Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: tWAuney1F4K9rJUiOpr3UubUL7J95hDvoKDAvYY4MnY=
Subject key identifier: B6:9A:23:BC:CF:62:2C:93:C8:D2:1C:A4:F5:0A:E1:62:BB:0A:1E:47
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 019D9818D896080333317A11A1B8488CEB46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 0CD7
Signing time: Thu 16 Apr 2026 21:00:58 +0000
Manifest this update: Thu 16 Apr 2026 21:00:58 +0000
Manifest next update: Fri 17 Apr 2026 21:00:58 +0000
Files and hashes: 1: 1-SeUDqI8Ro4aGCyTtd-jgFozlto.roa (hash: 8a5+u2VImSUXdz/RNQV3GzWRx7Dr6+wCatlfsz939ds=)
2: 11o2iLgDPCuePLQgq2cbeg8IOSU.roa (hash: 7FivvoKuc8ZAaHXETYuK4eG8oIMl6d9f2SuMter7leo=)
3: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: aMOW8mxC5ow93hFvBhciBmTPsxJUmWIgTvWDoNfGSw0=)
4: apdlR9yvflDTKKIXJ67fjl8xDOo.roa (hash: bK32lK6qoaOVabJNvvUP8TTPkjqexdWgmiaw7lt28kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:d8:96:08:03:33:31:7a:11:a1:b8:48:8c:eb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Apr 16 21:00:58 2026 GMT
Not After : Apr 17 21:00:58 2026 GMT
Subject: CN=b69a23bccf622c93c8d21ca4f50ae162bb0a1e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:ab:d5:64:88:10:b9:bb:5c:e7:52:93:af:
6e:16:cf:21:ae:d1:b1:14:03:be:57:74:56:14:db:
2b:3e:cd:03:90:62:df:fa:50:05:7b:5a:a0:99:e1:
cc:13:f0:47:9c:09:22:6b:28:df:51:e6:c0:0c:be:
b1:dc:6a:d3:ff:13:c3:64:d2:27:e4:57:30:f0:79:
30:c9:20:e6:86:92:77:f0:bb:8b:5a:aa:09:17:da:
7b:76:89:03:22:3e:ac:64:dd:7f:3d:21:f7:cb:a2:
5c:3e:20:e9:ef:54:db:fa:ed:b0:fd:b3:75:cd:9c:
57:4e:9b:9b:bc:1e:06:a3:a5:2d:60:40:12:62:d9:
26:d1:ca:6b:ea:67:4c:7d:fa:f2:08:26:a5:6d:b4:
05:34:a3:d5:5b:30:0b:c7:6f:f1:00:ab:07:40:ff:
23:d9:4c:c4:9c:ea:cf:4f:62:4b:3a:f7:04:82:c7:
9d:71:c2:5f:d4:76:52:a1:f9:d2:81:e7:80:04:43:
fb:ac:b1:ed:dd:d3:1c:a1:eb:c7:9d:90:2b:73:cf:
6e:2f:2b:3b:92:5e:53:6d:fd:f4:f7:02:a0:40:a4:
85:6b:e7:9d:be:aa:5d:df:8c:63:f2:51:6e:36:db:
e4:9d:46:82:9f:f8:dc:a4:fa:b7:3d:e0:e6:81:a3:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9A:23:BC:CF:62:2C:93:C8:D2:1C:A4:F5:0A:E1:62:BB:0A:1E:47
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2d:89:7c:db:62:de:f7:e2:ef:f5:5d:c0:94:c9:d4:f4:f0:
c6:de:8b:4e:16:46:5f:f7:cb:ee:7e:54:ef:7d:10:86:45:a3:
1f:3a:46:84:8d:36:4e:d3:d9:11:2f:92:38:24:bc:15:2f:8c:
08:95:36:4f:49:ef:69:2c:34:3a:79:41:b5:c9:8e:3a:ce:b2:
55:2b:c2:85:6d:bf:ed:70:9f:83:de:19:04:e9:bf:6d:79:0f:
71:9b:0f:df:52:86:99:ef:b5:df:1e:ab:40:38:58:60:ac:a1:
ce:7f:fa:f9:88:f7:96:9d:51:8f:e8:36:9f:4d:52:94:9a:7a:
33:ca:71:c3:71:5c:bf:83:01:06:aa:ca:0b:db:b9:9f:71:f0:
02:55:79:36:11:8f:65:0b:94:73:be:b7:a1:b6:ca:94:b9:76:
08:e1:da:40:11:06:ba:11:d3:8f:00:7d:79:1e:f8:96:15:3b:
62:e6:c3:f6:c7:a7:19:ba:94:e0:5d:e3:c3:f1:2c:c2:7a:6e:
64:8c:ba:fd:02:6b:28:82:e9:8d:9d:86:1b:97:43:7c:ad:8f:
17:61:ed:c9:c0:8b:0f:01:44:58:50:03:f8:eb:88:47:61:0e:
e7:6b:a2:a6:ef:53:17:b1:48:79:d1:67:2a:24:99:d9:94:71:
32:1a:75:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:27 2026 by rpki-client