Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: Cl/4RFEA/2jGw3OSYo7AdJ1O9frKDPQi/hoJeovqEeU=
Subject key identifier: 37:43:72:43:14:8A:16:2A:F2:FF:8C:65:9A:00:BC:1D:0C:84:41:AE
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 01A14C86791044E7D9C0CB4A7B1E8783B9BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 0521
Signing time: Sun 18 Oct 2026 01:00:43 +0000
Manifest this update: Sun 18 Oct 2026 01:00:43 +0000
Manifest next update: Mon 19 Oct 2026 01:00:43 +0000
Files and hashes: 1: RC8W-k4eKHGPmasSbosZROUwLd0.roa (hash: 5z5Yb5fi2XNF4cg27QOu2H4cPUEEs+tF3GD1VOWpis0=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: HoEoYfuLQXC6khvfPdxpuoY2m9RYhU1b0vNw8nukSMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:86:79:10:44:e7:d9:c0:cb:4a:7b:1e:87:83:b9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Oct 18 01:00:43 2026 GMT
Not After : Oct 19 01:00:43 2026 GMT
Subject: CN=37437243148a162af2ff8c659a00bc1d0c8441ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d2:fc:6c:01:2b:18:e6:d4:e0:39:7f:3f:f4:
f0:e1:0d:17:5d:4e:11:35:41:65:5a:74:b3:1a:ba:
cd:e3:a5:d8:19:ec:5d:82:39:f8:d4:2d:ed:ca:5f:
aa:d8:1f:c3:31:f6:4b:f7:b9:bb:f0:ba:ba:ee:a9:
3a:de:b0:8e:d6:f1:7e:d2:8f:07:f9:89:93:9a:c0:
49:41:17:f7:d3:22:61:ba:58:8b:4c:7a:88:e4:2a:
c2:d5:d3:0d:ec:3f:f3:15:68:3e:1b:78:fe:ee:f3:
81:50:c7:16:ee:f8:b2:26:9f:98:69:5e:47:4b:cb:
6e:1c:aa:51:57:6d:b0:00:e4:20:24:af:80:bb:a0:
71:6c:61:c7:e6:1a:17:eb:8b:27:ed:0f:dc:13:c3:
96:b6:69:fe:d9:2c:1e:2b:1a:aa:a9:4d:15:73:be:
65:7b:ac:50:e6:59:9c:17:df:62:44:e1:57:e0:ae:
20:be:67:1b:92:d1:f2:b4:ce:d7:a2:59:57:70:f8:
ce:34:03:45:e1:81:b1:c1:0c:15:23:f6:00:05:cd:
23:78:d0:bb:19:35:38:94:1b:ea:d6:ea:42:05:22:
ab:14:56:84:09:d6:fe:7c:77:e3:62:4d:81:b1:d2:
4c:94:3f:ea:32:98:21:b9:1b:9c:6b:12:39:04:de:
b3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:43:72:43:14:8A:16:2A:F2:FF:8C:65:9A:00:BC:1D:0C:84:41:AE
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b5:3d:33:1b:42:a0:4d:d8:9d:8e:70:a6:da:46:7f:b6:a3:
86:cf:5d:41:b9:ce:c0:88:8d:89:d9:91:3a:eb:bd:bf:f7:83:
2c:7d:69:37:c5:eb:2b:5b:51:8b:f4:4d:85:ad:0c:f5:5e:18:
c7:0d:81:f3:f4:e7:05:6c:0a:35:81:76:45:27:02:93:b8:09:
26:17:b6:de:7c:ec:af:46:49:e6:f4:92:0d:ce:b8:c6:bd:68:
6f:a9:fc:1d:ca:ab:ca:61:42:ba:ec:9c:a4:ad:f8:d3:44:4e:
8f:fc:f4:4d:32:12:83:23:81:9c:45:24:49:bf:2f:3f:9e:97:
33:fd:97:1c:f3:f2:46:72:6f:68:b1:68:2d:33:91:e8:4b:9e:
68:92:04:b2:16:ee:fc:81:b5:6a:35:3c:d2:27:08:58:19:69:
13:de:ac:ef:f9:70:a4:d2:9d:aa:9f:70:bb:45:ce:09:d5:22:
2b:c8:b1:ae:56:9d:ba:59:93:17:f2:67:5c:67:49:2a:d7:b6:
ff:a6:8b:1c:06:58:a3:f4:6b:06:a5:6e:78:2e:0f:b8:a0:4c:
40:59:00:81:08:05:c4:e0:87:c3:db:05:52:04:4a:ad:c7:46:
96:90:2d:f7:88:8c:3b:0f:97:23:29:eb:97:77:f0:b6:6a:94:
c4:d0:62:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:34:08 2026 by rpki-client