Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: wVeclMmlPTfUFgBo00kh/oXsg34GkKK52aAUKZ4/6n4=
Subject key identifier: 49:44:B4:F0:37:05:F1:B4:06:C0:8B:56:19:3B:8D:61:0F:8C:53:CE
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 01A0D8A83E990B094BC3501A93454AB45411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 04E5
Signing time: Fri 25 Sep 2026 13:01:39 +0000
Manifest this update: Fri 25 Sep 2026 13:01:39 +0000
Manifest next update: Sat 26 Sep 2026 13:01:39 +0000
Files and hashes: 1: RC8W-k4eKHGPmasSbosZROUwLd0.roa (hash: 5z5Yb5fi2XNF4cg27QOu2H4cPUEEs+tF3GD1VOWpis0=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: eJaMgR9fZv8LmvsG5fQv2k/IcCuXu34JYML7lLjviO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:3e:99:0b:09:4b:c3:50:1a:93:45:4a:b4:54:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Sep 25 13:01:39 2026 GMT
Not After : Sep 26 13:01:39 2026 GMT
Subject: CN=4944b4f03705f1b406c08b56193b8d610f8c53ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e3:88:91:c9:22:4c:f0:6e:7e:87:6b:22:59:
e7:12:5b:7e:93:98:89:9d:ef:0e:64:eb:05:09:a8:
63:da:d1:e9:d5:53:43:04:75:11:21:0d:34:83:55:
0c:00:3c:6b:d6:6c:9f:8c:0a:23:df:39:39:3f:95:
f4:e5:f3:fb:4b:23:9f:f7:0a:ee:32:75:38:be:c2:
86:02:ee:0a:bd:14:fc:20:a7:5f:fe:c2:5d:f8:b0:
4f:1c:4b:63:95:6f:03:af:13:83:d8:8d:60:82:17:
d8:fd:6c:81:b9:d8:dd:54:cc:19:4b:66:f1:0b:7e:
4a:69:a1:ec:7d:b6:01:ef:3f:9d:7d:6d:18:b9:6d:
ff:16:5d:51:3a:9a:41:84:38:eb:b8:5f:de:dc:84:
83:e7:c2:92:59:7d:67:0b:ad:f1:9b:67:ab:a9:ca:
d7:fc:b3:84:e6:5e:36:9b:08:83:8c:2c:f3:15:10:
0c:02:11:bb:1b:7a:4a:09:41:e2:32:72:92:f6:b7:
ad:b5:90:0b:14:92:fa:d8:b2:a8:99:8d:f5:4b:b5:
6c:20:79:2b:d9:93:7f:29:0f:28:56:f1:c9:66:95:
b5:ce:a3:7e:22:f7:82:b8:c0:9e:60:a8:e7:39:1d:
3f:14:0a:48:08:9b:9f:98:74:33:bb:76:00:c3:57:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:44:B4:F0:37:05:F1:B4:06:C0:8B:56:19:3B:8D:61:0F:8C:53:CE
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7c:ac:09:93:72:ff:3a:22:14:25:8e:83:c1:1d:b5:05:13:
3b:52:7e:d6:b3:5d:6d:60:14:f6:a0:28:5e:ea:b6:92:dd:4f:
64:c7:c9:88:c2:7d:6a:09:29:50:42:03:b6:d8:8a:25:6c:cf:
7a:38:8e:d1:19:97:62:c4:e6:ca:de:4f:c9:3a:53:10:5a:b2:
71:ab:67:61:cd:f3:d1:a7:58:8b:b9:87:24:8f:88:a8:39:d7:
5f:af:4d:ca:ae:22:ab:0b:11:9d:a1:04:ad:6d:57:bc:dd:94:
f5:77:97:b6:15:53:8f:34:80:9f:66:05:70:c6:09:9b:15:0f:
a0:f6:21:ff:b2:ad:23:e9:bd:9e:2e:af:4b:95:db:17:23:59:
a5:9d:96:85:cd:fa:0e:ae:86:8f:27:5a:73:23:3c:2f:70:38:
a7:4e:2f:bf:38:f8:bd:7f:0b:6d:78:c1:a6:45:3b:ed:95:49:
99:b1:07:42:e2:cc:80:29:48:5b:69:e6:ee:ac:68:47:e7:6d:
fb:5b:1f:63:c4:7f:ed:de:4b:f8:78:9b:bb:96:66:cb:a5:e9:
50:0e:01:bc:2e:7d:af:5d:b7:c9:f5:25:91:b3:a2:19:5a:61:
2b:95:4e:23:75:0c:b2:cd:81:23:9e:75:70:e2:34:e9:89:c3:
26:9b:df:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:24:20 2026 by rpki-client