Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: KwBNScGvaIccuMCqawviubZFUPaGi+ozYIn5wp/n2CQ=
Subject key identifier: 9B:8B:7A:29:8C:EE:D1:18:12:3D:28:AE:66:1B:72:1D:82:B8:69:21
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 019D284D8E678894D2369F07979A92459BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 02FC
Signing time: Thu 26 Mar 2026 04:01:04 +0000
Manifest this update: Thu 26 Mar 2026 04:01:04 +0000
Manifest next update: Fri 27 Mar 2026 04:01:04 +0000
Files and hashes: 1: RC8W-k4eKHGPmasSbosZROUwLd0.roa (hash: 5z5Yb5fi2XNF4cg27QOu2H4cPUEEs+tF3GD1VOWpis0=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: 9NGygvjiKst6Dm6+uakIs2sYoFnnvzTTrOtZ2RodGhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:8e:67:88:94:d2:36:9f:07:97:9a:92:45:9b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Mar 26 04:01:04 2026 GMT
Not After : Mar 27 04:01:04 2026 GMT
Subject: CN=9b8b7a298ceed118123d28ae661b721d82b86921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:ca:63:41:18:a9:20:20:c4:3b:23:65:3b:
3f:0e:75:b6:0e:b7:78:8b:5a:4b:96:35:d0:69:91:
a2:c8:13:61:77:8c:6e:47:b0:7d:1f:9d:c6:3c:62:
38:ad:e3:31:16:2d:90:43:8a:2b:2b:77:ce:65:2f:
4c:5e:f7:1c:d2:54:b5:9b:7d:38:e3:7e:22:7e:9c:
24:88:b9:91:5c:97:87:7d:b5:fa:cf:a7:12:b5:45:
fe:66:59:a9:ef:63:d1:f9:e1:42:cc:e6:73:e2:05:
68:77:e0:11:e8:7f:5b:27:55:9c:ca:26:44:fd:cf:
a2:c5:ce:0c:14:c5:c3:3e:b9:77:f5:1c:22:01:5c:
47:2b:a0:9e:13:6b:86:06:c3:94:68:ea:86:8b:b2:
9b:3e:ff:6b:dd:40:be:48:e0:33:83:9c:f1:40:46:
93:d9:47:ca:0b:f3:8c:db:2f:36:d9:8d:5f:38:60:
42:85:8a:b4:11:64:94:08:23:18:d6:fb:15:3b:54:
a7:c3:6f:58:06:20:e4:13:73:04:8e:26:46:de:ff:
4a:54:4e:09:8c:01:da:b2:ba:7c:33:e9:2d:6e:0e:
43:d7:64:98:51:9d:9b:fa:b8:bf:9a:f3:93:cf:83:
36:5f:ca:a5:e5:40:cc:dd:d9:cf:19:99:89:80:16:
4d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8B:7A:29:8C:EE:D1:18:12:3D:28:AE:66:1B:72:1D:82:B8:69:21
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:43:7c:fa:90:9b:90:2a:86:0f:bb:4e:b8:54:49:9f:99:7a:
f9:8e:bd:1b:88:22:99:3c:5c:34:82:d9:0f:dd:3f:de:39:0e:
ab:2b:f3:83:ac:a8:e4:42:1e:16:de:af:c6:dd:ce:1d:c3:60:
7e:4c:80:e8:02:66:ad:f5:a2:bf:e5:d7:76:a8:0c:2b:43:b3:
be:83:df:29:a5:af:b0:13:9e:1d:01:cd:56:a2:f6:3d:48:9e:
7f:da:c1:5a:a7:5e:11:79:04:fd:1a:4d:7d:3c:e1:45:be:d2:
28:36:39:52:9b:fe:02:db:32:df:f3:4a:7c:df:df:0f:16:b6:
f8:17:d2:cf:1a:d2:71:cc:52:b5:10:11:21:9f:fa:4c:44:97:
66:e7:c5:e6:56:ec:89:ba:e7:f7:93:11:4c:c0:2c:c5:ac:83:
aa:52:e2:e1:90:7c:41:b7:8d:32:4d:84:91:f5:72:d2:a4:c6:
5b:85:8b:0d:63:39:ff:0b:d6:bb:2a:0d:71:7d:08:5f:c9:1e:
f4:04:83:4d:7d:5d:48:63:37:67:db:5f:20:13:c2:2f:05:4a:
92:54:f1:71:27:6a:3a:a6:03:36:2c:e0:72:ff:78:09:0d:38:
89:c1:a3:90:d4:72:08:27:e6:8e:ec:5a:f8:b7:05:db:b7:b4:
a6:50:de:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:14:14 2026 by rpki-client