Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier: 9W5a9YBTQWmdN7nwlWPSz8eEgd3/Fdfjz7vjsgyQIC4=
Subject key identifier: D9:0D:EE:09:42:71:EA:D8:3F:27:35:14:2F:1A:E1:BA:F7:91:89:D2
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial: 019CE59138E63958C0C8A57917B3CE03A8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number: 0548
Signing time: Fri 13 Mar 2026 05:00:25 +0000
Manifest this update: Fri 13 Mar 2026 05:00:25 +0000
Manifest next update: Sat 14 Mar 2026 05:00:25 +0000
Files and hashes: 1: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: PPtudiZRoWkVyBJYLYBQaD7z4PYDtOigawk4xAW8D/c=)
2: R_tuRGNyH8maQImtyJX8ka61Rts.roa (hash: CI3pZc4MmuEvMGaaRVV9hzb41var6bWscwqeDxkewRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:38:e6:39:58:c0:c8:a5:79:17:b3:ce:03:a8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Validity
Not Before: Mar 13 05:00:25 2026 GMT
Not After : Mar 14 05:00:25 2026 GMT
Subject: CN=d90dee094271ead83f2735142f1ae1baf79189d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:72:35:da:de:ff:6e:69:df:7a:8e:89:8d:
e1:f0:3b:cd:61:30:57:39:93:0a:ea:57:2b:b1:84:
0c:14:d9:1c:69:7c:54:2f:83:0d:37:0d:67:50:f6:
53:cd:45:af:fd:81:68:02:59:11:6e:7d:1c:3e:c4:
ec:42:7a:30:0c:72:14:d7:ad:37:c1:e4:bf:d6:87:
79:d8:34:8b:d3:23:58:72:da:be:2d:8e:07:3b:71:
31:39:b9:33:93:1e:ac:4c:db:b9:be:4d:38:60:3c:
a5:35:24:45:4c:37:9c:9a:f4:66:96:5a:0b:58:9f:
43:9a:88:47:66:27:d0:ac:69:83:af:34:ed:64:f0:
28:e5:b7:84:c7:c3:9e:35:cc:8c:2b:bd:af:f6:6e:
82:c3:66:46:db:e6:da:7b:fb:10:84:71:15:86:cb:
8e:7a:76:0a:bd:01:b1:49:d0:56:e5:f6:8e:da:ff:
c9:05:a7:a9:dc:9a:86:e3:b6:83:3c:ba:15:01:4e:
d0:18:3e:38:ca:91:56:80:53:ed:2d:f9:72:ce:e3:
87:e2:76:a0:5a:44:f0:81:70:61:26:8d:90:eb:62:
07:d7:62:7d:14:8e:11:02:34:3f:c4:5f:fd:49:ff:
0f:6c:8d:c7:34:56:ee:7d:ab:82:a2:1c:0e:34:87:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0D:EE:09:42:71:EA:D8:3F:27:35:14:2F:1A:E1:BA:F7:91:89:D2
X509v3 Authority Key Identifier:
keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c2:fd:a0:da:42:ce:ba:1d:a3:1a:53:c7:2a:67:5d:7b:5a:
56:6d:47:3d:15:f2:c1:d8:c8:ba:c5:b7:c1:fe:04:19:be:01:
8d:1e:05:78:ed:44:45:58:2c:d9:c8:5c:31:67:72:b1:68:82:
09:a1:ea:ff:22:9a:55:47:84:41:e1:9e:ac:a2:5c:a9:44:c9:
7d:3d:1e:48:37:2e:8b:0b:a6:97:18:56:41:83:64:45:cc:9d:
0a:2b:0a:f6:25:bf:dc:b0:72:91:0d:b3:9f:d3:d3:e9:b7:37:
57:93:eb:d3:0a:e6:fa:ac:a7:3d:d4:69:0f:f9:a1:19:9e:d0:
cf:37:92:57:84:c1:73:ad:f5:f0:7b:a2:b7:fd:51:92:51:2b:
89:71:ba:09:e6:59:2b:4e:53:96:05:b9:7e:16:97:d4:bb:d5:
ab:0a:e8:5e:8a:00:ec:73:8e:d9:84:fe:96:e2:5d:08:7a:f4:
b7:0e:9b:90:8a:e8:c9:f6:b4:fd:4a:c0:09:e1:e0:6d:04:24:
a6:24:e2:09:7b:78:4f:12:a1:38:03:9c:11:95:3b:02:41:af:
19:50:88:0d:86:f8:f3:e6:a4:74:5c:38:c1:ac:d6:5a:3d:8a:
75:9d:e0:df:84:95:b7:54:a4:19:7e:ed:fc:db:80:7b:e8:4b:
2c:7f:41:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:27:26 2026 by rpki-client