Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
File: A9G3rsab2CgwAtuxX1KCylj7OEo.mft (raw, json)
Hash identifier: yh1wnnaAuG7R+11PMTsDhIrAIiSlWzkiDuYq26ItP/w=
Subject key identifier: 51:DD:30:51:61:BA:27:60:D5:EF:B7:34:AF:87:A3:BD:02:00:65:20
Authority key identifier: 03:D1:B7:AE:C6:9B:D8:28:30:02:DB:B1:5F:52:82:CA:58:FB:38:4A
Certificate issuer: /CN=03d1b7aec69bd8283002dbb15f5282ca58fb384a
Certificate serial: 01A16A91A5EF752002E96D1D730A2176A85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
Manifest number: 0135
Signing time: Fri 23 Oct 2026 21:01:32 +0000
Manifest this update: Fri 23 Oct 2026 21:01:32 +0000
Manifest next update: Sat 24 Oct 2026 21:01:32 +0000
Files and hashes: 1: A9G3rsab2CgwAtuxX1KCylj7OEo.crl (hash: IawfYk9csB6R8RH6AhdxyqH+Hsf/t9PEDqHSwOJ9R4U=)
2: bHi-VQFa9MvXId7sxoFZ8aj0JuQ.roa (hash: 4pgz3zfm1oyZFOz2biai8bwyEIr9GkWt9/WXYL3YjBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:91:a5:ef:75:20:02:e9:6d:1d:73:0a:21:76:a8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d1b7aec69bd8283002dbb15f5282ca58fb384a
Validity
Not Before: Oct 23 21:01:32 2026 GMT
Not After : Oct 24 21:01:32 2026 GMT
Subject: CN=51dd305161ba2760d5efb734af87a3bd02006520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2f:87:fa:87:cc:c9:c2:ba:c5:05:31:10:63:
e1:ff:25:5f:7c:37:a8:58:a0:54:56:e8:00:61:a2:
9e:93:86:f4:df:a4:a6:9b:df:59:cd:89:e0:b4:fa:
a0:30:17:20:a9:f5:19:4f:f6:a2:f6:1c:01:3c:a3:
29:b0:1b:a0:90:f2:87:ee:b2:0b:bc:47:84:aa:aa:
a6:8d:ec:00:d3:a5:90:82:fa:da:24:79:3e:6a:ae:
c3:51:61:f6:78:6f:ce:56:58:49:e3:f8:d5:9a:57:
90:a4:0b:4c:9a:d2:77:b9:bd:05:d5:d4:02:b2:93:
6b:45:2e:86:35:4e:0f:8c:15:e4:c5:00:7a:44:49:
9e:2b:52:5f:56:66:3e:0d:02:ea:38:67:0d:4e:a1:
3d:ca:81:f0:bc:db:e3:70:89:03:01:42:83:17:c3:
b1:8f:e0:21:7c:d8:9f:5b:b6:54:e6:d1:5f:4d:bb:
b5:7c:af:8b:e3:08:37:6f:80:8c:d0:d2:79:d4:b8:
bc:74:1c:cb:c2:e5:d2:a1:71:d9:15:e9:99:47:57:
99:ba:a0:4c:47:43:8e:11:5d:69:26:b8:15:77:2a:
26:36:08:f7:a4:0d:c7:07:a3:60:93:13:e2:ae:2a:
79:ab:b4:94:d2:c7:fb:68:fc:d4:f4:80:8f:d1:36:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DD:30:51:61:BA:27:60:D5:EF:B7:34:AF:87:A3:BD:02:00:65:20
X509v3 Authority Key Identifier:
keyid:03:D1:B7:AE:C6:9B:D8:28:30:02:DB:B1:5F:52:82:CA:58:FB:38:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:31:77:e7:e7:7a:4e:26:56:17:79:07:45:cb:cb:3e:7e:f3:
83:cd:98:ae:d6:c9:00:7c:05:37:08:55:23:c0:3a:d2:9e:f5:
b0:7b:d5:df:03:82:bf:42:55:55:90:4a:69:34:29:09:83:6d:
22:9a:10:b0:50:28:bd:6e:f4:af:fb:5d:d8:df:24:9e:b6:3a:
3a:0a:47:e0:b3:46:ba:35:d3:68:43:c4:2e:3c:a8:d6:94:95:
5a:de:bd:7c:2d:0f:bc:d5:04:c2:cf:a5:5b:83:c9:26:be:a8:
83:66:0a:43:79:d0:41:e8:1f:f3:c9:37:21:34:0e:4d:10:05:
46:db:28:7d:d5:07:9f:de:68:9e:55:0e:2b:41:c9:16:4c:0e:
d0:74:af:9e:2e:2c:f2:a6:93:6f:74:7d:b5:93:33:c6:bc:35:
f2:12:f3:8c:34:a8:78:bb:e7:4b:f4:07:8b:9d:d6:47:3d:60:
38:2a:c8:9b:d2:77:41:e0:64:61:a3:b4:ee:78:ee:ed:92:cd:
9b:be:ce:b1:fb:22:9f:28:41:4d:a7:5e:43:fd:39:2e:e6:71:
7f:4e:49:1b:ab:27:fd:fd:8c:47:34:17:73:9b:aa:89:c4:6f:
eb:90:46:fd:e7:78:43:d1:5d:33:04:e7:00:16:45:ff:ef:04:
53:c0:2d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:02:41 2026 by rpki-client