Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
File: A9G3rsab2CgwAtuxX1KCylj7OEo.mft (raw, json)
Hash identifier: dmNImAYX8YwSlw5Muv5zTcfQ/2xncrbxaZSMbo2xuaI=
Subject key identifier: 09:19:E7:F1:EA:20:BC:C9:28:C8:63:A6:72:A1:AE:CF:64:A3:B3:0F
Authority key identifier: 03:D1:B7:AE:C6:9B:D8:28:30:02:DB:B1:5F:52:82:CA:58:FB:38:4A
Certificate issuer: /CN=03d1b7aec69bd8283002dbb15f5282ca58fb384a
Certificate serial: 01A06D95F95B90BD62C39FF04FF93615D751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:02:20 +0000
Manifest this update: Fri 04 Sep 2026 18:02:20 +0000
Manifest next update: Sat 05 Sep 2026 18:02:20 +0000
Files and hashes: 1: A9G3rsab2CgwAtuxX1KCylj7OEo.crl (hash: nY30qahnJc8RKAkVX6EFK4pMjcKOQuw8fSl8vYVwNKg=)
2: bHi-VQFa9MvXId7sxoFZ8aj0JuQ.roa (hash: 4pgz3zfm1oyZFOz2biai8bwyEIr9GkWt9/WXYL3YjBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:f9:5b:90:bd:62:c3:9f:f0:4f:f9:36:15:d7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d1b7aec69bd8283002dbb15f5282ca58fb384a
Validity
Not Before: Sep 4 18:02:20 2026 GMT
Not After : Sep 5 18:02:20 2026 GMT
Subject: CN=0919e7f1ea20bcc928c863a672a1aecf64a3b30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:77:16:f6:fb:17:93:4e:45:0d:dd:70:41:
3f:bc:c3:44:a9:9f:16:1b:13:59:9c:e8:49:98:9c:
8b:ef:8a:6d:e2:2c:42:49:8a:9d:ed:e3:90:ad:bb:
5a:66:fd:ee:14:e5:bc:e1:52:af:34:13:a1:f9:b6:
b6:04:fd:3c:af:0a:3f:a1:ba:35:a8:c1:61:f3:59:
56:2f:38:e2:1b:1b:f6:6d:20:aa:a1:f2:18:fa:33:
a8:08:c3:e4:9c:21:fe:97:26:41:46:84:34:6c:5d:
19:7a:71:e5:e9:69:79:fe:d5:3e:94:c5:fd:bb:6d:
5f:7f:73:28:4a:0c:1a:30:5a:be:5f:a6:07:68:04:
d7:bc:13:60:70:87:dd:4c:59:3f:f6:ea:0d:0d:3a:
84:dc:84:ee:c2:9a:c2:4b:65:d5:6a:7e:18:3e:5f:
5f:f5:a3:2a:e3:6f:b9:76:71:93:66:e4:96:9a:f3:
a5:54:32:b9:b4:8c:77:17:c9:e7:9a:cc:85:78:e5:
8c:f0:0f:05:f2:82:dd:4d:40:c4:ff:c5:a2:8c:a6:
d4:26:d7:17:3f:72:35:45:cb:42:98:f1:99:0e:dc:
80:5c:16:11:2b:b0:e1:3e:12:23:b4:c3:15:59:f7:
40:77:aa:d8:bc:ab:97:84:d7:4f:39:5e:88:d1:ed:
f2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:19:E7:F1:EA:20:BC:C9:28:C8:63:A6:72:A1:AE:CF:64:A3:B3:0F
X509v3 Authority Key Identifier:
keyid:03:D1:B7:AE:C6:9B:D8:28:30:02:DB:B1:5F:52:82:CA:58:FB:38:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c9:fb:37:69:71:5b:c2:32:e6:d9:1f:cd:fa:c6:2d:42:87:
e1:a1:09:90:ea:1e:c0:63:ca:7a:fa:57:ff:5f:a0:88:2f:44:
27:7f:57:cc:09:88:05:6f:73:b3:ce:c2:ee:e3:63:bf:4e:16:
69:e9:d4:30:40:79:ed:a8:f0:cf:1b:26:12:27:e0:15:f8:ae:
c1:ba:e3:a8:e4:47:c3:03:d3:7a:24:f7:99:34:aa:70:2a:ab:
1e:89:37:03:42:5e:89:90:dc:5e:6d:3d:46:83:d3:74:b6:e9:
ec:f2:1c:2b:3c:2e:2c:67:e2:ac:8f:67:a2:14:08:0a:02:eb:
af:f4:b6:20:78:12:50:9b:1a:f6:3b:ac:85:3d:89:49:08:c1:
af:3f:dc:1e:1c:cc:a6:49:1b:cc:27:77:cb:82:ea:e2:8c:38:
71:54:d1:a5:26:34:35:d0:c8:43:f5:fe:d0:cc:9b:e2:c7:d4:
1b:1e:65:48:0a:34:3b:f4:8b:a2:f1:24:ad:0a:6b:d0:b1:55:
b3:b0:bf:0a:0d:c4:d2:0b:f6:43:fb:8b:84:b3:09:07:84:43:
64:a1:37:56:62:34:20:08:35:dc:f8:79:f5:0f:1e:4b:41:09:
5f:e8:60:3b:6c:50:60:3d:e5:6d:5e:b5:b3:52:a9:a1:86:84:
f7:b9:eb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:03:45 2026 by rpki-client