Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier: l9A7zkYnY7tA7YNAxfHBAkk2y9GgoICigkEFP5NyVpk=
Subject key identifier: E3:8E:95:92:EB:8A:FC:A3:AE:42:15:99:E2:2C:B5:BF:5B:DE:33:3F
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial: 019FA9E2E42464BC1E2FC01D8BD2290002A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number: 0EA4
Signing time: Tue 28 Jul 2026 18:00:46 +0000
Manifest this update: Tue 28 Jul 2026 18:00:46 +0000
Manifest next update: Wed 29 Jul 2026 18:00:46 +0000
Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: WPZBSltTZxOkNaTBd8nGvONdk+kjExSUu5YtKkZ05bE=)
2: xhDUoIsJaJCqOA6VTkyeMee_Z9s.roa (hash: bDCv1HCZJO4EbMKAw0lf46zS80bqNn1qKkmrw6hFSH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:e4:24:64:bc:1e:2f:c0:1d:8b:d2:29:00:02:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Validity
Not Before: Jul 28 18:00:46 2026 GMT
Not After : Jul 29 18:00:46 2026 GMT
Subject: CN=e38e9592eb8afca3ae421599e22cb5bf5bde333f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:d7:c3:ac:79:e6:d9:4f:80:a6:57:de:2f:
73:d2:57:0f:14:72:6c:10:7e:e5:3f:8c:f7:09:f3:
da:3c:ae:c5:b2:f1:73:39:b5:b5:6f:39:9f:dd:f7:
57:99:06:71:f8:1d:5d:05:0e:0b:a6:37:d8:83:f2:
ff:07:f6:5d:f9:17:83:83:e5:b7:28:7d:9f:61:99:
40:98:3f:df:c3:5f:2f:8b:c7:be:35:0f:c1:db:be:
03:06:c0:04:a0:d2:49:d1:8d:c3:f1:d4:50:8b:32:
11:c9:f9:63:ac:6a:cb:d8:fa:64:7a:7a:54:bc:30:
39:0f:af:ed:10:18:9c:c6:09:0d:95:ac:14:c0:7d:
46:5f:40:dd:6e:7f:b3:66:f6:a7:c3:c6:f2:78:29:
58:d8:16:78:01:3d:89:9c:7a:76:30:92:32:ed:6d:
2a:f5:f7:a7:5d:d6:22:6b:29:f5:56:59:02:16:0f:
c6:01:19:25:b2:0c:c9:0c:15:4f:b3:22:9f:53:6a:
ae:89:10:2a:db:d5:70:30:b9:81:1e:f5:45:0a:01:
f1:99:64:60:d5:f5:65:da:32:cb:e7:6f:cc:6e:df:
17:56:55:48:29:78:bd:af:01:7b:5f:60:ee:e1:20:
dc:85:be:89:80:69:85:c1:8c:56:17:03:88:4f:c6:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:95:92:EB:8A:FC:A3:AE:42:15:99:E2:2C:B5:BF:5B:DE:33:3F
X509v3 Authority Key Identifier:
keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:01:87:37:87:63:73:f4:8c:a2:b9:fe:2e:ab:af:36:52:d7:
96:6a:ab:26:22:1b:ef:d3:c8:77:25:21:87:32:b1:93:89:4d:
6c:7b:18:1c:88:d5:6c:10:f2:be:ee:4e:91:e4:b1:03:3d:f5:
f4:83:6b:f2:30:8c:f8:ac:8f:91:c8:13:21:78:30:3c:94:c6:
32:bb:35:b0:bb:97:50:a4:92:ea:a6:cf:11:61:f2:ab:ae:16:
bb:73:14:51:ee:f5:50:bb:ec:4e:0e:c6:b7:5b:84:0d:ae:3e:
fb:8b:8b:18:e7:bc:35:68:aa:d3:38:c4:d2:6a:aa:a1:58:3b:
62:15:1c:6d:c6:69:60:84:10:f4:20:c1:07:21:93:77:d8:fe:
58:5b:70:3e:de:9d:13:0b:eb:ba:cc:50:a2:1b:50:1c:ca:8b:
db:46:fb:4f:d8:4c:0b:ac:e3:d2:5c:47:f6:17:78:6e:ad:ec:
f8:c5:b5:89:6c:c2:b0:52:96:6d:e7:0c:24:cc:a5:3d:ac:44:
32:5e:eb:2d:ee:7a:80:c7:51:1b:08:a1:3f:32:cb:a4:7c:84:
36:0a:d7:ef:6b:bc:34:55:a6:3c:05:b7:5f:e8:82:04:ba:a2:
6e:f0:b6:a9:15:b2:37:7a:45:31:c2:48:b4:a6:a6:48:d6:c4:
59:5d:42:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:32 2026 by rpki-client