Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: QhF1kaaXUQNN6vB1J31BAOAy70GRKb13GTkyEDCzpRo=
Subject key identifier: D6:DD:BC:15:95:C2:56:20:C8:48:C8:07:EE:DE:39:E5:F0:83:51:C4
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 019D37892CBF8DF961992E1D2148D20EF30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 0CA5
Signing time: Sun 29 Mar 2026 03:00:29 +0000
Manifest this update: Sun 29 Mar 2026 03:00:29 +0000
Manifest next update: Mon 30 Mar 2026 03:00:29 +0000
Files and hashes: 1: 1-SeUDqI8Ro4aGCyTtd-jgFozlto.roa (hash: 8a5+u2VImSUXdz/RNQV3GzWRx7Dr6+wCatlfsz939ds=)
2: 11o2iLgDPCuePLQgq2cbeg8IOSU.roa (hash: 7FivvoKuc8ZAaHXETYuK4eG8oIMl6d9f2SuMter7leo=)
3: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: JhWcu5DxysJ22+QKsOF42maBVWOMqLiWrycSIta24tA=)
4: apdlR9yvflDTKKIXJ67fjl8xDOo.roa (hash: bK32lK6qoaOVabJNvvUP8TTPkjqexdWgmiaw7lt28kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:2c:bf:8d:f9:61:99:2e:1d:21:48:d2:0e:f3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Mar 29 03:00:29 2026 GMT
Not After : Mar 30 03:00:29 2026 GMT
Subject: CN=d6ddbc1595c25620c848c807eede39e5f08351c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:ff:37:d2:6e:42:62:d4:6d:4f:29:13:da:
38:02:6c:94:4d:f0:14:0a:dd:85:ae:86:7b:17:56:
97:f3:54:dd:23:3a:6f:c9:f2:b8:72:6e:4a:20:7e:
35:62:2a:1d:67:ae:db:59:5b:db:9b:36:45:a6:f7:
84:40:17:1c:15:3b:8b:a6:81:4b:a9:dd:98:1b:1e:
4f:f3:5e:12:f8:3d:7f:c1:e9:23:65:87:db:5e:16:
61:61:a9:a0:68:28:23:93:39:8b:8b:8b:07:8f:ab:
43:f4:c0:9f:59:5a:88:64:e2:6f:b5:3b:f4:57:1e:
be:a9:3f:23:c3:43:c6:8d:88:d5:e0:ca:47:1a:b9:
41:f8:80:75:75:e8:ac:06:2c:4b:45:33:4b:c9:c7:
62:d3:bd:b0:a4:ae:29:1c:e0:02:6f:fd:f5:56:ee:
c2:a6:fe:24:5c:08:e3:00:57:b0:a7:5b:b4:10:ef:
c7:6e:58:31:91:93:32:34:4c:71:c8:27:ff:4c:e6:
f9:cf:d2:33:05:69:92:23:37:2b:ec:0e:d7:c2:16:
fb:d3:8c:2c:08:39:58:de:ab:f3:b6:78:b8:fb:0e:
1c:9a:97:68:17:a4:54:35:db:a4:4d:40:c3:96:92:
ea:26:de:c4:4c:2e:70:6d:ec:9c:46:60:32:6b:4a:
54:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DD:BC:15:95:C2:56:20:C8:48:C8:07:EE:DE:39:E5:F0:83:51:C4
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:00:a4:76:03:4b:1a:9f:11:21:d9:d6:d4:e5:9d:a4:28:b7:
f6:aa:41:38:cd:45:84:e3:ca:60:b0:8f:59:af:ea:73:af:4b:
6d:01:92:08:a1:1b:b9:93:39:8a:5f:79:de:42:a2:b7:ba:0a:
37:0c:e6:13:14:21:a5:07:62:40:4d:0c:8d:98:4d:bd:92:00:
72:2c:3b:2d:ed:07:e8:77:bc:24:cc:23:41:2c:43:c7:bf:05:
53:94:82:f0:43:62:8a:1d:86:67:75:ea:7d:0c:eb:ca:d0:17:
1e:08:33:73:61:f9:0c:83:3f:08:f1:45:17:cf:1a:8a:13:0b:
c9:36:65:2a:be:a9:24:a9:1a:68:d6:3d:de:03:77:3f:a3:e2:
a5:f1:f1:4b:2a:d7:fa:e0:2d:39:6a:a1:de:c5:b9:4e:61:10:
ef:b7:1b:67:55:ae:02:ae:a3:39:95:1f:b7:2f:2f:be:36:51:
64:f6:da:37:f5:9f:36:1d:a0:7a:a3:d7:3e:ee:41:9a:b9:8f:
36:75:6d:d5:d6:4a:cc:9d:f3:eb:f2:8e:79:8d:74:7a:45:4c:
9c:00:68:16:f4:c8:4c:65:f2:69:d0:6f:48:33:50:da:b3:df:
dc:5d:e7:d8:77:76:b0:e1:a5:6f:5c:f8:78:60:ad:b0:3e:a7:
68:9e:7d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:19 2026 by rpki-client