Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: EcDFel6SNtue3at0R2DUWNnu24PrhmKo4bltRwzImj4=
Subject key identifier: 11:C3:EA:0A:3C:63:AF:A3:21:BC:F6:3B:07:41:B7:7E:44:68:96:E2
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 019FAB2C79D0FB011924696D734BA41FDCE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 0DEA
Signing time: Wed 29 Jul 2026 00:00:46 +0000
Manifest this update: Wed 29 Jul 2026 00:00:46 +0000
Manifest next update: Thu 30 Jul 2026 00:00:46 +0000
Files and hashes: 1: 1-SeUDqI8Ro4aGCyTtd-jgFozlto.roa (hash: 8a5+u2VImSUXdz/RNQV3GzWRx7Dr6+wCatlfsz939ds=)
2: 11o2iLgDPCuePLQgq2cbeg8IOSU.roa (hash: 7FivvoKuc8ZAaHXETYuK4eG8oIMl6d9f2SuMter7leo=)
3: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: /0b2JGibHnxNGLj/2Y2L9jQA2fhK1Tyu9GSIRFJLieo=)
4: apdlR9yvflDTKKIXJ67fjl8xDOo.roa (hash: bK32lK6qoaOVabJNvvUP8TTPkjqexdWgmiaw7lt28kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:79:d0:fb:01:19:24:69:6d:73:4b:a4:1f:dc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Jul 29 00:00:46 2026 GMT
Not After : Jul 30 00:00:46 2026 GMT
Subject: CN=11c3ea0a3c63afa321bcf63b0741b77e446896e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:29:ab:fa:10:14:c8:dd:b4:48:b0:d9:08:
0e:a6:00:79:14:aa:ef:b8:c8:07:3b:b1:9d:07:9b:
23:8b:5e:0a:af:22:bd:7c:b2:b2:be:06:d3:f6:02:
ed:fa:91:d2:72:54:4c:25:53:5b:5c:eb:05:3a:69:
40:05:0f:71:83:94:b5:13:9e:45:07:f5:9e:cf:0e:
aa:e9:68:a0:7a:4f:97:53:eb:57:f9:b3:1c:14:f5:
3e:80:65:7d:86:a1:5a:b9:09:4f:6e:56:22:ec:3c:
22:71:1c:40:1c:1f:76:ce:9f:eb:f5:96:64:89:7c:
14:9c:5e:5a:92:4e:66:1f:9e:eb:65:c1:d1:3f:8f:
1b:80:d9:fb:76:37:73:ae:b3:28:8e:37:37:21:d9:
53:a3:c2:a4:a4:71:59:10:e2:0b:34:ae:78:69:86:
4a:df:c2:4a:6d:07:74:73:6b:1c:28:e0:e2:9b:2b:
04:33:6d:86:dc:5a:5e:91:c5:66:92:84:88:65:51:
6a:cd:da:d5:76:f2:af:d4:98:aa:b9:2d:f8:2b:3f:
3e:b9:32:da:43:ab:2a:ef:35:8e:bc:04:9e:57:d1:
80:e4:54:4c:7e:81:05:59:d8:1c:fa:8b:c7:ef:48:
a3:9c:55:d6:83:80:cf:b4:53:2a:5a:f5:01:43:f9:
6b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C3:EA:0A:3C:63:AF:A3:21:BC:F6:3B:07:41:B7:7E:44:68:96:E2
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c8:ee:c0:1b:91:ab:f1:78:59:72:0a:15:bd:b0:29:12:f2:
83:8c:95:4f:85:5f:47:28:cc:0e:d3:09:7b:3d:c3:42:66:2d:
ed:16:9a:42:37:75:c6:a6:25:72:7b:ac:09:f5:00:ef:e0:6b:
0c:ad:8a:b3:11:0a:41:a7:cc:90:c6:37:88:57:4c:b1:d1:76:
ab:92:01:5b:17:5b:a5:23:15:00:29:ce:58:e0:12:7f:ab:39:
4d:cf:b6:b9:8d:d5:f6:78:f5:9f:b8:e0:76:9e:bc:77:66:b7:
1d:73:d8:cd:63:cd:3c:20:19:54:c3:17:b8:56:1a:92:92:97:
04:8b:d9:8c:6b:65:33:fe:18:80:77:63:11:58:d0:85:8d:e3:
42:72:1e:c4:39:96:76:37:35:9d:11:eb:ea:f9:98:79:55:e0:
cd:d6:9c:b0:60:e8:1c:dc:ab:ec:6c:aa:35:f1:4c:dd:fc:18:
c4:57:5e:a8:a9:73:6f:4c:4f:6c:a2:6e:84:63:51:20:e2:05:
ec:46:bf:1a:c2:25:aa:1d:2e:03:ff:35:f8:09:39:a2:1d:a0:
79:f9:0e:8e:d8:a4:11:f4:3b:f1:52:69:95:53:3b:02:b0:3d:
c1:11:4d:b9:03:2e:1a:79:54:e7:52:68:b9:b2:1f:77:fa:ee:
39:1d:eb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:43:56 2026 by rpki-client