Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
File: A9yMYjke_dTdGORoGeF3gAKpoYc.mft (raw, json)
Hash identifier: XYDWWrdZhXxb2Hn+A5Szxx21wkJbDXpgprCjAnpCpBQ=
Subject key identifier: 86:BF:3B:3D:6B:79:7A:A7:F2:55:35:DD:35:20:FC:15:F9:89:E5:BE
Authority key identifier: 03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
Certificate issuer: /CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Certificate serial: 01A124D417D1E7591FD032EEEBA2ED92B8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
Manifest number: 0857
Signing time: Sat 10 Oct 2026 08:00:41 +0000
Manifest this update: Sat 10 Oct 2026 08:00:41 +0000
Manifest next update: Sun 11 Oct 2026 08:00:41 +0000
Files and hashes: 1: 1-eoC_GN2YbYe4XqCQ3dQUDWLMGU.roa (hash: CCW99WT+qJ1fktgS1Nv1Xts5RljXDXbC1tmqj4HW2vI=)
2: A9yMYjke_dTdGORoGeF3gAKpoYc.crl (hash: CHum5tK3ZXI6Rs85riZF5LVz7ved7lNTIvNihiQqpYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:d4:17:d1:e7:59:1f:d0:32:ee:eb:a2:ed:92:b8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Validity
Not Before: Oct 10 08:00:41 2026 GMT
Not After : Oct 11 08:00:41 2026 GMT
Subject: CN=86bf3b3d6b797aa7f25535dd3520fc15f989e5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:10:92:7a:3b:9f:2d:ed:02:63:77:95:2a:
a1:b3:75:80:95:dd:b6:65:ba:e3:0a:f1:59:34:36:
d7:9f:44:aa:71:29:2a:5e:18:ec:ea:c3:c7:04:8c:
90:2c:f5:2d:38:c7:c3:92:b8:16:62:ce:6e:b9:1a:
b0:53:75:ca:64:5e:cd:42:ca:7d:d8:08:d6:7c:7d:
40:78:31:f2:1d:34:e9:8d:2d:d4:8d:50:10:26:ce:
1b:84:b3:5f:2b:5b:09:f3:a0:37:91:c3:5e:6f:5a:
3b:00:ea:2d:b3:5d:b5:e8:a9:27:1b:b3:35:46:61:
98:b6:6f:a9:2f:a1:2f:8c:8a:f2:73:0e:94:0a:17:
12:eb:71:5b:15:26:91:3b:98:89:cb:4a:bc:05:0f:
01:cc:af:4e:35:4d:2b:0c:e3:b5:0c:a2:28:b5:26:
0f:fe:5b:1b:e9:b0:ea:1a:af:bc:0c:6e:7e:3b:ce:
2f:93:79:bb:d5:3d:4c:0e:56:c4:55:b4:04:c1:cd:
0f:4c:f0:df:4c:97:9a:78:c7:5c:90:9d:ce:9f:a0:
8a:32:7c:28:31:bc:15:69:53:00:60:4c:eb:17:71:
9f:23:91:70:63:d4:96:2a:8b:dc:f9:e6:b1:fa:12:
3c:0a:dc:8f:9d:66:71:d6:78:81:47:40:fc:d7:0e:
ce:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BF:3B:3D:6B:79:7A:A7:F2:55:35:DD:35:20:FC:15:F9:89:E5:BE
X509v3 Authority Key Identifier:
keyid:03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:95:72:22:84:a6:7b:7a:17:9b:3f:46:3e:5c:8f:aa:6b:95:
cb:78:3a:74:9f:34:8b:38:9b:81:c3:6c:e8:50:91:a8:a3:24:
09:4a:2c:1c:8e:ec:61:5d:52:5f:91:59:69:8f:a9:69:5e:63:
93:8a:9b:79:b8:fa:99:cd:2e:d8:31:97:13:77:2d:2e:54:35:
86:ec:fd:af:c8:f3:f0:bd:7d:d8:28:0e:00:b9:46:f3:76:b7:
07:9a:21:d2:aa:3e:e4:53:ac:de:4b:85:bc:68:54:68:ff:58:
ee:eb:6e:86:9c:55:34:5c:1b:83:64:ee:75:21:a3:59:56:c4:
88:6f:2a:42:f4:7a:fa:2d:d1:de:7e:08:a8:28:56:fe:8d:96:
b9:c2:9b:82:91:51:1e:b4:dd:5a:62:46:0a:b3:ed:dc:6f:d1:
20:ef:07:0b:79:32:ac:27:a2:04:ce:cf:c9:d8:84:3f:63:dd:
d4:60:2b:8c:9b:21:07:08:b8:16:81:f7:55:a4:f8:92:e5:02:
13:2b:e5:cd:fe:e4:28:89:41:db:c6:59:70:8c:b4:41:b5:cf:
8a:10:ad:1b:29:4a:16:60:f2:54:9c:97:61:71:8b:9c:13:e3:
b2:cd:8f:12:af:c3:0e:77:b2:78:97:8d:61:5d:f1:f1:4b:13:
85:4b:07:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:56:34 2026 by rpki-client