Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: hvHEvVTHiEc2O+aKjaSwEs1Nsj4jIdQILs9UvQr25lY=
Subject key identifier: 2E:01:BA:D2:C6:E0:0D:C9:BD:90:93:A2:91:86:3C:C3:BB:B3:EF:C5
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 019D9A3E2AB95C5E8A0E1C63FAE4511D2DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: 0337
Signing time: Fri 17 Apr 2026 07:00:58 +0000
Manifest this update: Fri 17 Apr 2026 07:00:58 +0000
Manifest next update: Sat 18 Apr 2026 07:00:58 +0000
Files and hashes: 1: RC8W-k4eKHGPmasSbosZROUwLd0.roa (hash: 5z5Yb5fi2XNF4cg27QOu2H4cPUEEs+tF3GD1VOWpis0=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: DCpwt7wOQ3QZ1ajqWyCHG2Tau982tzhaKMjuew3riMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:2a:b9:5c:5e:8a:0e:1c:63:fa:e4:51:1d:2d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Apr 17 07:00:58 2026 GMT
Not After : Apr 18 07:00:58 2026 GMT
Subject: CN=2e01bad2c6e00dc9bd9093a291863cc3bbb3efc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:78:d2:4f:60:c4:58:61:12:2f:1e:be:b2:
8f:0d:f8:85:cc:74:e2:85:2c:45:55:4c:0f:9e:16:
e7:32:f8:aa:30:bb:22:2d:f3:e6:69:cf:26:27:f3:
2c:35:eb:1a:79:69:7f:fa:ef:b5:b0:4a:c4:f9:4b:
f5:62:cd:31:42:b6:25:aa:ad:cc:e9:5b:ea:30:c5:
5b:26:eb:25:d6:6a:33:7b:d4:15:de:7d:15:16:49:
42:45:a5:50:4b:ab:05:df:07:7b:51:63:6f:53:20:
93:3d:41:09:e3:4f:92:0c:dc:b5:93:62:93:5c:4c:
15:58:82:7e:2f:aa:bd:74:c5:1c:4c:c0:f4:7d:63:
c1:9e:03:c5:c0:ce:44:11:d6:a8:59:6e:5d:65:b1:
d8:3a:27:5c:b3:67:4b:cb:d5:ec:91:14:50:28:75:
57:79:74:32:30:1f:2c:11:74:d4:b0:e4:c8:e8:6d:
31:a0:8b:49:91:cc:92:a4:63:73:03:3d:c4:71:16:
eb:8c:a3:e3:0b:78:e6:59:ba:96:7c:b2:6b:34:01:
9c:ad:b5:34:e3:68:cf:83:b1:0c:0a:8a:b7:76:1f:
74:18:c9:bf:82:79:e5:6a:f1:96:5c:24:95:a0:e6:
6d:b6:cc:4c:b4:73:57:d6:5e:30:a6:e9:1c:5a:90:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:01:BA:D2:C6:E0:0D:C9:BD:90:93:A2:91:86:3C:C3:BB:B3:EF:C5
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9d:8e:36:58:c2:52:b1:ad:99:0f:6c:8b:ee:e4:a7:86:86:
24:16:9b:42:1b:1b:9c:11:10:d7:20:de:55:8d:25:e4:b7:05:
51:f1:eb:ce:7c:ca:d6:65:be:83:12:fc:76:0e:42:d9:07:04:
df:cb:fd:cc:b3:e0:29:38:13:ef:37:09:30:97:cb:05:fe:78:
50:dc:46:0b:8e:bd:23:a6:37:82:26:ec:ea:dd:d7:a9:62:4c:
ef:6d:0e:2e:f9:76:14:f5:82:30:fe:45:4b:de:3c:9a:79:dd:
4f:ed:6a:ae:a6:09:f9:b1:8f:f1:33:1a:81:b8:c9:04:79:ef:
b6:ce:11:6b:60:03:9b:9f:14:99:65:d6:8a:71:0a:6a:cd:65:
14:0b:a3:13:bb:2d:7e:14:d7:a1:f5:b9:80:a9:c0:77:cf:53:
ac:01:69:59:b4:1d:1f:a6:2f:16:42:92:84:ab:1b:8a:9e:ef:
46:03:3a:83:9a:1c:5b:ca:14:c7:ed:72:c3:be:62:75:80:b1:
af:e1:2c:b4:4c:6a:cf:5d:3b:97:c3:94:23:c5:b6:d2:ab:02:
98:24:fc:d0:cb:8e:8a:cb:45:f4:b7:80:39:02:c4:32:ce:31:
63:24:87:55:21:32:48:01:99:98:bc:0a:7e:d8:00:df:0e:57:
94:ce:3e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:38:56 2026 by rpki-client