Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: Y/QFXppWnD7bNqv8laRv6jjcXIqSv8ZUfF7YbksykK0=
Subject key identifier: 8D:C1:BC:FE:68:5D:E5:59:B3:25:70:67:CC:20:74:42:70:C2:49:13
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 01A0024B04A95E26D9697FFAA071C006CFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 0476
Signing time: Fri 14 Aug 2026 22:01:05 +0000
Manifest this update: Fri 14 Aug 2026 22:01:05 +0000
Manifest next update: Sat 15 Aug 2026 22:01:05 +0000
Files and hashes: 1: RC8W-k4eKHGPmasSbosZROUwLd0.roa (hash: 5z5Yb5fi2XNF4cg27QOu2H4cPUEEs+tF3GD1VOWpis0=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: x2N3QQKk5FYh5rG4cWe/SUonLNgTcPVNpEhMpIL4rDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:04:a9:5e:26:d9:69:7f:fa:a0:71:c0:06:cf:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Aug 14 22:01:05 2026 GMT
Not After : Aug 15 22:01:05 2026 GMT
Subject: CN=8dc1bcfe685de559b3257067cc20744270c24913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:84:c6:fb:83:7a:0c:13:62:89:24:d3:20:2a:
7c:50:ee:17:20:ed:59:65:9f:08:a1:14:93:b6:7c:
4e:81:ef:64:a2:be:32:14:4c:1b:f3:a5:0b:0d:30:
a0:83:e7:01:d4:6a:2d:7c:bd:f0:f9:7e:ea:7a:93:
f3:bc:a7:30:dc:ea:a2:17:66:50:41:5d:e2:8e:94:
83:df:f4:19:bf:35:0e:6e:a1:a5:d2:c8:40:dc:90:
ba:20:35:f9:fd:20:1f:dd:36:15:36:9d:04:aa:40:
2a:2e:8b:57:bc:39:e5:a7:cd:5c:77:75:40:ed:c5:
c7:09:f4:bc:3c:f4:26:3a:c6:ac:5b:eb:ac:21:af:
c1:38:52:ac:85:bf:04:5e:2b:a4:69:e0:9a:d6:af:
ab:2b:d4:3a:b1:6c:95:f6:c6:70:86:23:90:40:1d:
76:c5:be:52:f6:2b:bb:58:fb:25:6e:24:2c:0e:21:
80:b8:fd:e9:2d:c9:c9:5b:fe:9c:de:7f:9e:07:38:
f5:e4:2e:85:13:c3:af:99:9c:e1:99:fa:37:0f:10:
7c:1e:95:a1:c4:e4:5a:5b:ae:58:c1:cd:60:5b:08:
7f:52:b4:38:26:65:e5:60:ec:2f:e1:cf:bb:a6:3c:
15:71:75:c4:a1:59:1a:1a:af:c9:e3:79:f1:d9:84:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C1:BC:FE:68:5D:E5:59:B3:25:70:67:CC:20:74:42:70:C2:49:13
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8e:9b:d7:c9:87:94:cb:dc:7f:da:bc:6f:3e:14:e7:bd:8c:
3e:0b:e9:35:82:23:32:f6:1d:08:b7:63:17:4f:3c:68:48:6a:
9f:52:1d:d6:2b:b9:13:b0:ee:73:ba:c0:5e:ca:45:3c:ba:0a:
4f:5b:09:21:c1:9d:23:92:c1:ce:26:c8:8a:c2:bf:31:19:c0:
ed:5f:da:81:76:42:df:f4:4a:0f:12:6e:ec:81:5f:7c:d6:13:
f6:0c:2c:86:9c:b3:b8:48:3b:68:cb:93:0c:ec:09:0a:e4:66:
29:16:9d:54:8c:b6:3d:26:86:32:94:50:84:3f:79:f0:f7:33:
1d:48:95:f5:85:89:d0:98:c5:38:fb:32:8f:7c:db:a6:9c:5f:
70:e5:ec:22:0d:ba:51:57:21:52:2d:d1:93:54:47:84:47:e7:
d0:3c:56:33:ee:0b:de:5c:a5:43:64:40:a4:55:bf:d9:45:9d:
7a:cf:27:55:0b:18:aa:38:3d:d5:dd:b7:42:1e:71:1f:ed:03:
47:e9:74:57:50:cb:d8:da:0a:50:c4:3d:6e:04:57:75:7e:94:
73:6c:5e:32:19:cf:d4:68:07:d9:db:82:43:5f:36:38:ff:0c:
e2:5f:5f:83:1f:f0:6e:a6:c4:2a:0d:9b:9b:c6:9b:a9:ef:84:
9f:bf:8d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:28:17 2026 by rpki-client