Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: Sa9s6ND2UdTnnvqdG4gCG9RoeriznZYNvi7AG2T/RmY=
Subject key identifier: 56:CF:1D:B5:F7:03:7F:EA:11:02:7A:3E:48:11:EF:9E:49:F3:FC:3B
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 019F1830339C421B95C6A095E37ECAAD5895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 15D7
Signing time: Tue 30 Jun 2026 11:00:39 +0000
Manifest this update: Tue 30 Jun 2026 11:00:39 +0000
Manifest next update: Wed 01 Jul 2026 11:00:39 +0000
Files and hashes: 1: A4nevXWVLl5vdfSO_m17bHDukbA.roa (hash: QX/nCQkB1QHkZvD4R7eemwvmvQKwPODodhWHPVsSonY=)
2: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: wkUrPqLq+VyWtddCWBkUFzftlgYPj7dCu0Qz4hUmHeY=)
3: Em6H44j6iihpO4fA0GysA5KFhow.roa (hash: cCDm2T/ieWvHFIMXCp6aDYjKM7+qQdF6aF/yhfZ3+5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:33:9c:42:1b:95:c6:a0:95:e3:7e:ca:ad:58:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Jun 30 11:00:39 2026 GMT
Not After : Jul 1 11:00:39 2026 GMT
Subject: CN=56cf1db5f7037fea11027a3e4811ef9e49f3fc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:8a:df:98:1f:b3:ea:02:b7:47:8e:e2:ef:
7c:36:82:57:60:2e:a1:f9:31:07:bd:f3:d7:ff:37:
05:eb:c9:c7:8b:1a:5c:75:96:59:54:54:d8:2f:c5:
71:2b:dc:f6:de:e6:15:7c:6e:3d:08:be:7b:41:d6:
40:62:79:40:9b:e1:0b:b0:cc:9b:a2:e9:95:8d:9b:
fc:dd:1e:b3:f5:e8:42:12:5f:17:93:34:43:fd:d3:
6d:5e:e1:b6:76:11:28:be:a8:21:29:b8:89:ba:3e:
69:ad:22:69:73:2c:56:2f:fd:1d:94:83:86:95:68:
14:9c:2d:ee:ef:f3:2f:37:df:b2:03:8d:54:7d:b7:
24:89:d1:88:63:c1:42:b1:e4:80:54:ed:89:f4:6c:
04:ac:f7:20:bb:90:85:07:bd:53:0c:3b:6c:2f:88:
45:ad:13:f7:d3:06:bc:9e:6a:f6:dc:d3:30:8b:32:
a4:7b:c5:e6:ce:aa:4c:4b:a9:31:3d:72:f2:c7:be:
32:6f:7f:0f:0d:ed:00:76:ec:a0:9b:e2:18:e7:77:
1d:1a:90:08:af:a0:92:c4:10:4a:9a:ee:7f:0d:7b:
fd:2f:74:34:c9:1e:20:4b:28:90:4c:cb:50:9b:1c:
ba:7d:e8:8b:c6:44:c4:3d:97:23:23:7d:97:11:96:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CF:1D:B5:F7:03:7F:EA:11:02:7A:3E:48:11:EF:9E:49:F3:FC:3B
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ff:97:94:ee:3e:b6:21:f9:9e:a8:1b:87:bf:d9:16:9a:cf:
53:db:70:96:ea:ce:d0:6d:5e:31:27:df:b6:0f:01:e5:9b:a5:
91:0f:6e:e6:bf:56:e2:7f:42:29:52:9f:54:80:3d:4d:4c:1b:
82:a2:aa:6a:03:7e:62:fe:f4:2a:c7:cb:ae:cd:46:c6:06:89:
02:a9:d2:85:82:e0:56:30:89:e6:a0:bb:91:55:a8:f8:52:40:
12:36:0a:03:d2:6f:72:3c:66:e8:63:dc:90:23:b0:c3:43:c8:
82:62:97:25:bb:8a:1b:06:c0:6b:76:6d:8a:74:6d:18:a0:11:
0d:f4:5c:3d:f7:c3:64:a4:99:de:24:3d:e1:4e:a4:89:7c:4a:
5e:a1:22:87:43:29:24:8f:0b:ff:f0:0e:ab:29:e4:64:4e:61:
c1:3b:fc:df:48:91:16:e9:d0:35:08:5a:d0:d2:71:00:56:8e:
27:8a:3f:9d:01:0a:f2:9d:00:2f:54:a3:cf:32:6c:9b:c1:e2:
2e:93:cb:63:5d:39:ef:d7:c7:e5:fc:bb:a6:63:eb:7d:08:98:
0f:43:20:7a:64:ff:2c:ec:4b:75:28:d5:9c:c0:57:ee:41:ef:
ad:30:c7:48:38:67:7b:44:24:25:85:f2:95:63:d1:9a:03:93:
fa:13:21:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:10 2026 by rpki-client