Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
File: A56X4z1nx-KVACipQeW9DbJmV_0.mft (raw, json)
Hash identifier: 3K3wyQ+rMPIcYUDyx7w9r+o0gyjcMlfb38ClfFlAvGs=
Subject key identifier: AA:11:1B:B1:8B:DD:87:DF:3F:FF:70:9B:B8:3D:59:7E:65:3D:6A:5F
Authority key identifier: 03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD
Certificate issuer: /CN=039e97e33d67c7e2950028a941e5bd0db26657fd
Certificate serial: 01A059329ADEC2C137F1D51880DDDACC6486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
Manifest number: A9
Signing time: Mon 31 Aug 2026 19:01:23 +0000
Manifest this update: Mon 31 Aug 2026 19:01:23 +0000
Manifest next update: Tue 01 Sep 2026 19:01:23 +0000
Files and hashes: 1: A56X4z1nx-KVACipQeW9DbJmV_0.crl (hash: E7W1rmCih/ZtM4dQhRejsg945V9ArVwU4ABIgsgAk+8=)
2: h6DuUWmzZbBVJl1gmp2hlfcqO7g.roa (hash: UQw3UzGzjt+F9tMKj8CUe8EMOCgAJJylkc7Y7hD8Fy4=)
3: hvfAzCtoE0ORBMYjcGw8oigdKcw.asa (hash: 72h3L4hXBvMvuCPqYCl4ziMbL9JELyu/c1jTdEmyvUA=)
4: ojQylV1In9b_cmWbkErVQtX_c0g.roa (hash: yXdKShEv9gKUMmqT53345vY7rE9y/T/S4WodyMW0wT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:32:9a:de:c2:c1:37:f1:d5:18:80:dd:da:cc:64:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e97e33d67c7e2950028a941e5bd0db26657fd
Validity
Not Before: Aug 31 19:01:23 2026 GMT
Not After : Sep 1 19:01:23 2026 GMT
Subject: CN=aa111bb18bdd87df3fff709bb83d597e653d6a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:30:ea:44:41:72:35:1d:3c:d5:65:76:ca:
9f:b1:5f:34:4e:29:f4:fc:2a:db:48:0f:a5:0d:03:
2a:ef:7d:31:9f:24:1c:53:9e:be:03:35:cc:d9:ff:
37:cb:79:1b:cd:83:e7:48:dd:78:7c:fe:d8:e1:e7:
e7:7f:6d:1a:40:39:5e:aa:93:6b:26:e4:6f:b9:c2:
29:82:c2:7c:06:6d:d2:a0:5b:34:be:78:d6:03:a2:
4f:9a:e9:55:c7:4a:64:c4:3e:e1:13:dd:af:8d:41:
00:f8:91:f3:fe:13:e9:b3:55:51:08:8b:2b:eb:ce:
ba:c1:7f:b9:f2:bf:ae:bd:f8:21:b0:b7:6e:ee:0c:
71:38:16:dd:6e:cb:2d:92:1f:e2:53:e5:70:2f:42:
09:38:d4:5f:ff:ed:f3:f4:a6:bd:b5:fa:cf:76:76:
96:ab:62:a1:8a:71:d0:7d:54:53:23:9f:a6:f9:59:
f6:84:02:58:74:9d:35:b3:c6:ac:31:5c:b4:db:33:
3d:a1:d8:ac:f8:7f:c0:1f:e8:0b:aa:83:7b:41:fa:
3b:f6:3d:92:e6:6d:24:1e:17:5b:76:cf:c6:c3:f6:
ed:34:57:cc:eb:a1:87:58:6c:f0:1a:e1:10:1e:b8:
eb:7e:3e:39:27:84:38:45:76:b4:c4:3b:2e:13:16:
3b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:11:1B:B1:8B:DD:87:DF:3F:FF:70:9B:B8:3D:59:7E:65:3D:6A:5F
X509v3 Authority Key Identifier:
keyid:03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4b:00:d9:1d:16:06:7a:3a:ea:ef:d0:47:90:24:be:62:14:
dc:d5:90:ab:62:fa:70:d1:55:1d:92:10:b3:2b:1f:b8:b5:b8:
31:e7:8c:fb:6b:63:d6:92:61:1d:ef:8c:e0:98:d6:1f:3a:d5:
b3:aa:a0:75:c0:9a:8a:14:c8:5c:29:41:e1:ff:c6:3d:4c:39:
b6:5d:29:e5:5b:ed:93:33:de:ac:f5:2b:bd:8e:85:d6:3f:53:
c9:9e:c1:ad:35:49:aa:c7:bf:73:03:3c:1d:a4:55:40:35:fd:
c5:61:9c:7c:83:f9:29:5f:0b:4c:67:39:8d:85:b4:5f:ae:01:
4a:1f:55:ac:0c:d1:35:2c:25:50:27:3a:1a:89:4d:82:34:9c:
72:cf:1f:78:ff:d7:d7:79:da:62:a7:79:b2:61:44:78:6f:c6:
db:47:b1:c7:ea:cc:b2:d0:c8:0a:5f:0d:64:94:26:0b:6d:27:
69:9c:2a:4c:21:95:e5:29:60:e8:67:04:e8:59:08:ff:71:33:
a6:aa:4a:1b:43:55:91:7c:c8:5e:63:0d:1a:8b:bd:21:58:71:
ee:54:68:46:01:e2:58:42:80:f4:62:f1:ee:9d:72:50:a3:28:
b6:0e:6a:9f:64:a2:d0:49:64:39:40:0d:88:59:a6:56:a3:b1:
57:76:f4:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBZMprewsE38dUYgN3azGSGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOWU5N2UzM2Q2N2M3ZTI5NTAwMjhhOTQxZTViZDBkYjI2
NjU3ZmQwHhcNMjYwODMxMTkwMTIzWhcNMjYwOTAxMTkwMTIzWjAzMTEwLwYDVQQD
EyhhYTExMWJiMThiZGQ4N2RmM2ZmZjcwOWJiODNkNTk3ZTY1M2Q2YTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm4w6kRBcjUdPNVldsqfsV80Tin0
/CrbSA+lDQMq730xnyQcU56+AzXM2f83y3kbzYPnSN14fP7Y4efnf20aQDleqpNr
JuRvucIpgsJ8Bm3SoFs0vnjWA6JPmulVx0pkxD7hE92vjUEA+JHz/hPps1VRCIsr
6866wX+58r+uvfghsLdu7gxxOBbdbsstkh/iU+VwL0IJONRf/+3z9Ka9tfrPdnaW
q2KhinHQfVRTI5+m+Vn2hAJYdJ01s8asMVy02zM9odis+H/AH+gLqoN7Qfo79j2S
5m0kHhdbds/Gw/btNFfM66GHWGzwGuEQHrjrfj45J4Q4RXa0xDsuExY7HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoRG7GL3YffP/9wm7g9WX5lPWpfMB8GA1UdIwQY
MBaAFAOel+M9Z8filQAoqUHlvQ2yZlf9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTU2WDR6MW54LUtWQUNpcFFlVzlEYkptVl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wN2Y5MDctZjc5Ni00ZDdiLWIxY2Mt
NzJiOGQ2ZGQzN2IzLzEvQTU2WDR6MW54LUtWQUNpcFFlVzlEYkptVl8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wN2Y5MDctZjc5Ni00ZDdiLWIxY2MtNzJiOGQ2ZGQzN2Iz
LzEvQTU2WDR6MW54LUtWQUNpcFFlVzlEYkptVl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEsA2R0W
Bno66u/QR5AkvmIU3NWQq2L6cNFVHZIQsysfuLW4MeeM+2tj1pJhHe+M4JjWHzrV
s6qgdcCaihTIXClB4f/GPUw5tl0p5VvtkzPerPUrvY6F1j9TyZ7BrTVJqse/cwM8
HaRVQDX9xWGcfIP5KV8LTGc5jYW0X64BSh9VrAzRNSwlUCc6GolNgjSccs8feP/X
13naYqd5smFEeG/G20exx+rMstDICl8NZJQmC20naZwqTCGV5Slg6GcE6FkI/3Ez
pqpKG0NVkXzIXmMNGou9IVhx7lRoRgHiWEKA9GLx7p1yUKMotg5qn2Si0ElkOUAN
iFmmVqOxV3b0tA==
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:16:20 2026 by rpki-client