Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: /oYXRYPk/1BP2s22HgMkFGKCvSWcqua5Ca3BzfHJ+so=
Subject key identifier: 0F:AF:F2:28:B1:D3:7B:46:8B:AD:65:F2:6C:7C:38:DC:EF:A7:9B:F1
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 01A001DD247771DD037CF95A7D7FF2DF4600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 1650
Signing time: Fri 14 Aug 2026 20:01:04 +0000
Manifest this update: Fri 14 Aug 2026 20:01:04 +0000
Manifest next update: Sat 15 Aug 2026 20:01:04 +0000
Files and hashes: 1: A4nevXWVLl5vdfSO_m17bHDukbA.roa (hash: QX/nCQkB1QHkZvD4R7eemwvmvQKwPODodhWHPVsSonY=)
2: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: +4LgWpi/vNrrQG4d0s3ZMm8mM1ctkONVbN3fzGLxR0o=)
3: Em6H44j6iihpO4fA0GysA5KFhow.roa (hash: cCDm2T/ieWvHFIMXCp6aDYjKM7+qQdF6aF/yhfZ3+5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:24:77:71:dd:03:7c:f9:5a:7d:7f:f2:df:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Aug 14 20:01:04 2026 GMT
Not After : Aug 15 20:01:04 2026 GMT
Subject: CN=0faff228b1d37b468bad65f26c7c38dcefa79bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:b3:88:50:66:33:ce:b4:3f:50:d9:fd:16:
c4:c4:5f:2b:e8:c9:84:77:1e:ca:4e:01:a4:02:1d:
b5:f4:0e:5b:af:77:42:d1:1a:18:0a:e2:6f:d1:1b:
6f:f1:76:6f:ed:66:dd:1f:90:d2:57:5e:0e:9a:ea:
58:fd:82:21:a0:43:a3:04:30:04:1d:e5:73:01:0b:
2e:a6:02:c1:e1:bd:58:0a:38:5c:65:1f:2b:4a:ea:
75:ff:ee:0c:fd:00:55:f9:50:19:93:3a:12:14:2c:
b0:31:ba:46:42:d8:3d:a2:fb:70:28:3e:96:f3:2c:
36:cf:b7:6c:d7:20:02:2e:1d:6d:08:c7:1e:f7:ca:
b6:a0:0e:12:72:00:40:54:f1:cc:fa:04:03:83:85:
f1:b9:c7:a6:28:c1:62:30:af:b6:df:a6:76:2b:bc:
6e:4f:4e:8d:64:7d:9b:76:8d:03:53:1c:87:57:39:
67:e0:ce:b5:03:5d:2c:04:6b:8f:69:38:b9:d8:51:
33:af:b4:40:b2:d9:c4:4b:98:2e:4a:34:d3:68:71:
80:55:d7:e1:79:a9:cf:2a:be:1b:99:91:5f:42:6f:
79:01:43:07:6e:3f:e9:83:69:a1:7e:4b:81:7b:06:
18:d4:35:6d:3d:9c:fd:ce:8b:e7:4c:25:3d:ca:75:
71:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AF:F2:28:B1:D3:7B:46:8B:AD:65:F2:6C:7C:38:DC:EF:A7:9B:F1
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ce:8f:86:79:2a:b3:9b:f3:53:cd:42:7f:7d:60:08:bc:da:
cf:64:f0:37:f5:cc:e7:42:d1:1e:05:ce:30:67:48:9c:b5:15:
ce:61:f8:99:3e:df:71:a4:e6:c9:80:a5:7a:64:e7:f9:33:8b:
08:05:b4:15:34:65:9c:7d:58:d3:5e:7e:14:63:21:7a:f3:84:
c4:d9:39:4f:9e:48:e2:db:aa:73:47:c4:95:d5:81:4d:4c:59:
2f:90:9b:e1:94:8e:92:c3:2f:69:73:8d:2c:e2:6f:40:47:d2:
af:24:78:86:f6:a2:af:81:dd:e3:5b:fa:90:28:c1:a9:cf:f1:
e2:ef:19:04:9b:b9:fb:c5:47:1f:d7:15:f2:7e:9e:85:39:2b:
88:c1:b4:7a:3b:bf:20:25:73:86:38:23:7f:f5:7e:df:a3:3a:
88:f3:2d:bc:f3:32:b2:9b:53:88:32:c5:52:f3:1a:7a:08:9f:
60:d8:e5:dd:cc:a2:c2:1d:af:84:2e:fd:e5:ae:e2:78:07:c7:
29:59:cf:f3:a1:11:7d:29:19:fa:01:c8:68:ef:a0:83:d4:12:
48:7d:b8:f3:64:3a:c1:45:78:8e:76:e3:0b:27:a7:1c:7b:ef:
9a:32:d9:3e:9d:ba:8d:1b:74:6a:e4:c8:27:d5:d1:5b:79:4f:
4e:91:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:55 2026 by rpki-client