Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: Y2cZDDBGHCF7IND+ZSstBsUNOAjRB7xX+A077fCKNPM=
Subject key identifier: 5D:1D:7E:F7:81:1F:49:53:CB:E7:36:4E:DD:FC:35:1D:B5:9D:8E:EE
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 019F829E687943C64F50B68BBCBF1FE6719C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 0DD5
Signing time: Tue 21 Jul 2026 03:00:47 +0000
Manifest this update: Tue 21 Jul 2026 03:00:47 +0000
Manifest next update: Wed 22 Jul 2026 03:00:47 +0000
Files and hashes: 1: 1-SeUDqI8Ro4aGCyTtd-jgFozlto.roa (hash: 8a5+u2VImSUXdz/RNQV3GzWRx7Dr6+wCatlfsz939ds=)
2: 11o2iLgDPCuePLQgq2cbeg8IOSU.roa (hash: 7FivvoKuc8ZAaHXETYuK4eG8oIMl6d9f2SuMter7leo=)
3: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: hPtI1D6fvkqbKrH7/mYkmzGDqryQmvZqd2ROODHkYf0=)
4: apdlR9yvflDTKKIXJ67fjl8xDOo.roa (hash: bK32lK6qoaOVabJNvvUP8TTPkjqexdWgmiaw7lt28kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:9e:68:79:43:c6:4f:50:b6:8b:bc:bf:1f:e6:71:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Jul 21 03:00:47 2026 GMT
Not After : Jul 22 03:00:47 2026 GMT
Subject: CN=5d1d7ef7811f4953cbe7364eddfc351db59d8eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:a1:c8:19:c0:ec:9c:96:88:8d:c7:de:b6:
7a:34:1c:9d:1d:d4:a8:54:7f:ff:5c:c4:3f:c5:ba:
42:29:f4:60:a8:de:e5:75:c3:fc:a8:73:93:0f:6e:
14:ca:57:6e:dc:81:08:a9:ac:0e:75:8b:93:59:40:
8a:b2:3a:cc:78:a5:c4:a1:8c:fd:0a:fd:4c:7e:8a:
03:61:90:6e:66:40:db:97:14:4e:a1:35:f5:f4:b1:
75:90:a8:f9:a7:28:61:23:c0:08:42:f1:1c:37:48:
42:84:a6:ea:36:85:aa:3e:ca:0a:86:ef:15:e0:43:
ef:d7:e6:e3:79:64:ba:14:f2:0e:d8:78:16:1c:c0:
8d:eb:44:0c:e6:2f:7f:45:97:a6:c5:fe:4c:3f:bc:
ac:df:f0:42:be:a6:84:03:bc:9a:9c:07:80:5f:dd:
63:95:7f:b2:bd:de:3a:70:6f:36:6c:e4:97:6e:6e:
b1:7a:a8:40:7f:fe:a9:f2:19:12:4f:13:c9:b3:eb:
4b:88:5a:ae:97:98:c2:2c:62:a1:a0:ba:6b:36:c2:
ce:e1:3b:96:cd:42:29:93:7f:9b:f7:84:72:19:d7:
60:9a:33:68:43:f9:26:ee:4d:37:a5:df:a9:79:bb:
ee:c1:cb:97:b9:b8:57:de:19:38:23:7f:9d:4b:ca:
f3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1D:7E:F7:81:1F:49:53:CB:E7:36:4E:DD:FC:35:1D:B5:9D:8E:EE
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b5:a1:b1:49:af:62:03:0d:7f:f9:c9:46:70:b1:49:99:5a:
93:d0:2c:5a:11:70:09:6b:63:f1:2f:1d:11:9c:a0:0c:48:6a:
b5:2e:6a:ff:4e:72:78:00:df:30:a4:21:9b:16:d5:8d:42:4f:
ee:3c:9b:70:ab:dd:9a:70:0e:66:ec:ee:4b:6d:d5:68:b6:17:
75:95:6d:2d:8b:a3:15:f7:50:f2:f0:da:ab:2b:d1:a8:0c:fd:
72:37:45:d2:08:f7:b8:c2:70:88:ca:2c:b7:43:7f:32:80:85:
a5:e4:01:e0:45:ee:70:94:73:69:dc:63:1e:de:7f:88:db:71:
cd:65:9a:fc:f7:b4:f8:86:b0:03:32:46:e9:11:f7:77:a8:51:
21:c7:53:a2:bc:04:5f:c8:d3:29:a9:60:ad:af:8c:9b:bf:32:
65:95:9c:0e:bc:eb:11:60:7d:38:fa:99:93:bf:34:76:92:f0:
58:bd:06:8a:95:ac:2a:92:2e:8e:b9:3e:2b:2d:9d:18:85:ce:
19:51:95:c5:73:5d:29:c4:e9:bb:43:b7:23:31:3f:b7:ab:86:
3b:d6:8f:88:a6:82:37:79:4f:03:62:63:37:2a:7c:78:4c:a7:
65:bb:81:b7:f1:75:bc:a5:01:5d:d6:13:87:f8:04:69:88:fb:
24:91:14:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:09:52 2026 by rpki-client