Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: DwCFNzwoWsDofbeYK9g1nA9bkuO3rGUWpVMZoV6WbUc=
Subject key identifier: F8:14:3C:DF:55:44:89:44:FB:FA:79:0A:72:71:14:25:B5:4F:AE:55
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 01A0C745D1C55E52C2C041BFA3E2B67FDE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 04DC
Signing time: Tue 22 Sep 2026 04:00:36 +0000
Manifest this update: Tue 22 Sep 2026 04:00:36 +0000
Manifest next update: Wed 23 Sep 2026 04:00:36 +0000
Files and hashes: 1: RC8W-k4eKHGPmasSbosZROUwLd0.roa (hash: 5z5Yb5fi2XNF4cg27QOu2H4cPUEEs+tF3GD1VOWpis0=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: okQE1ts63IicweZEBC/xQMS3CumADLuWPAiEKaGe/ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:45:d1:c5:5e:52:c2:c0:41:bf:a3:e2:b6:7f:de:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Sep 22 04:00:36 2026 GMT
Not After : Sep 23 04:00:36 2026 GMT
Subject: CN=f8143cdf55448944fbfa790a72711425b54fae55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:1e:1b:a9:cc:13:1b:33:8d:49:02:a1:f8:
b4:38:e5:87:37:63:ba:e4:0b:6a:93:a1:0d:7e:27:
4e:1b:e0:3c:07:a2:fd:16:e9:ca:67:56:59:14:aa:
98:fe:a4:95:78:49:c4:10:4c:99:08:46:39:43:71:
21:cd:8d:ee:0c:80:d6:49:ec:32:04:cb:ec:ad:64:
54:cd:35:65:45:2b:b0:37:ea:18:f7:13:46:d3:e6:
a3:6b:b5:ad:21:02:86:e3:40:83:aa:0e:14:2d:27:
61:cc:e7:23:73:fd:ff:85:ab:fd:53:e6:55:54:70:
b0:38:3d:51:f5:53:fe:1f:ba:b6:1c:09:23:cd:aa:
04:17:07:99:fb:ba:aa:a9:94:9f:86:97:c7:5c:29:
0b:04:60:65:c3:1d:e1:37:ab:bd:11:35:22:ce:5d:
b8:ea:0f:61:3a:fe:f7:6d:cf:55:37:be:8e:82:6c:
86:6e:8b:ff:e1:7a:fb:32:98:ea:23:14:e9:c3:8b:
9d:6a:5d:b8:9f:73:cf:06:31:63:27:24:9a:bd:16:
ed:2d:ba:ab:b9:df:8e:02:3a:37:4e:51:36:45:bc:
73:da:fa:cb:8a:0a:12:83:8f:e6:ec:ca:02:91:7f:
1b:6f:0d:ab:84:25:5f:f0:f4:45:d8:22:4e:46:ea:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:14:3C:DF:55:44:89:44:FB:FA:79:0A:72:71:14:25:B5:4F:AE:55
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f9:8f:53:75:f6:5d:db:b3:de:4d:3b:99:d3:98:e9:4f:24:
0a:f6:74:57:ed:19:50:65:4e:82:39:3d:4f:b3:4b:1f:e7:e0:
80:6b:16:f1:55:ad:3f:2c:81:5f:4f:10:1f:4b:d2:d2:b2:e5:
8d:cf:f9:a8:6f:35:de:2a:b6:32:b1:1f:59:10:10:7e:e8:aa:
8a:4c:17:74:8b:72:c9:01:74:f8:ec:99:0d:51:59:3b:6b:e4:
25:2b:9e:8a:41:cf:d8:40:c9:ec:40:c9:b4:11:3a:f4:57:c1:
7c:ec:76:3f:ae:59:d5:50:3c:80:d1:5d:32:1c:e6:65:d7:d2:
88:23:f8:0c:a4:f5:27:c9:bc:62:a6:5d:d5:95:ab:df:58:72:
85:fb:10:14:ea:58:c1:81:2e:c5:7f:a6:9f:a7:05:62:80:96:
0d:e6:34:60:26:59:3e:02:c7:08:fb:32:e5:64:05:c7:a1:ea:
47:d8:dd:81:e4:3a:50:87:4f:1a:a4:40:19:62:91:dd:ec:f3:
e9:1d:ca:3c:7b:07:91:80:d0:06:80:b7:fe:09:78:75:06:34:
67:af:8d:91:c8:b6:86:7a:30:c4:e9:94:c5:ea:7a:17:e9:84:
f7:3d:6c:2f:c2:62:3b:6b:5e:95:f1:39:5b:31:fe:56:98:4c:
64:33:0b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:57:48 2026 by rpki-client