Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: DaGdvUAvBRhr1jwZz9xkt+lHHhELuiUvWm8W3U+yb84=
Subject key identifier: 0F:99:1F:B4:89:87:B1:EE:CC:09:A6:A0:D6:B1:76:E8:7A:5A:CE:CE
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 019F9248DC7C25E8794F6FE18A978E479DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 043C
Signing time: Fri 24 Jul 2026 04:01:16 +0000
Manifest this update: Fri 24 Jul 2026 04:01:16 +0000
Manifest next update: Sat 25 Jul 2026 04:01:16 +0000
Files and hashes: 1: RC8W-k4eKHGPmasSbosZROUwLd0.roa (hash: 5z5Yb5fi2XNF4cg27QOu2H4cPUEEs+tF3GD1VOWpis0=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: 1c54Onyh1GpaIAAXEtOKK9qDXT308eg7YHNlsKzXI5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:dc:7c:25:e8:79:4f:6f:e1:8a:97:8e:47:9d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Jul 24 04:01:16 2026 GMT
Not After : Jul 25 04:01:16 2026 GMT
Subject: CN=0f991fb48987b1eecc09a6a0d6b176e87a5acece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:f9:cf:a7:6e:33:02:ea:f5:96:cf:87:34:
ae:cf:4d:bf:0c:b1:cd:aa:e8:b6:dd:3d:e0:f8:2d:
c6:3f:6b:b4:38:35:be:17:af:62:f5:67:92:6b:2f:
90:f8:ba:b3:f5:15:be:0d:92:1b:89:4f:61:2c:65:
4b:89:ee:7a:41:a4:67:b9:db:db:c0:ed:8f:70:aa:
58:80:09:ca:4c:99:d8:c2:99:6e:89:ac:70:8e:f2:
51:98:95:73:12:9f:a5:67:1f:48:96:b5:00:a1:37:
e1:61:a4:5b:dc:f5:7f:55:f3:14:79:99:88:f5:8e:
0c:7f:ed:a1:f1:ce:ff:d4:66:41:e2:87:7f:f0:1a:
bd:2c:52:cd:5e:7c:71:66:9b:b6:ef:14:15:f3:32:
44:78:88:cd:16:0c:83:f3:26:8d:7a:ac:63:f4:50:
a7:72:9f:58:b1:56:16:9a:9c:96:70:5f:e9:3a:1e:
42:ee:dc:ff:d4:9c:2a:b1:b0:72:20:ca:f4:a8:9c:
fa:4d:dd:0a:49:01:07:e3:e2:3a:ad:a5:0f:90:a7:
3b:3a:0f:9b:d7:d4:c8:e5:70:e4:d4:b8:ce:c7:4b:
24:be:70:20:09:71:2d:14:96:3b:2f:93:da:d7:ce:
b4:cc:e5:ad:56:f1:8f:0d:60:74:0f:b2:e3:8c:58:
39:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:99:1F:B4:89:87:B1:EE:CC:09:A6:A0:D6:B1:76:E8:7A:5A:CE:CE
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f6:ce:e7:38:d9:f9:4b:d5:50:c3:a5:bb:81:e4:ea:ba:b4:
7a:2b:a4:d0:6d:d3:f8:69:bc:a5:45:87:c4:1b:b6:48:a8:68:
b3:d4:76:57:6f:d4:04:b9:f4:01:eb:4d:cd:89:79:df:d8:42:
60:e9:c6:c6:76:cc:cd:d2:c2:34:ee:2d:a4:0a:4b:35:51:42:
74:ee:e5:b8:28:34:45:c2:c6:49:b3:03:51:0b:1c:3f:af:08:
ba:de:2b:6a:60:b0:28:9b:7a:ee:c5:10:7c:a4:54:55:9f:ef:
34:23:2c:4f:19:53:2a:3d:9a:79:6b:79:bf:a6:6e:87:b8:08:
21:97:69:9d:72:8d:45:61:a1:b0:8f:fb:c3:8f:7b:17:32:c3:
ff:8c:13:15:62:51:96:33:65:da:08:07:9c:60:5b:96:67:83:
6a:83:8f:92:24:6b:c3:bd:66:f2:ba:c3:cd:0e:26:17:04:21:
b4:b3:b6:c4:e8:70:85:1b:3e:54:86:09:48:6e:e8:5d:9e:3f:
7a:cb:6f:be:a7:75:10:54:de:b0:bf:ba:c8:63:47:25:6e:b5:
aa:c4:0f:d2:c7:32:7d:5a:fc:57:b7:53:0e:b5:8d:49:4c:e4:
81:34:1c:74:8e:36:36:2a:24:07:a5:86:dc:9c:87:98:5d:55:
e7:b6:71:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:09:00 2026 by rpki-client