Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: fWIb5f8U4k4uFmZXhGF3tKUhcX/DwJuWApzy9ReDRZk=
Subject key identifier: DC:CB:42:14:1D:73:F8:F5:83:3D:58:CF:92:3A:C5:31:00:5E:84:FA
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 019EC1B6C1F0C1C2708ABDA9C4FBACA7DC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 03D0
Signing time: Sat 13 Jun 2026 16:00:40 +0000
Manifest this update: Sat 13 Jun 2026 16:00:40 +0000
Manifest next update: Sun 14 Jun 2026 16:00:40 +0000
Files and hashes: 1: RC8W-k4eKHGPmasSbosZROUwLd0.roa (hash: 5z5Yb5fi2XNF4cg27QOu2H4cPUEEs+tF3GD1VOWpis0=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: fprgPncJ/ZlKj6+4+QJf4h8HRw0ONNaICUIqNCK4mnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:c1:f0:c1:c2:70:8a:bd:a9:c4:fb:ac:a7:dc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Jun 13 16:00:40 2026 GMT
Not After : Jun 14 16:00:40 2026 GMT
Subject: CN=dccb42141d73f8f5833d58cf923ac531005e84fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:e3:75:e3:a3:3d:31:64:71:8e:46:eb:42:
49:cc:a3:7d:dd:7f:d3:23:88:45:29:cd:63:28:76:
62:62:dd:9f:45:57:65:d9:e1:f7:9f:4a:9b:1c:df:
44:51:5f:02:f7:e4:5e:4e:57:3e:7b:d2:f4:40:26:
7e:95:1f:d9:4f:0f:32:5e:2a:c1:3c:c1:d0:b5:dd:
b3:86:f6:9b:20:90:da:34:74:fa:9b:ae:d8:fc:a8:
92:a9:45:5f:ec:77:cf:43:c9:51:0f:06:6e:b1:93:
7a:42:2f:ef:ab:85:a5:e4:50:15:65:a3:a0:9c:dd:
38:81:60:17:3d:9c:04:3c:4b:b2:ce:29:fa:90:0d:
6c:e7:36:58:b3:d5:1a:d5:6c:ef:5b:3b:ac:66:05:
a2:14:43:13:8d:c0:e7:a8:fd:1f:3a:3d:f9:e3:bf:
bf:cd:c7:1d:85:ee:87:47:2c:f6:6b:b2:2d:c5:73:
db:08:d8:1e:cb:ac:bf:0d:51:43:72:15:b0:3d:fc:
87:db:3f:ea:fe:f4:2b:28:f1:bd:72:e7:3b:f7:51:
e5:84:74:93:aa:57:71:35:29:54:f9:a6:95:7e:35:
b6:39:5e:3c:14:0b:e6:71:14:23:50:9a:52:f2:0e:
3b:5a:88:87:9f:98:14:03:e0:c6:7e:2e:85:18:1a:
e6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CB:42:14:1D:73:F8:F5:83:3D:58:CF:92:3A:C5:31:00:5E:84:FA
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:31:a9:16:7a:37:61:32:70:76:1d:18:4a:92:63:a2:d8:68:
83:6a:72:c3:c1:e4:45:d5:e7:92:41:5a:73:11:da:ed:01:7f:
d3:21:54:44:11:8d:ef:b3:97:85:18:4e:35:99:b4:8b:18:d2:
1c:b0:11:1e:f1:55:05:95:9d:28:ab:00:d1:58:f4:bb:c1:1e:
f1:3d:62:62:ed:f7:3c:69:e6:bc:90:3f:7f:99:a1:79:bb:5e:
24:3d:76:65:5b:2c:3b:37:ee:fc:7e:42:73:92:b3:7a:9f:84:
4e:cf:ff:0d:9b:61:83:01:af:79:f4:02:6c:9e:d3:00:67:5a:
ae:5e:4c:d5:3d:f4:04:36:43:6e:3d:b9:b5:b9:ff:de:51:8d:
64:e0:11:d8:a2:05:31:53:14:18:0c:81:07:28:55:69:29:6e:
5f:09:d2:c1:ea:b4:32:65:33:5a:db:5a:1e:65:d4:a3:69:d0:
61:9f:78:b0:35:4c:80:55:fd:fe:0e:a7:4e:6a:c2:54:bc:6c:
98:26:37:63:49:3f:a1:38:9e:4f:db:60:e5:23:e9:01:c6:8e:
89:fd:76:04:2f:29:15:da:d4:e4:7e:38:7e:9b:2b:13:da:3a:
6b:a7:29:98:bd:26:b3:a9:87:af:6f:a3:86:a6:d1:3e:08:a8:
87:fb:1e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:29:07 2026 by rpki-client