4f:a3:66:13:63:b6:8f:b7:b2:2e:ae:39:84:1a:
80:33:62:aa:58:b4:c7:da:1a:48:05:c1:08:11:11:54:51:61:
6a:27:e8:4a:e3:20:c6:08:c6:97:68:46:26:db:ba:91:8c:eb:
2c:61:7b:56:34:db:ad:21:42:3b:09:ed:ee:95:50:d8:2b:79:
16:3f:ea:a7:13:47:b6:bd:97:01:15:b6:f9:8e:f7:0e:6d:cf:
39:b8:cd:a1:73:dc:ae:4d:66:06:47:a5:5d:93:97:b5:be:93:
02:5d:1d:e2:88:9d:ec:2f:1e:c1:cf:c8:c5:f5:81:36:8e:bd:
17:cb:34:21:db:73:54:f9:80:0d:53:c8:73:68:f9:ab:d9:46:
fd:53:8e:b8:f4:31:c7:ae:ca:fd:4f:ad:33:d5:f3:9b:e3:d1:
5b:1a:aa:0b:e1:7f:33:9e:3f:69:48:22:bc:fc:b4:72:f5:c6:
f2:93:75:95:0b:a5:d2:4d:aa:86:70:22:f3:90:99:e3:49:9d:
84:ef:a7:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4Ho6Awy2F7GYcGGeyyKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYWY1YWU0NmYwNWVmZjM0NDMzYjVmMzcxMDYwZGQ0Y2Ni
ZGU0MzgwHhcNMjYwNTE2MTMwMTE4WhcNMjYwNTE3MTMwMTE4WjAzMTEwLwYDVQQD
Eyg1ZGE5NzRlYjM3YTZiNDlhMzcxYjdjNTZkOTg2ZTY1ZWI0ODM1YWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2h5xFQvPqU8S8szx2bZeU5NDCXB
1JSPPLSy43ZtgH73Py5TxGlqsdrLZfUSwitEirc85hfPji5vvpRsrEtA4pnSglip
KTgWx1V3/aigoy2zc5DetZAjL9ow+27BFzyj9tG3L+nDoh3BmGXHaM89veXoPB48
XUmnBSvVmRXK96LJn43Li8gxdeGkpG47mfe8U8Y0zEiVxL03RSRNVZKGmR9PZhuI
CTVjQiq2gqQre8/cQki0I4THSs1wMOAbDlnnygx3iSZ+OPpvvzDqAFx0X796kEJs
5owKA2LlESe40yiwgKykOpYrfyzHDXHAotcDcy/csx4Z8J77DTNky8tZfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2pdOs3prSaNxt8VtmG5l60g1qzMB8GA1UdIwQY
MBaAFKyvWuRvBe/zRDO183EGDdTMveQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgt
MTNjMmVhOTJhYTllLzEvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgtMTNjMmVhOTJhYTll
LzEvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmrQBetY
BYIQVcx90et/IJ4TCV8mVlbB3dDIoziawqM3hJPJIi8C2Ht6aJf6JrI6aCNIbq6O
47xrqU+jZhNjto+3si6uOYQagDNiqli0x9oaSAXBCBERVFFhaifoSuMgxgjGl2hG
Jtu6kYzrLGF7VjTbrSFCOwnt7pVQ2Ct5Fj/qpxNHtr2XARW2+Y73Dm3PObjNoXPc
rk1mBkelXZOXtb6TAl0d4oid7C8ewc/IxfWBNo69F8s0IdtzVPmADVPIc2j5q9lG
/VOOuPQxx67K/U+tM9Xzm+PRWxqqC+F/M54/aUgivPy0cvXG8pN1lQul0k2qhnAi
85CZ40mdhO+nPg==
-----END CERTIFICATE-----
Generated at Sat May 16 22:40:34 2026 by rpki-client