Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: Y7/VOZjBTv8JfUs9X76ebMDtRJHP0SoJlSHRvPTnmYs=
Subject key identifier: 3B:41:31:59:16:CC:32:80:88:D2:3D:84:C3:9A:3F:AF:6A:DE:1F:B5
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 01A14271173EAD4A5E0AECCEB0954B026751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 16F6
Signing time: Fri 16 Oct 2026 02:01:10 +0000
Manifest this update: Fri 16 Oct 2026 02:01:10 +0000
Manifest next update: Sat 17 Oct 2026 02:01:10 +0000
Files and hashes: 1: A4nevXWVLl5vdfSO_m17bHDukbA.roa (hash: QX/nCQkB1QHkZvD4R7eemwvmvQKwPODodhWHPVsSonY=)
2: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: LVAqY0mNBWX4u/xmiPkxoJlX96l/lwAr5HIM4oM7P64=)
3: Em6H44j6iihpO4fA0GysA5KFhow.roa (hash: cCDm2T/ieWvHFIMXCp6aDYjKM7+qQdF6aF/yhfZ3+5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:71:17:3e:ad:4a:5e:0a:ec:ce:b0:95:4b:02:67:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Oct 16 02:01:10 2026 GMT
Not After : Oct 17 02:01:10 2026 GMT
Subject: CN=3b41315916cc328088d23d84c39a3faf6ade1fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:43:aa:00:47:bf:e3:77:c4:58:e8:21:df:
29:4e:95:ab:ec:2e:e0:f2:23:0d:1c:da:92:3c:1c:
81:39:64:26:b2:16:73:1b:dd:d6:8e:72:29:76:2e:
2c:7a:bf:6b:0b:f4:14:a1:d9:66:07:ac:40:73:fc:
ff:85:1b:a3:1c:7f:48:a4:f1:15:c1:90:4d:78:fe:
89:ab:69:e0:93:fb:fa:45:a7:0d:24:53:24:b9:b5:
d4:9c:bc:ba:d6:13:65:16:09:b4:1d:45:18:3b:d7:
bc:c2:59:4f:38:35:c8:64:a2:19:15:07:5b:d5:04:
6a:11:b8:c6:5f:4e:ad:5d:d8:c9:bc:5b:cb:42:f6:
1c:b0:0f:da:18:7f:1c:fe:28:4b:e0:c1:20:5b:6f:
a7:2c:34:02:fc:39:91:13:42:ab:6c:b2:dd:69:e7:
5a:89:31:5b:78:77:15:4a:83:a7:4e:23:98:7a:4c:
2b:c2:d2:c5:e6:b1:f0:54:50:9c:0f:ac:84:7e:7a:
b5:06:d6:14:7b:a9:b0:24:c0:9d:c8:d9:ec:3c:ba:
64:8b:4a:c5:24:8e:90:20:51:76:2a:92:40:d4:80:
4a:53:85:ca:f0:aa:a2:5f:7e:29:25:a9:a9:88:85:
e2:92:69:1a:8a:64:97:c8:74:cb:9a:25:f8:51:b3:
ee:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:41:31:59:16:CC:32:80:88:D2:3D:84:C3:9A:3F:AF:6A:DE:1F:B5
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ab:cb:af:47:9c:a7:1a:0c:70:46:74:eb:fc:0e:e0:18:50:
31:2e:6b:1e:00:b1:e2:52:c0:1b:b2:f1:06:47:69:6e:1f:12:
a1:97:61:f8:b1:b6:ea:cc:a6:19:29:e8:eb:b4:3b:c3:67:f9:
0f:bd:be:fd:63:3f:56:cc:58:73:fd:a1:4d:76:d2:0b:2c:34:
40:41:dc:15:05:7b:75:3c:e7:0e:2d:c0:6f:9d:df:1c:d0:8f:
60:cf:cd:07:3d:01:bf:2f:84:93:45:be:4d:94:30:6d:0f:62:
7c:bb:d0:e0:cc:04:4a:4e:4b:b0:0c:14:a2:31:e2:d6:55:de:
5f:3c:4b:4f:40:3c:af:db:80:30:c7:5d:e6:9f:38:2d:94:4e:
1a:c6:5e:77:60:3a:69:cd:5e:82:59:56:82:61:72:ba:07:3f:
33:db:59:43:6d:ec:36:d0:3a:a0:1f:c3:e5:ff:f2:40:e0:c9:
89:6e:60:e3:a1:b0:d1:94:a3:c7:34:68:70:d8:9b:15:43:80:
f3:1a:98:c9:8a:0a:af:a3:ca:18:a7:1f:7b:46:0d:75:2a:e7:
be:75:86:26:c8:41:b2:96:de:d0:54:92:ba:6f:bb:b6:f0:30:
d2:c3:83:3c:b8:96:ce:c5:de:1a:dc:61:02:b5:ff:11:18:84:
b5:4e:d1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 13:21:36 2026 by rpki-client