Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: d4g/QseKyt0ILpfF/m9tys7VixM6yj32QM+zykdeBPc=
Subject key identifier: 89:4E:57:E5:A5:5F:1E:DD:FF:88:BA:BF:17:E9:D0:37:4C:DA:C2:D5
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 019E1D905D8AEFB322BC6FD116BD1BED4667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 037B
Signing time: Tue 12 May 2026 19:01:00 +0000
Manifest this update: Tue 12 May 2026 19:01:00 +0000
Manifest next update: Wed 13 May 2026 19:01:00 +0000
Files and hashes: 1: RC8W-k4eKHGPmasSbosZROUwLd0.roa (hash: 5z5Yb5fi2XNF4cg27QOu2H4cPUEEs+tF3GD1VOWpis0=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: e5axs4QYHxSc5gm/ZqFr1oRDD/ao7x/7AhwjakxCb/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:5d:8a:ef:b3:22:bc:6f:d1:16:bd:1b:ed:46:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: May 12 19:01:00 2026 GMT
Not After : May 13 19:01:00 2026 GMT
Subject: CN=894e57e5a55f1eddff88babf17e9d0374cdac2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:9f:48:a0:0b:66:fe:ae:2c:f4:22:a0:37:
2b:da:e4:64:16:99:72:8d:5c:c9:77:ea:17:20:13:
dd:9a:d6:3e:67:de:2f:8c:02:d4:0f:84:17:a1:65:
19:5d:ea:fc:9d:7c:89:eb:59:a1:55:cb:00:77:c4:
d4:1e:b4:48:9b:83:e7:aa:7d:87:08:30:86:36:e8:
1c:85:7a:77:ad:fe:3e:15:b4:33:6d:fc:b0:13:0d:
13:c6:fd:ca:4e:47:d9:fa:e7:bc:65:72:8f:be:74:
9d:3a:d3:c1:ae:64:a1:59:0a:da:7d:d6:98:e3:b7:
38:2e:7e:f0:4b:f1:81:c3:f1:ef:00:87:8c:02:cd:
77:20:23:10:32:24:2f:b3:ae:f1:0a:73:06:1f:98:
8a:fe:cf:c1:22:1b:fd:23:00:13:f1:19:fb:d5:72:
c3:6f:ce:c1:1b:c2:5b:a4:90:e2:bc:75:1b:fc:1a:
b6:3b:43:80:21:43:92:8a:4c:70:b4:43:23:43:dc:
d4:51:4f:0c:8e:6c:1c:ee:54:49:6a:4c:a8:3c:23:
53:0c:7d:7c:b4:50:e4:85:00:42:76:fd:1f:45:42:
55:3a:02:b7:73:44:be:ed:13:7d:04:1e:9f:10:80:
d7:9c:04:87:0f:f1:fb:79:cf:93:7c:e5:60:32:cf:
e7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4E:57:E5:A5:5F:1E:DD:FF:88:BA:BF:17:E9:D0:37:4C:DA:C2:D5
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:63:6a:39:7b:4e:11:2d:06:ab:85:b4:4e:3e:bf:5c:55:c1:
9b:53:6b:c8:b3:45:da:57:7e:d5:f4:9e:b9:48:59:bb:a5:c2:
6c:aa:b2:71:09:31:b4:56:4b:80:fa:63:01:f6:65:09:23:6f:
e4:84:fc:de:cb:bb:16:90:43:73:82:4f:8c:d1:f8:d9:24:d5:
54:35:3f:7d:cf:f7:9d:2a:42:48:b8:59:3d:b1:19:21:68:7f:
d3:60:1b:87:2a:db:33:be:16:d1:ec:6c:72:43:25:1c:43:ee:
07:64:cf:08:2e:a2:4b:ee:0a:29:50:ce:a1:6d:33:85:7c:b3:
4e:b3:b8:86:4f:e0:e1:60:a0:03:73:a3:6c:34:2a:f3:db:2f:
5c:4a:ae:8f:15:0b:27:c9:3e:97:66:71:97:31:c2:41:68:8d:
c4:7c:8b:58:24:ac:be:60:b6:bf:ea:ca:6c:ec:fe:18:c8:0a:
6d:e1:40:93:92:94:5a:16:e6:fc:f0:ad:95:e8:92:5a:de:17:
f0:45:20:2a:39:c5:79:62:19:d4:a8:c9:76:e5:a7:a4:9a:5f:
3c:be:7a:c2:e9:fb:b5:63:2d:9f:49:62:3a:29:ec:ce:11:a2:
44:98:a5:61:de:97:5d:ab:78:4e:50:84:80:ae:5f:89:d0:b5:
7b:99:28:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:39 2026 by rpki-client