Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: ETAbhA68xnsYHuYTRN/z5w4ah0LPcd02f793iTNfyEQ=
Subject key identifier: 76:A4:50:3E:DE:34:75:40:8B:8F:9C:93:A6:07:05:B3:AD:27:E1:85
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 019FAB637FA6A75B0FD2486D07E2B69AE741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 0449
Signing time: Wed 29 Jul 2026 01:00:52 +0000
Manifest this update: Wed 29 Jul 2026 01:00:52 +0000
Manifest next update: Thu 30 Jul 2026 01:00:52 +0000
Files and hashes: 1: RC8W-k4eKHGPmasSbosZROUwLd0.roa (hash: 5z5Yb5fi2XNF4cg27QOu2H4cPUEEs+tF3GD1VOWpis0=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: 9SifdwiTyRYJL0gIFRJ7EekemcFg6R4QXneqZzYxUiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:7f:a6:a7:5b:0f:d2:48:6d:07:e2:b6:9a:e7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Jul 29 01:00:52 2026 GMT
Not After : Jul 30 01:00:52 2026 GMT
Subject: CN=76a4503ede3475408b8f9c93a60705b3ad27e185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:83:f6:1c:ea:b9:13:37:27:82:56:ea:06:
e2:3a:2b:75:f9:f8:0a:26:92:d9:d7:fa:2c:37:69:
70:03:78:fd:46:3a:7f:e2:35:49:d5:9e:d7:24:22:
42:8e:64:bd:64:fa:d9:43:2f:73:ef:45:55:fb:89:
12:e5:f5:b0:0f:39:19:f3:b4:12:07:45:2c:3b:5b:
1c:6e:a4:b4:d4:a7:30:e0:87:dd:a2:3a:fd:18:58:
59:e6:74:64:e0:e1:ff:ac:5f:c6:17:c2:ea:cf:dc:
43:6a:e9:61:cb:3f:07:c8:4e:b1:08:b6:8e:8c:89:
8b:4f:b1:06:e8:f1:13:87:34:61:60:de:01:f6:3e:
35:e1:ab:d2:70:a2:19:ae:bb:99:fe:87:d7:ee:41:
62:83:06:6e:b2:9a:f2:b0:10:51:b4:4b:a5:80:22:
ec:4c:51:b0:d0:24:7c:a5:10:55:84:15:a9:d7:9a:
68:51:ed:0f:db:0c:52:eb:a9:dc:18:1d:24:ef:01:
3b:99:a1:ca:35:56:66:a8:80:a5:bc:66:37:5d:f1:
75:1f:38:29:63:d4:55:cc:17:44:34:a6:d8:a3:22:
60:c4:3e:7b:b2:95:8f:20:61:4e:a1:75:d1:4e:e3:
6d:78:6c:5f:71:6b:63:48:4d:9d:73:3c:53:28:04:
35:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A4:50:3E:DE:34:75:40:8B:8F:9C:93:A6:07:05:B3:AD:27:E1:85
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:98:2e:e4:01:49:1d:03:e5:b1:40:14:f8:f0:c4:8e:fb:f1:
fc:5a:b1:f9:45:21:e0:b9:64:cb:53:64:a9:6c:a4:48:8f:96:
1b:bd:2a:db:f3:53:ff:20:ae:5c:1a:15:68:e9:4e:ca:fa:56:
37:06:e8:f3:e7:20:3e:fc:5b:e2:c4:fa:ee:e3:2b:d6:f9:3e:
a3:c5:09:6f:80:79:bc:4f:63:4d:2d:03:a0:4c:6d:e8:f9:d4:
af:6a:a7:84:56:6f:c7:41:e6:37:e1:a9:b2:35:26:0c:d6:93:
52:88:f6:54:b7:2d:2f:23:94:a4:52:47:97:17:f3:73:cb:60:
12:60:62:6a:c0:e9:8f:40:71:38:dc:1d:8d:d4:81:93:14:20:
a0:60:10:7a:10:f0:e5:44:b8:dc:d1:4b:1f:76:da:6e:a7:01:
f7:c0:80:2c:87:8c:45:5c:5d:26:04:57:5b:b4:96:eb:b4:0d:
2a:5c:b4:bd:eb:c0:64:25:21:03:93:6e:f5:d1:76:c7:94:35:
18:7a:22:ee:5b:f1:55:eb:a0:fb:32:a9:16:ea:36:69:6d:69:
71:be:35:ec:2a:97:0b:90:4f:cc:26:86:17:6c:3f:a3:37:b6:
6a:78:77:dd:4c:fa:48:4e:35:c3:50:a1:e7:c2:39:5a:62:38:
40:7d:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:40:56 2026 by rpki-client