Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier: jF9PYpb+kpPUNIbhsHEALAMPrWeocO7dnUsv7jWV1+Y=
Subject key identifier: 90:94:6C:70:2C:B9:98:2D:90:D6:E2:6D:BA:31:B6:10:07:75:54:2D
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial: 019D9B19771016C2D356FDBDBA43A3E8FFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number: 05A6
Signing time: Fri 17 Apr 2026 11:00:30 +0000
Manifest this update: Fri 17 Apr 2026 11:00:30 +0000
Manifest next update: Sat 18 Apr 2026 11:00:30 +0000
Files and hashes: 1: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: 6PdIZ/jRRtpv0euL3odVkBx6FD7uhYVqiOypElx9Qq8=)
2: R_tuRGNyH8maQImtyJX8ka61Rts.roa (hash: CI3pZc4MmuEvMGaaRVV9hzb41var6bWscwqeDxkewRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:77:10:16:c2:d3:56:fd:bd:ba:43:a3:e8:ff:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Validity
Not Before: Apr 17 11:00:30 2026 GMT
Not After : Apr 18 11:00:30 2026 GMT
Subject: CN=90946c702cb9982d90d6e26dba31b6100775542d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:f7:21:ae:20:0b:96:9d:14:75:13:f2:73:
01:fb:5b:23:04:8b:d4:fa:d3:ed:52:86:f5:af:c2:
86:0d:38:6c:64:84:f6:a6:ae:2b:b0:03:24:48:7b:
50:bd:72:9d:e4:59:e7:a6:32:79:a0:a1:98:52:84:
25:79:84:a4:04:a6:f4:eb:60:c2:e7:92:22:f4:88:
50:ed:67:13:52:ca:1c:2c:8b:a3:01:a2:00:4e:e9:
2b:b6:d9:58:c5:77:be:dd:a0:a2:9e:db:cf:fc:00:
ba:39:eb:0f:8e:52:ab:f0:ad:8d:b4:d2:cb:86:ce:
46:22:44:be:5e:23:be:28:aa:c0:b8:30:f9:5b:4c:
13:47:92:db:9a:f6:a6:ef:40:c1:83:72:4d:74:a0:
a8:47:bf:79:53:bf:6b:f6:a8:f4:b7:79:b8:62:e4:
b4:73:0c:68:78:5f:20:c7:f2:6d:75:56:02:c2:03:
b4:7e:f4:30:2e:f2:07:f4:65:25:14:0d:8f:32:d4:
53:2c:e3:9c:b8:e7:4f:3d:0a:7b:3b:80:72:94:82:
d7:e1:f2:c8:6a:a4:7e:80:a6:7d:0c:b4:ba:71:ca:
b4:ba:8d:c4:bd:14:33:71:af:9d:df:89:4f:e3:78:
da:30:7d:6d:16:d6:4e:71:fd:60:6f:a2:98:2d:33:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:94:6C:70:2C:B9:98:2D:90:D6:E2:6D:BA:31:B6:10:07:75:54:2D
X509v3 Authority Key Identifier:
keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fa:ac:89:be:e1:4d:14:37:5b:19:49:d1:4c:02:c9:9d:64:
1f:e3:fd:5c:f8:65:ff:a7:b8:0c:28:7d:cc:96:f7:7a:ca:5c:
73:56:0d:b5:c9:89:ff:04:bb:f9:74:bf:c5:3f:37:15:a5:84:
9c:53:42:d2:01:fc:52:96:81:b7:b3:da:85:9f:11:92:08:0f:
91:57:1c:ad:72:1c:bb:0f:3f:23:a5:b1:65:a8:74:c6:ea:8b:
a3:4a:97:37:5e:d1:3d:cd:0f:91:54:8a:88:04:4b:2e:99:d8:
dc:41:ae:26:c9:69:5c:c2:f5:3b:f7:3d:be:d2:88:fd:49:e8:
ce:e0:73:ec:6d:c1:ee:74:07:69:4b:b5:83:4d:8f:4d:24:c0:
15:de:c9:1c:9c:69:09:a1:ee:c6:eb:6e:ef:67:00:eb:a1:a3:
3c:92:3e:9c:20:bc:e0:3e:d8:11:f9:94:9c:f4:75:7d:21:1b:
f5:e2:ad:9c:6b:7b:fe:90:9f:6e:d2:81:82:f5:22:18:24:64:
01:e9:0e:99:51:43:3a:8b:08:2b:d7:6b:66:0e:70:c1:42:f1:
78:51:61:af:76:a8:89:40:da:e5:24:e8:4c:ed:1d:42:20:44:
a5:38:e6:b7:8e:6e:d6:45:56:3e:23:94:22:1e:84:51:57:6a:
25:c6:91:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGXcQFsLTVv29ukOj6P/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDZhOGE2MzlmODhhYWYxZjQzNmQ2YTIwYjQxNzdiMzhk
MzkwZmMwHhcNMjYwNDE3MTEwMDMwWhcNMjYwNDE4MTEwMDMwWjAzMTEwLwYDVQQD
Eyg5MDk0NmM3MDJjYjk5ODJkOTBkNmUyNmRiYTMxYjYxMDA3NzU1NDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfn3Ia4gC5adFHUT8nMB+1sjBIvU
+tPtUob1r8KGDThsZIT2pq4rsAMkSHtQvXKd5FnnpjJ5oKGYUoQleYSkBKb062DC
55Ii9IhQ7WcTUsocLIujAaIATukrttlYxXe+3aCintvP/AC6OesPjlKr8K2NtNLL
hs5GIkS+XiO+KKrAuDD5W0wTR5Lbmvam70DBg3JNdKCoR795U79r9qj0t3m4YuS0
cwxoeF8gx/JtdVYCwgO0fvQwLvIH9GUlFA2PMtRTLOOcuOdPPQp7O4BylILX4fLI
aqR+gKZ9DLS6ccq0uo3EvRQzca+d34lP43jaMH1tFtZOcf1gb6KYLTPEiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCUbHAsuZgtkNbibboxthAHdVQtMB8GA1UdIwQY
MBaAFAPWqKY5+IqvH0NtaiC0F3s405D8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQt
YzIwZGU1NDNjMGRmLzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQtYzIwZGU1NDNjMGRm
LzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPqsib7h
TRQ3WxlJ0UwCyZ1kH+P9XPhl/6e4DCh9zJb3espcc1YNtcmJ/wS7+XS/xT83FaWE
nFNC0gH8UpaBt7PahZ8RkggPkVccrXIcuw8/I6WxZah0xuqLo0qXN17RPc0PkVSK
iARLLpnY3EGuJslpXML1O/c9vtKI/UnozuBz7G3B7nQHaUu1g02PTSTAFd7JHJxp
CaHuxutu72cA66GjPJI+nCC84D7YEfmUnPR1fSEb9eKtnGt7/pCfbtKBgvUiGCRk
AekOmVFDOosIK9drZg5wwULxeFFhr3aoiUDa5SToTO0dQiBEpTjmt45u1kVWPiOU
Ih6EUVdqJcaRsg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:55 2026 by rpki-client