Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: QK9v5AzOOqGmdWILYiri3FFot+w9lKvu32FBVKbh7Zc=
Subject key identifier: 88:4C:F5:BD:69:7E:CF:05:0D:C9:24:26:DA:A4:49:EC:33:A5:4A:BC
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 01A08BD637D4B758D110239405577F80C736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 15:01:07 +0000
Manifest this update: Thu 10 Sep 2026 15:01:07 +0000
Manifest next update: Fri 11 Sep 2026 15:01:07 +0000
Files and hashes: 1: GM2WJN9_ezB4uJBKr6KMD-BXxpU.roa (hash: 9qjsgV72QPwQBNdaD4BbTgE2UrBD6jAtMEwROmmWrt4=)
2: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: 0gbAJe2CzciUuAzFSe1DKAkhoid7YluKKO4C4np2onw=)
3: j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa (hash: o6TreCVefDSXu+8rGe91JOOHIeWosH7WbE6szGGOzyU=)
4: qi5ZA3URPRKBFcrvMJgvff_lQec.roa (hash: pa4ExeDHOU0ec+F0w6UxxhQnL3A60YOMhjxZLKiRPHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:37:d4:b7:58:d1:10:23:94:05:57:7f:80:c7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Sep 10 15:01:07 2026 GMT
Not After : Sep 11 15:01:07 2026 GMT
Subject: CN=884cf5bd697ecf050dc92426daa449ec33a54abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:b2:b8:67:c7:d3:ea:9a:f2:dd:eb:43:a1:
a2:8d:6f:b2:b7:33:c8:08:d1:46:8d:de:e2:85:7d:
73:66:5f:98:be:60:80:34:f4:a7:c4:ad:27:d8:8c:
7a:3f:b3:71:5f:70:e3:a9:c3:69:a8:6c:49:e7:9e:
06:e5:90:b0:95:32:b9:c7:eb:03:51:ff:bf:94:22:
72:84:b4:bc:26:3a:72:6e:97:93:86:4b:20:7f:69:
fb:8f:f6:c3:5b:c6:48:43:42:00:5a:3c:d3:0c:4b:
cc:f2:f7:24:05:fb:90:a6:1f:dd:72:78:49:58:38:
41:76:ea:a3:86:84:14:ba:07:8d:10:2a:09:24:8a:
53:1b:74:8a:03:3e:6e:f6:71:b2:ff:fb:31:d5:5f:
26:b6:3d:b7:6a:4e:46:15:05:85:82:3d:f8:d2:ea:
0f:07:41:ec:66:e3:db:b0:59:50:cd:6f:48:b8:54:
a9:fd:ac:19:b7:5a:84:54:08:0f:c2:9a:89:77:c4:
64:db:ec:dd:a5:55:21:64:d1:66:08:9d:28:a4:14:
48:9b:b2:c3:da:2c:04:92:16:58:de:c5:11:7d:08:
52:d7:b8:e2:96:89:5e:64:41:4a:3c:7d:d1:0c:eb:
9b:2f:86:4c:90:0f:9c:39:19:1c:4e:13:eb:17:9a:
e0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4C:F5:BD:69:7E:CF:05:0D:C9:24:26:DA:A4:49:EC:33:A5:4A:BC
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e2:86:92:87:26:1c:12:f8:ee:c2:53:96:39:90:8f:af:e8:
40:a2:3f:4e:c0:48:7d:ec:6f:80:f6:28:ee:69:16:41:42:ea:
7d:e0:aa:b1:bb:e8:f5:34:58:ae:38:a8:1a:18:7a:fb:d2:d8:
59:23:f9:6e:b2:cb:af:9f:ad:f9:f6:b6:18:f5:27:7e:1c:a1:
9d:75:2b:17:89:a7:03:7e:1a:7a:26:31:e1:b3:01:6b:97:24:
c3:d3:38:be:71:6b:42:3c:99:7b:2c:51:8e:a8:7c:2a:ab:fc:
d3:df:6e:61:a4:66:de:0b:c2:52:7b:7b:52:1f:99:1c:ef:34:
95:e2:38:39:ee:05:8a:c4:1d:9a:13:37:65:a3:32:88:75:21:
f0:8c:80:e5:cd:1e:a5:22:5d:43:8a:08:dc:5a:95:1c:5b:f6:
00:90:92:c4:60:b8:f4:f0:d3:06:b3:07:33:4e:3b:24:bd:73:
1c:4c:63:09:f0:c8:ea:eb:80:95:aa:47:90:c4:7d:c0:7a:2c:
25:3e:04:b3:94:58:1d:4c:20:0b:96:88:9d:c1:05:16:ee:b9:
5f:8a:11:3c:49:28:d9:30:76:8c:a5:44:c2:21:11:0b:75:f1:
9b:ad:e8:e4:0f:07:3b:e4:a7:c0:6c:b7:49:f0:bd:c9:21:ad:
f8:a6:a9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:56:09 2026 by rpki-client