Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: o1DxRhqqSuCIKpyLKmY8xZmulk+DszXpTHfEDJWh7ig=
Subject key identifier: 50:DD:0B:FF:3D:06:A4:56:74:8A:5D:27:01:F5:B0:EC:E0:AE:39:01
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 019FA93E373141CF8F4FAE6388E3B5525ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 0DE9
Signing time: Tue 28 Jul 2026 15:00:54 +0000
Manifest this update: Tue 28 Jul 2026 15:00:54 +0000
Manifest next update: Wed 29 Jul 2026 15:00:54 +0000
Files and hashes: 1: 1-SeUDqI8Ro4aGCyTtd-jgFozlto.roa (hash: 8a5+u2VImSUXdz/RNQV3GzWRx7Dr6+wCatlfsz939ds=)
2: 11o2iLgDPCuePLQgq2cbeg8IOSU.roa (hash: 7FivvoKuc8ZAaHXETYuK4eG8oIMl6d9f2SuMter7leo=)
3: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: llnigaLLFnZnleQRfBfIEbUqAFWf2XsEHxkEd/QpX/s=)
4: apdlR9yvflDTKKIXJ67fjl8xDOo.roa (hash: bK32lK6qoaOVabJNvvUP8TTPkjqexdWgmiaw7lt28kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:37:31:41:cf:8f:4f:ae:63:88:e3:b5:52:5e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Jul 28 15:00:54 2026 GMT
Not After : Jul 29 15:00:54 2026 GMT
Subject: CN=50dd0bff3d06a456748a5d2701f5b0ece0ae3901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:e3:0f:d7:bd:61:ed:be:a6:e4:4e:fa:03:
4e:fb:4d:e9:1a:8c:dc:c6:0d:23:38:d4:ec:35:fe:
df:34:7a:cf:23:8a:3d:bc:d1:68:ef:09:d7:a4:8c:
30:8a:cf:2a:b7:26:b6:8b:29:97:09:05:32:44:14:
7e:37:71:76:ac:ba:dd:57:c3:f5:f0:3d:ee:2a:05:
cb:57:3e:07:fe:8b:4b:30:c5:59:89:c3:3e:64:38:
36:77:15:62:e6:ea:fc:77:3e:91:83:48:af:92:ce:
92:4e:83:e7:2c:a9:be:47:2f:7a:f5:09:ca:86:76:
b7:4b:2b:e5:6d:78:6b:af:f7:91:3e:1b:8d:5f:70:
e7:0f:03:49:33:28:7c:2b:48:51:b1:0b:3e:48:49:
8c:b4:0c:4e:8d:cd:ff:2a:d5:4e:e1:b5:c0:f1:87:
f6:aa:27:5b:03:e9:09:05:5e:2a:6c:60:07:22:a4:
ef:cb:2d:87:d5:56:7b:37:16:fc:ad:12:cd:c5:77:
19:11:fd:2b:62:e0:d1:49:b7:c8:20:0d:1c:70:d5:
ac:34:ef:a5:ca:c6:7b:1b:4e:c4:5f:4a:57:97:3d:
e0:21:18:b7:5e:18:51:f3:ce:16:94:91:4e:88:02:
78:da:fa:8e:d1:4b:ea:3d:44:38:33:ed:91:1b:f9:
41:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DD:0B:FF:3D:06:A4:56:74:8A:5D:27:01:F5:B0:EC:E0:AE:39:01
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a9:9c:ab:85:78:07:97:14:b8:1b:26:09:ca:4b:63:e4:87:
86:bc:d3:ba:dd:e0:6a:0e:03:d3:f8:98:a2:a7:f9:f8:6e:cc:
59:65:17:ed:f0:04:39:9b:e9:5a:bb:c5:16:9c:5e:d1:ac:36:
27:f3:dd:86:10:be:94:08:2e:56:78:ae:21:76:e2:14:82:e3:
a8:fa:8b:42:e9:18:69:2f:00:1e:44:15:c1:d5:20:4b:d9:d1:
e5:4a:2f:5f:71:88:e2:ef:db:83:8e:d7:c0:57:3a:a5:f8:08:
ef:a6:cc:d9:76:c0:0e:5a:55:9f:1e:b0:df:45:bf:e4:db:cf:
41:38:a7:e7:0f:70:f8:ed:65:00:bf:50:72:9d:ae:aa:82:2f:
8d:71:87:66:2f:fe:b1:a5:8e:c3:4d:69:b6:0a:d5:29:d9:e4:
7f:75:f8:5c:fe:17:34:a5:59:d1:88:93:8a:4f:4f:51:9a:29:
5b:a3:9b:85:bc:d9:6a:c9:ea:b3:93:8f:01:14:8d:76:08:50:
30:bf:1e:ab:ec:57:c9:b5:92:3b:dd:ae:3e:b4:2d:e7:f3:c5:
df:9e:27:c8:e5:df:ea:91:9f:6d:f0:e3:6e:09:11:36:e9:6c:
1b:c1:fc:c9:35:9a:da:10:35:73:75:fe:f8:2f:72:38:77:3d:
7b:8f:dc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:11:49 2026 by rpki-client