Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: D2k0OYk0PIPYSM2ho9X6CbN22NorRNh+6hsjPoS01z4=
Subject key identifier: 0B:74:BF:14:BE:A2:D3:C2:06:33:8A:75:E9:EC:E5:3F:8C:7D:11:B2
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 019E30A918F04B09D6C28D453740D907F289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 0D26
Signing time: Sat 16 May 2026 12:00:48 +0000
Manifest this update: Sat 16 May 2026 12:00:48 +0000
Manifest next update: Sun 17 May 2026 12:00:48 +0000
Files and hashes: 1: 1-SeUDqI8Ro4aGCyTtd-jgFozlto.roa (hash: 8a5+u2VImSUXdz/RNQV3GzWRx7Dr6+wCatlfsz939ds=)
2: 11o2iLgDPCuePLQgq2cbeg8IOSU.roa (hash: 7FivvoKuc8ZAaHXETYuK4eG8oIMl6d9f2SuMter7leo=)
3: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: jKDyDrIE4OG0E8v8ZTkO9qo3+R3GzeapvB2M/cpmYQs=)
4: apdlR9yvflDTKKIXJ67fjl8xDOo.roa (hash: bK32lK6qoaOVabJNvvUP8TTPkjqexdWgmiaw7lt28kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:18:f0:4b:09:d6:c2:8d:45:37:40:d9:07:f2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: May 16 12:00:48 2026 GMT
Not After : May 17 12:00:48 2026 GMT
Subject: CN=0b74bf14bea2d3c206338a75e9ece53f8c7d11b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:51:c9:92:00:d9:a6:97:58:d0:8d:57:59:
cc:8b:7f:d9:1e:51:93:6e:d0:de:50:40:11:26:c5:
a8:fa:09:80:03:b9:5e:83:53:1e:8c:21:e0:75:0b:
e9:4a:9b:e4:f5:b6:87:53:11:82:b0:83:b1:63:2d:
de:b4:98:f7:62:0d:82:01:96:bb:b1:00:5d:5e:90:
87:1d:e3:fe:5c:49:ed:f3:08:4b:1f:96:bd:f0:94:
6f:20:05:b8:c2:f3:83:7d:94:22:ff:b7:19:ab:ac:
7a:bc:0c:68:d5:3f:71:20:b2:01:0f:d0:32:88:07:
51:47:e8:92:c7:fb:89:95:3b:95:f5:cb:a2:47:a8:
66:48:67:01:5f:ea:11:c1:ac:f5:7f:8d:5b:e2:fe:
51:16:65:c3:94:c7:a0:b0:38:11:10:15:99:9d:c9:
df:c8:21:38:98:36:36:da:1f:f6:c6:8f:83:3c:40:
65:8e:74:c4:6b:db:90:fc:57:a7:42:b3:fe:b0:a1:
ed:46:4e:f6:56:a2:89:ef:ad:b7:2f:34:a4:e9:92:
09:e3:42:3a:4e:ea:d7:34:c0:af:c8:65:31:7c:94:
e0:60:d4:df:2e:71:2e:4d:6f:f4:c3:7e:16:65:ad:
17:77:dc:72:8b:02:f1:75:69:b9:85:96:31:29:eb:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:74:BF:14:BE:A2:D3:C2:06:33:8A:75:E9:EC:E5:3F:8C:7D:11:B2
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:21:cd:ec:b8:4f:97:e0:85:c7:d4:5b:51:a8:7a:39:4e:99:
63:c4:c5:ea:6c:5c:a0:74:e6:88:a8:d1:25:0f:24:39:e9:5a:
a9:15:0e:b2:9f:50:2a:75:b5:6e:db:e1:8e:94:5d:b7:ae:0b:
45:31:20:5a:0f:d0:58:56:d3:05:ff:5b:b3:d9:7b:f3:bd:d7:
20:2c:3e:ac:6f:ec:8f:4c:a5:a4:2d:9a:bc:30:60:d2:58:2a:
d8:12:46:35:33:5a:0c:14:e8:44:9c:1e:50:2c:54:c2:2b:dc:
66:1a:3a:33:af:57:07:50:a5:6b:dc:57:8e:9f:89:37:da:ec:
e8:59:1a:cb:23:ce:8f:5d:7f:e1:e9:57:25:dd:50:b4:dc:75:
85:cd:4e:2c:35:2f:4b:d8:43:f3:ed:0d:f5:4d:2f:0a:88:db:
8d:96:38:6b:6c:8b:70:82:b4:43:2d:db:8c:f9:e1:df:8d:f9:
75:04:a3:df:0e:54:c5:0a:51:ae:48:a8:8a:73:9a:cd:95:86:
ef:cc:64:0b:1b:91:97:f3:80:a1:e4:53:2f:23:56:ac:2d:0b:
1e:5a:93:0b:20:8b:4a:a9:0c:90:52:06:b5:53:f4:b8:6c:37:
3d:0c:13:1e:30:65:0d:dc:e5:b5:32:38:b4:d6:ad:3e:ed:35:
36:1f:46:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:16 2026 by rpki-client