Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: YS14HmMqIwcw+CpVxPTtojMCheqRqTKe/+Rowei+bpo=
Subject key identifier: 25:19:95:F3:C8:25:BC:B7:27:E0:B9:43:DC:F6:2B:02:99:2C:1E:6C
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 019CAEA2BF15752899F4E2DD109D8AE0E93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 02BD
Signing time: Mon 02 Mar 2026 13:00:27 +0000
Manifest this update: Mon 02 Mar 2026 13:00:27 +0000
Manifest next update: Tue 03 Mar 2026 13:00:27 +0000
Files and hashes: 1: RC8W-k4eKHGPmasSbosZROUwLd0.roa (hash: 5z5Yb5fi2XNF4cg27QOu2H4cPUEEs+tF3GD1VOWpis0=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: I0jtfhEvAgtQMeEWObuIkPLWSDZjcvCxVdfAVUEsHY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:bf:15:75:28:99:f4:e2:dd:10:9d:8a:e0:e9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Mar 2 13:00:27 2026 GMT
Not After : Mar 3 13:00:27 2026 GMT
Subject: CN=251995f3c825bcb727e0b943dcf62b02992c1e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:9a:ee:e9:df:8b:99:45:e6:13:ce:d7:6c:
19:79:8e:31:6f:c1:4d:a8:8c:ab:a9:41:7e:08:a7:
10:72:6a:84:f9:99:6c:a4:27:70:f3:8c:1c:37:f5:
bd:6f:e0:5a:93:d0:b3:ee:cd:12:27:b4:df:4c:b1:
e1:73:af:c1:19:75:1d:f3:3a:19:13:d4:e3:6c:62:
ab:6e:be:e4:4c:ad:64:ca:ca:d1:0e:8e:dc:21:42:
99:db:24:a0:9b:04:8f:85:a7:e5:e0:4e:f8:e2:c8:
57:7b:58:59:13:1c:54:78:41:2e:de:c9:98:a7:7d:
3c:2e:5a:4f:22:e9:b1:a9:bc:56:9d:44:ac:c2:27:
59:28:f7:98:b0:01:5e:22:26:bf:37:f0:63:6b:1d:
af:21:e4:fd:0e:cf:05:39:97:9d:58:6d:5e:c9:e3:
57:89:14:cd:c1:b6:7b:fe:e6:45:45:51:a4:cb:1b:
4a:bc:ee:20:97:32:c1:87:4e:f9:ba:0a:70:03:52:
23:9d:6a:53:87:c2:05:1a:68:5e:14:29:86:d4:89:
b5:73:2b:4a:6b:fc:1c:6e:e1:11:10:e7:5a:9d:83:
2b:72:30:9a:38:b2:11:60:4f:42:07:a2:5a:86:81:
75:16:68:a4:07:f7:e9:5f:2b:5c:03:dc:a3:29:d8:
50:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:19:95:F3:C8:25:BC:B7:27:E0:B9:43:DC:F6:2B:02:99:2C:1E:6C
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:65:f2:04:49:3e:48:cc:4d:bf:2f:63:2f:ea:0b:5f:c8:f8:
a7:50:9b:31:11:d7:a8:59:41:98:2b:e1:56:dc:a7:17:1b:61:
15:d0:c2:d3:65:85:01:04:6c:89:87:66:da:43:2c:b3:2b:77:
ff:1a:92:3e:cb:c5:29:7d:98:fd:f1:b9:38:6f:15:6d:a7:3e:
a8:63:03:9b:60:40:62:43:1b:5a:4b:57:87:09:c1:64:59:03:
16:4c:40:8d:ec:28:3b:4f:b0:de:4a:01:4f:65:95:60:e5:e8:
2a:c8:e9:a9:70:0e:43:56:69:9d:d7:a5:b1:01:78:c2:f1:f5:
7e:d5:c2:5b:74:6a:7d:a1:86:3b:d2:82:49:7b:84:68:30:19:
05:cd:74:32:14:af:1c:04:6e:49:ce:19:7a:d5:40:ea:c1:6b:
61:ea:de:2c:21:de:6f:af:4d:40:43:77:72:15:2b:53:0a:5c:
13:35:17:93:72:1a:8d:ef:8a:de:83:95:c1:b9:19:e9:32:15:
f6:25:8a:d9:32:fc:8b:01:ae:2e:ea:2e:c0:a9:f3:39:5a:30:
78:4d:b5:a9:fb:ea:7b:10:25:af:8d:aa:3b:1e:b1:a8:40:5a:
3f:cc:9f:a7:a5:9d:5c:24:49:40:f0:c6:5f:f6:e5:f4:82:93:
46:31:cd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:00 2026 by rpki-client