Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json)
Hash identifier: U/36Ct4OlRRQ7m52i9M5x1jFpDyh6ck7LoOPoachJDk=
Subject key identifier: 57:C7:F5:23:15:22:60:40:90:B2:4D:F8:F2:8D:6B:5E:6A:43:F8:85
Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Certificate serial: 019D37C01B9BD1996C2D52BCA559E871C76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
Manifest number: 09C5
Signing time: Sun 29 Mar 2026 04:00:29 +0000
Manifest this update: Sun 29 Mar 2026 04:00:29 +0000
Manifest next update: Mon 30 Mar 2026 04:00:29 +0000
Files and hashes: 1: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: zQykicq5ZPm9SYMXEg/cNezE7K52e9mOTm1IY6UZ7mE=)
2: d5uZsHk5psUBNIiK0yURePVkIj4.roa (hash: s7XGbhnDoYFsLMagak/nA9yObweAfTDGqMpZ2d7pox0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:1b:9b:d1:99:6c:2d:52:bc:a5:59:e8:71:c7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Validity
Not Before: Mar 29 04:00:29 2026 GMT
Not After : Mar 30 04:00:29 2026 GMT
Subject: CN=57c7f5231522604090b24df8f28d6b5e6a43f885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:3e:94:26:68:19:75:1c:03:41:45:37:aa:
af:44:02:c1:73:8d:2b:05:dc:8e:e8:7b:6b:fc:d8:
bc:ae:d3:41:43:3c:57:f6:f6:b7:98:6e:39:e3:14:
36:fb:78:13:80:0c:2f:06:9e:c7:1c:00:68:33:99:
b6:e7:b4:6d:fd:32:b3:46:8c:3a:15:7e:2c:7d:9c:
b4:0e:a1:74:5c:ca:de:50:57:d2:d2:5c:60:cd:4b:
19:56:ca:16:20:0c:c1:41:70:ba:98:a2:80:ea:d6:
53:06:f9:ce:de:14:c5:70:46:89:23:f3:63:58:40:
b2:c5:1e:49:1e:bd:01:e3:0c:02:1e:98:96:36:ea:
94:80:a2:36:87:22:50:01:71:44:07:b7:b0:89:dc:
91:be:09:5e:ef:66:be:81:53:db:e8:f3:0c:82:27:
15:ff:8e:26:e0:23:d2:3b:34:c6:74:65:bd:13:78:
8c:36:61:c9:af:f3:54:40:76:5b:93:af:83:8f:c1:
f0:60:fc:3f:c8:10:13:9c:64:c6:24:c2:16:32:13:
b1:bf:72:79:6b:f0:d6:d5:a1:7d:a6:a6:22:01:c6:
5f:7d:5f:0d:61:2d:2a:e1:63:7a:ef:d6:1b:84:ea:
64:06:4b:0a:30:61:96:05:df:59:a6:d4:75:16:7f:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C7:F5:23:15:22:60:40:90:B2:4D:F8:F2:8D:6B:5E:6A:43:F8:85
X509v3 Authority Key Identifier:
keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f6:37:40:19:1f:23:bd:c4:5b:aa:73:ee:83:bc:7d:5f:f7:
d6:ab:2c:ad:51:67:b7:f1:a3:3f:a3:37:87:f9:63:41:db:e0:
09:99:60:f3:2a:f9:38:db:bd:03:00:11:7d:e7:aa:c9:90:9c:
9b:f3:a9:fc:e3:eb:51:d2:53:65:05:a8:e1:e1:b0:3a:b3:0f:
97:60:75:e9:da:06:1a:b8:60:c1:4d:92:d1:3c:25:dc:e2:28:
af:40:84:fe:a2:0d:7f:87:86:c7:de:6d:dd:4e:36:cc:ed:ff:
db:9d:70:7f:1e:22:4c:83:ab:32:2b:ee:b1:6b:2a:55:75:a9:
7f:16:03:7f:17:f6:0c:95:83:1d:a1:18:15:59:3b:ad:eb:bd:
35:04:63:2d:7c:06:d1:84:69:91:c1:64:07:0c:c9:28:a2:fe:
0c:c4:76:5f:6d:0b:ac:39:2d:89:e3:a4:cb:2f:2c:4d:f9:23:
57:35:6f:c9:f0:23:1b:2a:a8:b3:38:7d:8f:16:ba:f4:39:94:
19:aa:5a:7e:3b:3b:d3:07:62:5c:fa:7d:75:58:a9:b3:4a:41:
62:30:be:a4:7b:6d:5c:33:5c:44:c8:2a:71:e0:57:3f:c7:6e:
6e:6f:ba:4f:55:29:c6:76:b3:93:33:23:b0:48:46:56:3d:22:
85:6c:59:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:22 2026 by rpki-client