Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: gh/iQFJCxMDx8RPdRH1G/x0H+7VnuDYfTvj3+PlpgXQ=
Subject key identifier: 64:99:FB:1F:8D:78:B1:99:0B:34:EB:FB:95:F2:16:C6:E6:63:6F:8B
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 01A1863F390EDCDB0ADA220BD31C644CFD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 0EE0
Signing time: Thu 29 Oct 2026 06:00:52 +0000
Manifest this update: Thu 29 Oct 2026 06:00:52 +0000
Manifest next update: Fri 30 Oct 2026 06:00:52 +0000
Files and hashes: 1: 1-SeUDqI8Ro4aGCyTtd-jgFozlto.roa (hash: 8a5+u2VImSUXdz/RNQV3GzWRx7Dr6+wCatlfsz939ds=)
2: 11o2iLgDPCuePLQgq2cbeg8IOSU.roa (hash: 7FivvoKuc8ZAaHXETYuK4eG8oIMl6d9f2SuMter7leo=)
3: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: 9B8N8+J38kAsiI6dZSfP0vR7OvKy1toAPbjUXD3h5lY=)
4: apdlR9yvflDTKKIXJ67fjl8xDOo.roa (hash: bK32lK6qoaOVabJNvvUP8TTPkjqexdWgmiaw7lt28kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:3f:39:0e:dc:db:0a:da:22:0b:d3:1c:64:4c:fd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Oct 29 06:00:52 2026 GMT
Not After : Oct 30 06:00:52 2026 GMT
Subject: CN=6499fb1f8d78b1990b34ebfb95f216c6e6636f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:2c:8a:f3:62:d6:2f:ff:77:55:08:5f:f5:
43:f2:0a:d0:e7:d1:ef:fe:28:ce:44:a2:62:00:d9:
9f:5a:3d:00:9c:3c:0a:78:11:65:0f:07:d8:87:19:
84:32:e6:d0:b1:fc:d6:05:f7:c4:b1:a2:14:81:1e:
fe:7d:1f:55:eb:71:bc:ce:1c:25:c5:81:ee:7a:f1:
fa:81:80:f3:1e:22:7b:3d:8c:38:bd:3d:47:a9:e7:
1e:27:8d:60:c0:d2:4e:06:da:74:3f:73:38:5b:6f:
93:67:f8:0f:fa:3b:71:f7:b7:40:b7:37:ba:cc:5b:
c4:47:7a:5a:74:92:46:87:9f:d3:cc:a5:35:17:6a:
ff:a9:9c:34:9b:73:8b:28:f5:7b:10:0e:1b:e7:7d:
35:eb:b3:13:28:67:6f:0a:07:77:6d:c2:ef:14:d4:
fd:65:f8:a7:d0:e0:2f:83:dc:e0:a5:2a:dd:fd:13:
37:be:e3:87:77:c5:c3:3c:23:64:51:f6:29:97:06:
ec:2a:83:0f:78:25:03:6d:3f:b6:df:8f:22:e6:87:
be:a8:f6:40:58:df:56:a8:66:ec:da:35:1c:9c:2d:
64:b8:47:8b:87:de:ef:a2:06:94:11:6b:22:b8:92:
8d:d8:4e:3a:a7:31:14:cd:11:df:f0:ed:ac:ad:45:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:99:FB:1F:8D:78:B1:99:0B:34:EB:FB:95:F2:16:C6:E6:63:6F:8B
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b8:d1:a9:41:bc:3b:18:35:49:0c:3d:ea:de:0b:ef:2b:bd:
aa:68:d9:e9:7e:46:2c:e7:04:1c:f7:2c:38:1d:ae:7c:d8:b0:
43:68:f2:3d:26:f4:81:2f:26:0b:1a:49:f1:10:ae:60:0b:a1:
16:8f:49:c5:b3:84:6b:83:11:b8:bd:49:ba:45:e3:f5:9c:1c:
c3:b8:02:c4:ac:62:50:fa:b9:06:f5:8f:2f:23:ec:38:91:5c:
27:5a:49:68:d9:f5:e0:6d:07:0b:4a:13:a1:08:5b:92:04:e9:
dc:24:90:aa:02:0a:82:f6:04:91:33:ff:0b:c8:5c:0b:68:40:
27:82:d2:5e:69:01:72:b8:77:ae:2d:3d:a3:d0:3a:29:b9:ed:
26:f2:fa:e1:6a:b2:e9:26:a3:a7:e5:ab:ea:67:c4:1b:03:2d:
21:3c:bd:04:d3:4e:6d:48:8d:7a:76:29:86:40:34:9d:c6:cd:
b1:fe:95:9a:c3:52:30:ef:e5:d2:69:44:bc:a9:cf:70:a7:15:
eb:4c:08:f2:c1:13:9f:97:5a:5f:82:85:2a:5a:31:7e:3c:5a:
8e:14:32:f9:fd:5f:57:c5:0c:4d:df:2e:9e:93:eb:06:b4:91:
24:56:e0:ea:70:6e:f3:01:50:d0:06:32:a3:78:54:f1:0f:67:
61:07:08:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:03:18 2026 by rpki-client