Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
File: A9G3rsab2CgwAtuxX1KCylj7OEo.mft (raw, json)
Hash identifier: JTmzI1NzRm7Oa2XcBZ6gPZRerCUJtkXvEy2nvrx4PXw=
Subject key identifier: CD:00:69:76:60:D4:D9:2B:17:49:86:1C:EF:E8:55:11:C1:17:FE:8E
Authority key identifier: 03:D1:B7:AE:C6:9B:D8:28:30:02:DB:B1:5F:52:82:CA:58:FB:38:4A
Certificate issuer: /CN=03d1b7aec69bd8283002dbb15f5282ca58fb384a
Certificate serial: 019F85D6450715BCF7F32E96E559AF4DED4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:39 +0000
Manifest this update: Tue 21 Jul 2026 18:00:39 +0000
Manifest next update: Wed 22 Jul 2026 18:00:39 +0000
Files and hashes: 1: A9G3rsab2CgwAtuxX1KCylj7OEo.crl (hash: jZ4tyoBH23vpqOEIK1haluWGTl0kGie2XPGHdvzu7nc=)
2: bHi-VQFa9MvXId7sxoFZ8aj0JuQ.roa (hash: 4pgz3zfm1oyZFOz2biai8bwyEIr9GkWt9/WXYL3YjBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:45:07:15:bc:f7:f3:2e:96:e5:59:af:4d:ed:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d1b7aec69bd8283002dbb15f5282ca58fb384a
Validity
Not Before: Jul 21 18:00:39 2026 GMT
Not After : Jul 22 18:00:39 2026 GMT
Subject: CN=cd00697660d4d92b1749861cefe85511c117fe8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:bf:0e:4e:19:79:ee:35:58:f6:a4:9b:18:
77:22:4d:36:44:51:49:be:6c:2d:37:6e:a8:bd:39:
98:59:9b:11:ae:27:27:de:1c:38:1d:04:51:8e:9e:
54:8c:91:93:50:69:2b:53:4b:62:e1:dd:81:10:44:
05:05:16:dd:e7:5a:80:d4:8c:96:4c:dc:6c:d7:e9:
83:cc:26:18:6c:95:83:2e:25:b6:8c:f2:f2:a7:ab:
96:f0:27:06:93:5d:6b:4d:33:93:ee:a8:fb:70:50:
68:77:ee:fd:54:b4:15:5f:e2:6d:c0:b2:97:69:35:
f1:33:cf:da:72:ba:fb:7c:4e:3d:70:25:6b:14:fc:
1d:32:0b:20:f4:33:29:bb:f9:22:b2:03:4f:b1:46:
50:99:1c:f8:d4:59:e9:e7:d3:06:ef:21:b4:41:a7:
e2:f0:09:63:ed:b5:5d:29:df:25:51:2e:5d:0c:0d:
80:57:69:01:f7:67:3e:45:0b:7a:91:5f:db:1f:fc:
1e:94:1d:ad:22:40:27:98:98:d0:d6:48:1c:69:14:
fb:d5:b3:07:13:43:b6:3e:9b:6f:11:c1:ae:ca:aa:
fa:9e:f5:bc:fb:cb:0f:bd:73:65:d7:50:19:c2:a2:
20:3a:a7:ec:04:4d:3c:14:e5:b3:5f:61:81:5b:96:
92:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:00:69:76:60:D4:D9:2B:17:49:86:1C:EF:E8:55:11:C1:17:FE:8E
X509v3 Authority Key Identifier:
keyid:03:D1:B7:AE:C6:9B:D8:28:30:02:DB:B1:5F:52:82:CA:58:FB:38:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0c:dc:c7:90:b4:3e:4a:a6:4b:10:46:6c:8a:ce:06:1f:f1:
ae:28:3f:e9:41:6a:77:4e:96:ba:f1:ee:06:d7:ad:c8:41:d3:
91:21:98:2e:21:c8:b2:c1:a3:12:db:21:f0:b2:ee:20:93:9a:
70:8b:cd:2f:2b:f6:de:7d:5d:bb:ad:1d:37:2c:dc:e7:03:2b:
26:e9:d6:17:d5:30:2a:f0:ab:f8:dc:b3:31:7a:95:bd:46:57:
9f:74:83:f7:7a:de:82:51:5d:64:d4:3b:ca:ff:d5:bc:6d:ae:
ce:f8:87:a1:dc:ad:8b:2c:5e:8b:b3:b3:51:c7:a7:55:70:a8:
dc:7a:ba:21:7a:8f:c7:bc:9d:b9:0a:51:a6:63:03:ec:a9:92:
e1:9e:59:ff:4f:90:0c:c0:64:29:f0:2f:04:ad:c5:df:aa:b2:
9e:8d:80:97:59:3b:cb:06:4b:ca:ee:5a:ab:1d:0b:cb:19:21:
7c:18:df:b1:76:ba:66:ad:b5:6e:51:9a:c2:8e:a1:fa:12:60:
e7:e8:9b:51:4c:0b:1b:e2:4a:50:ce:f3:79:65:be:69:b1:cd:
46:3e:be:5c:59:34:c6:8c:89:69:7f:18:32:93:29:ff:b9:5d:
43:bd:22:14:e6:19:74:8a:98:93:10:8d:2a:92:b8:72:2d:53:
3a:7e:df:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:12:35 2026 by rpki-client