Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
File: A-pQioW8c6mqogOop7r5wWLm82w.mft (raw, json)
Hash identifier: gv4qtmtO1NS4NxII5dD50kZkogOFdSzWR1aYyEbBLfA=
Subject key identifier: 93:9D:9E:D5:B8:C9:7F:5F:16:94:43:BD:69:DE:09:E6:B8:1A:E5:69
Authority key identifier: 03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
Certificate issuer: /CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Certificate serial: 019CE55A7C55915016B1B7F5274F430AB274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
Manifest number: 09D6
Signing time: Fri 13 Mar 2026 04:00:38 +0000
Manifest this update: Fri 13 Mar 2026 04:00:38 +0000
Manifest next update: Sat 14 Mar 2026 04:00:38 +0000
Files and hashes: 1: A-pQioW8c6mqogOop7r5wWLm82w.crl (hash: b5VChDh2L7KMxDQ9VLeBmdVHmLeWnO18fVAVxoYveQI=)
2: g0oXLuj5iDetxALq5Bw1KiMkRUo.roa (hash: PW9/wUds/6yFiBdtio7q4yhD06x/RpMiIm+VqX8uKYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:7c:55:91:50:16:b1:b7:f5:27:4f:43:0a:b2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Validity
Not Before: Mar 13 04:00:38 2026 GMT
Not After : Mar 14 04:00:38 2026 GMT
Subject: CN=939d9ed5b8c97f5f169443bd69de09e6b81ae569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:54:cc:77:e7:77:a4:17:3c:7b:71:06:48:
84:71:f9:85:b5:29:de:3d:17:f2:f9:07:46:de:25:
06:9f:11:ab:62:af:f3:37:ff:83:0f:bf:13:6f:b7:
3d:1a:6f:72:29:d2:77:64:ed:4c:12:a7:3a:6f:0d:
ff:9a:21:22:a7:e5:22:a5:30:eb:6f:fa:8f:e2:bf:
4c:55:71:82:89:b3:01:d3:4b:34:05:74:ce:47:5c:
d2:cc:18:d0:c0:12:5f:e8:30:5c:27:e0:3d:7e:69:
b3:e4:ec:6d:a6:ba:ec:65:5d:20:2b:85:e9:64:3e:
1c:9a:90:a2:72:70:51:9f:57:31:07:8e:90:ae:8a:
8e:93:75:f3:91:48:a6:8d:fd:65:a1:fb:77:2d:80:
14:72:88:8b:af:55:8e:9a:94:30:81:d6:63:6a:b5:
cf:54:f6:39:da:0f:c5:2e:13:25:ae:40:52:a2:d2:
1b:2c:01:81:9e:a3:1e:4a:19:51:9e:80:74:86:2e:
ff:6c:d5:39:5a:6d:82:eb:d7:0e:c4:cc:fa:42:3e:
85:3f:78:4d:ee:a8:df:18:d5:3a:d1:f1:4f:e7:68:
a5:70:12:f7:3e:1c:fe:4c:bb:aa:2f:54:11:f3:72:
3e:23:22:25:48:84:6c:77:eb:02:67:61:f2:33:b1:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9D:9E:D5:B8:C9:7F:5F:16:94:43:BD:69:DE:09:E6:B8:1A:E5:69
X509v3 Authority Key Identifier:
keyid:03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4c:21:83:18:e5:61:03:85:76:c9:41:ab:af:db:ea:d2:22:
5e:cc:ab:63:bf:33:0a:3d:b9:1a:db:28:92:56:72:02:1d:cd:
ee:0b:60:ad:63:80:b1:39:ab:00:cd:7c:79:e0:20:08:3f:43:
1a:7f:3f:c4:2d:aa:d0:77:20:3a:2a:c3:45:3a:89:d1:e9:c1:
ea:6d:44:d2:17:5d:91:84:72:5b:55:12:f1:e2:b6:9d:4f:da:
62:c4:95:63:2d:65:b1:ae:10:55:83:fa:e2:07:a4:49:0f:6e:
21:eb:42:7f:d2:bc:fe:f1:fc:bc:44:46:b7:2b:06:16:f1:9f:
8d:cb:5d:95:08:02:2c:e4:da:a1:39:17:ae:79:6b:25:8e:4c:
d0:f0:7b:fd:e8:69:b7:bd:a6:90:eb:19:31:1a:65:b1:13:c1:
a4:fb:eb:70:db:b9:a2:8c:cf:82:60:85:03:11:8a:7d:ad:b3:
29:51:ae:68:9f:fd:35:49:96:cf:22:f5:74:09:c9:c0:8a:63:
9a:32:c2:ca:88:d4:6a:8d:46:00:12:d8:57:84:53:cd:b1:3b:
e1:db:93:03:16:4d:06:00:10:c8:a1:9b:4b:da:42:db:09:93:
9e:de:17:8b:22:0d:db:4d:4b:b9:0b:05:5b:55:d3:b3:99:74:
cb:01:8f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:25:12 2026 by rpki-client