Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
File: 9aSNNBWgK5T1T-4rZZSPJetPfdo.mft (raw, json)
Hash identifier: xr/is2Ov7lI+3OOu1qiQ9Z87sA44VVyUf1xFnh0HIN0=
Subject key identifier: 76:C3:03:84:22:84:A7:A1:1F:D3:9F:A0:8C:7C:5A:C4:21:C4:0A:22
Authority key identifier: F5:A4:8D:34:15:A0:2B:94:F5:4F:EE:2B:65:94:8F:25:EB:4F:7D:DA
Certificate issuer: /CN=f5a48d3415a02b94f54fee2b65948f25eb4f7dda
Certificate serial: 019FF5A21F6C853BD45C7CDAD95A1833605A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
Manifest number: A4
Signing time: Wed 12 Aug 2026 11:01:10 +0000
Manifest this update: Wed 12 Aug 2026 11:01:10 +0000
Manifest next update: Thu 13 Aug 2026 11:01:10 +0000
Files and hashes: 1: 9aSNNBWgK5T1T-4rZZSPJetPfdo.crl (hash: gNU6dI6c5hVJGB1KPaHIL/DJaiteJz+Lr0dJLuwF1vA=)
2: KB-nu_fDuo0XIMgqWugjNtPelKM.asa (hash: xVtyR3/ZytBeSN3L364bzhtV6xgki7m57Wrm3JRE2Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:a2:1f:6c:85:3b:d4:5c:7c:da:d9:5a:18:33:60:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a48d3415a02b94f54fee2b65948f25eb4f7dda
Validity
Not Before: Aug 12 11:01:10 2026 GMT
Not After : Aug 13 11:01:10 2026 GMT
Subject: CN=76c303842284a7a11fd39fa08c7c5ac421c40a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:c0:f4:60:53:97:33:2f:b5:37:81:bb:eb:
66:c2:98:57:e4:67:85:e7:83:9b:42:8f:21:19:49:
1c:d2:d6:76:05:f9:58:ac:32:40:cc:49:ee:8f:a9:
28:da:82:c7:f6:80:22:62:0f:19:81:c9:d9:78:44:
28:b3:ac:3f:6c:7a:b5:62:6a:44:63:85:ec:32:5d:
b4:3f:bc:7a:6b:86:25:c4:52:a4:d4:74:c1:a9:84:
6e:67:86:74:4c:eb:81:ac:32:b1:cf:26:a0:46:9c:
5e:50:61:66:ef:26:3a:05:67:93:97:29:98:c0:75:
c7:06:a8:58:85:46:a9:eb:ac:da:a2:59:37:08:12:
e8:5a:75:77:11:b6:f6:39:55:d9:66:ee:8f:21:ce:
f8:c4:9f:f6:61:85:de:fd:2e:79:0f:c8:4c:54:f5:
0c:7f:9c:64:20:dc:a5:91:df:7f:f0:60:c7:7f:2a:
2c:56:6a:9a:99:05:e9:27:9c:54:7c:02:0e:3f:8d:
10:20:b6:dd:24:28:f0:d4:0b:96:59:1c:c9:f9:a8:
cd:9a:9f:05:2a:e0:fa:9c:5e:e1:44:4f:39:8b:3f:
e0:4c:82:9f:56:90:21:61:97:89:5c:c9:e7:df:93:
87:e8:85:fa:47:33:d6:8e:85:a8:53:89:58:06:64:
e8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C3:03:84:22:84:A7:A1:1F:D3:9F:A0:8C:7C:5A:C4:21:C4:0A:22
X509v3 Authority Key Identifier:
keyid:F5:A4:8D:34:15:A0:2B:94:F5:4F:EE:2B:65:94:8F:25:EB:4F:7D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:30:dc:a1:0d:6a:ca:7d:63:c7:d0:b4:9e:a4:1c:7b:c6:1e:
a3:f9:81:e6:85:49:90:fc:b3:b4:af:32:bb:b0:08:7a:08:2c:
fb:b8:20:6f:78:90:ee:fe:33:4c:50:ae:42:0a:c2:a0:e9:eb:
f5:a3:70:cd:7d:10:73:2e:45:7c:34:6e:a6:e6:7a:d3:ec:ee:
9a:dd:83:b7:1c:72:63:7f:84:bf:eb:98:e2:ee:5d:dc:0f:42:
50:4b:66:6e:6e:42:18:94:69:d6:8f:61:86:d6:3d:13:cf:f0:
88:c4:5f:ad:87:bb:31:b9:c2:2b:d4:4b:c8:ac:99:c7:3a:ad:
c9:2a:6a:44:24:ed:68:ae:2e:46:37:1e:7e:76:a0:68:81:0e:
18:82:be:71:b4:c9:54:42:fc:90:c4:23:bd:1c:c7:50:13:91:
63:c8:54:01:c5:5f:7a:fc:c7:d1:ee:cc:4e:16:f7:1c:05:b1:
16:00:2d:02:2b:72:76:42:9c:39:97:20:0b:09:75:21:18:a7:
a4:cc:a8:9e:d4:94:90:87:33:81:14:a1:e0:5d:26:95:e8:1b:
df:70:06:a0:32:4e:09:3b:9a:c4:01:c8:b4:57:ee:4c:59:d2:
98:0e:f8:9b:01:f5:a6:7d:9e:14:ea:a7:a7:ca:36:35:b7:d2:
1d:bf:e4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:35:27 2026 by rpki-client