Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: rcMRjyz5deshtkWmNeRtHtLiFJHExRjJDMf5sd0hdjg=
Subject key identifier: B1:1F:B2:40:83:14:98:79:34:48:0E:85:0E:7D:51:80:D0:5D:99:02
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 019F1A8CF7CB29CF1B7AC58438E48EFCADD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 03FE
Signing time: Tue 30 Jun 2026 22:01:13 +0000
Manifest this update: Tue 30 Jun 2026 22:01:13 +0000
Manifest next update: Wed 01 Jul 2026 22:01:13 +0000
Files and hashes: 1: RC8W-k4eKHGPmasSbosZROUwLd0.roa (hash: 5z5Yb5fi2XNF4cg27QOu2H4cPUEEs+tF3GD1VOWpis0=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: JcAJ32HNeSeu7kTc/ufYb8TCHedW3cbWATtD3sfaj/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:8c:f7:cb:29:cf:1b:7a:c5:84:38:e4:8e:fc:ad:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Jun 30 22:01:13 2026 GMT
Not After : Jul 1 22:01:13 2026 GMT
Subject: CN=b11fb2408314987934480e850e7d5180d05d9902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:aa:aa:d6:97:e4:ad:62:91:09:4a:5d:26:8c:
7f:1c:16:94:02:a2:67:e4:01:d1:b0:06:76:9c:59:
46:8a:0d:1e:de:5e:a2:57:f2:c0:f1:44:ef:fe:17:
33:f1:98:b1:29:13:51:a5:a7:ad:aa:53:2f:cd:a4:
a6:97:86:87:6d:a2:0c:67:18:08:dc:f8:5f:6c:6e:
c6:9a:ce:77:89:14:f1:ca:1e:fc:cb:34:d3:2e:8e:
6e:da:c2:64:6b:4d:70:b1:70:cf:3b:5a:a7:2b:86:
c5:8f:c4:05:98:3e:8c:97:4e:22:79:b4:3e:d5:e1:
85:7f:a7:c7:70:ef:35:0d:5d:f9:65:da:71:c0:4e:
15:c1:5f:ec:7a:e8:1b:e9:7b:b1:70:5c:bf:36:e7:
40:88:73:eb:b6:4d:df:e5:34:dc:b5:c4:68:1d:78:
b9:48:25:8e:d7:70:3c:42:e0:1c:a2:9f:6d:b2:c2:
06:b1:5b:93:fb:78:fe:c7:f9:00:f7:04:93:b1:b4:
78:22:ca:88:b8:21:06:f6:37:8a:4c:b8:ef:20:29:
a2:7e:ee:cd:5d:04:2c:ac:83:b5:d2:aa:8f:c0:a1:
c8:05:52:f8:ee:97:0c:b8:7d:bd:45:b9:46:52:8d:
8f:03:85:c7:2b:a3:3b:11:11:33:8c:72:c9:b7:2e:
3e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1F:B2:40:83:14:98:79:34:48:0E:85:0E:7D:51:80:D0:5D:99:02
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:34:84:26:57:50:6f:c5:6d:9d:54:f9:40:ed:ee:47:ff:0e:
f9:67:d8:77:3c:a8:27:4d:30:43:66:1a:06:cf:9a:e1:3b:63:
24:0c:a2:a6:6e:01:2b:34:bd:85:eb:7a:66:32:3a:0a:e5:06:
9f:46:0a:74:0b:70:6a:ad:b4:2d:40:54:8a:c5:cf:4e:28:e9:
30:70:83:91:e7:89:e8:c2:60:a7:f6:ce:51:da:a3:b1:36:75:
56:d4:a6:2d:f0:d1:34:6f:85:21:53:b4:2c:e2:59:21:90:cd:
67:b2:23:85:6c:e7:00:97:61:25:0d:29:1a:08:b7:c4:d9:ac:
9f:4c:9f:13:a3:62:db:b7:b1:76:2e:ef:ab:a7:7a:20:e2:81:
f8:0b:f0:69:54:34:e2:0a:f9:7d:6d:ea:bb:96:9e:7f:4a:0a:
a5:14:03:ef:2d:32:c3:43:78:77:d1:cf:c8:e5:12:25:52:7a:
12:f4:b8:6e:ae:84:d1:a7:e8:89:20:2a:a8:e1:db:bf:1b:df:
50:5b:29:64:a2:51:f6:51:54:eb:47:00:9b:22:01:e1:57:56:
3c:c8:7c:22:46:a7:1a:2b:65:d8:0c:25:5f:47:86:cb:f6:18:
6f:be:d0:66:a4:57:5d:54:22:81:58:fd:78:ee:d5:52:5f:05:
e6:21:e7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:32:01 2026 by rpki-client