Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File: A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier: ktN6E5CbQX/ryzszHtSKhi4a1azQE9Le+2e3JSiPeqA=
Subject key identifier: 17:41:9F:BC:16:C4:D2:0C:9A:BD:A3:37:49:AB:1F:0E:FA:1E:6A:1C
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial: 01A12BB1FF827F9C29AB5A822EBB7D985BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 16:00:47 +0000
Manifest this update: Sun 11 Oct 2026 16:00:47 +0000
Manifest next update: Mon 12 Oct 2026 16:00:47 +0000
Files and hashes: 1: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: r7TAk+Llaf5SHMhO3Fu1PzhPaRETbQQVrjKtp/nstHk=)
2: NUvHrFA2BWaljLnMJQIXISBCOCw.roa (hash: A18alchxY/YsI5uTxh8zdJwNGymtxbxWl+jED+FQCqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b1:ff:82:7f:9c:29:ab:5a:82:2e:bb:7d:98:5b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Validity
Not Before: Oct 11 16:00:47 2026 GMT
Not After : Oct 12 16:00:47 2026 GMT
Subject: CN=17419fbc16c4d20c9abda33749ab1f0efa1e6a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:5d:69:b6:89:4e:a7:11:6f:e4:81:c2:b6:
62:65:eb:81:bb:a2:b2:9b:0b:c0:f5:49:92:b9:f1:
45:f2:16:cb:50:d5:21:6a:31:c8:d7:97:de:9a:5c:
93:9f:ad:db:4b:e8:e4:a9:83:f5:85:e0:1d:db:0f:
df:34:ea:a2:ea:db:c7:ca:06:0c:6f:f5:e0:bf:71:
18:cb:f1:98:45:1d:1c:d5:b9:1e:fe:85:94:99:64:
d2:ea:07:19:43:61:5c:07:1f:07:47:e3:3a:a0:69:
89:8b:5f:c7:87:60:3a:81:6f:35:6e:aa:16:e5:e8:
c6:31:03:e0:52:d8:a2:34:70:cc:e8:df:26:ca:91:
73:bb:f8:3b:4f:71:e9:9d:65:b1:3c:11:5b:d2:92:
b4:e8:98:18:5f:4f:ed:7a:49:68:aa:64:c5:c6:0a:
7e:f3:8e:59:ad:8c:b9:49:a1:e0:52:be:b3:10:21:
70:8e:3f:b6:b1:4e:e2:f1:a1:35:51:6e:a9:05:71:
a1:88:39:76:58:ec:2b:a5:a3:86:b1:c4:80:65:ea:
9b:ac:a4:48:45:63:38:ce:8b:6e:40:6d:ed:b6:3d:
8f:86:5b:47:24:c5:c5:70:b6:61:e5:77:44:bc:e8:
dc:4a:58:ad:80:08:c1:8f:ca:22:b7:09:4c:1e:90:
d5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:41:9F:BC:16:C4:D2:0C:9A:BD:A3:37:49:AB:1F:0E:FA:1E:6A:1C
X509v3 Authority Key Identifier:
keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fe:88:eb:97:70:63:5e:a6:32:57:32:95:af:4c:e1:f5:2c:
5f:75:93:f7:51:bd:f2:68:c3:be:04:ba:c2:a7:7e:e5:cb:16:
4c:b7:8c:89:62:f1:b4:6d:8a:17:c1:5c:67:47:dd:38:51:c9:
74:2e:97:e0:38:65:b1:cd:ff:16:ca:7b:9b:aa:73:01:a2:0f:
cf:fe:02:f2:f0:e8:07:0e:b5:55:3d:f0:99:81:9a:00:de:9d:
f0:06:58:52:69:ee:3b:90:19:92:d0:62:63:a1:b9:e8:b1:c4:
c4:66:77:7c:41:ad:d2:3c:29:42:a3:a2:13:44:1a:2c:89:64:
04:90:ed:9e:e3:a3:86:50:a2:09:f5:4c:d2:ef:fd:41:dd:38:
63:75:7f:17:01:ad:05:48:85:15:e3:9f:55:1b:65:9b:53:c6:
12:3f:c9:7a:9d:cd:c0:68:22:68:bb:90:c7:60:16:1a:4e:f4:
bc:61:fb:18:ef:fa:81:64:40:9f:45:89:68:9a:a4:d6:da:98:
95:9c:8d:10:bb:c5:84:de:0e:33:ab:4b:73:22:3a:e4:9a:a8:
37:13:ff:ac:7e:06:87:8c:ff:d4:8b:3b:05:08:d2:09:f7:ce:
60:06:4b:1e:47:cb:1a:75:69:ca:52:cd:c8:8b:a5:58:cf:2f:
35:77:2f:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErsf+Cf5wpq1qCLrt9mFvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjgzODgzNzJkYzMzMmM3Y2M2Zjc3NjZhZDc4ZDU4YTIz
YjI1NDQwHhcNMjYxMDExMTYwMDQ3WhcNMjYxMDEyMTYwMDQ3WjAzMTEwLwYDVQQD
EygxNzQxOWZiYzE2YzRkMjBjOWFiZGEzMzc0OWFiMWYwZWZhMWU2YTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWddabaJTqcRb+SBwrZiZeuBu6Ky
mwvA9UmSufFF8hbLUNUhajHI15femlyTn63bS+jkqYP1heAd2w/fNOqi6tvHygYM
b/Xgv3EYy/GYRR0c1bke/oWUmWTS6gcZQ2FcBx8HR+M6oGmJi1/Hh2A6gW81bqoW
5ejGMQPgUtiiNHDM6N8mypFzu/g7T3HpnWWxPBFb0pK06JgYX0/tekloqmTFxgp+
845ZrYy5SaHgUr6zECFwjj+2sU7i8aE1UW6pBXGhiDl2WOwrpaOGscSAZeqbrKRI
RWM4zotuQG3ttj2PhltHJMXFcLZh5XdEvOjcSlitgAjBj8oitwlMHpDV9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdBn7wWxNIMmr2jN0mrHw76HmocMB8GA1UdIwQY
MBaAFAP4OINy3DMsfMb3dmrXjViiOyVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZTExNjUtYzYxMC00OTg4LWE0OWQt
OTQ1NTg1OGU5YzA2LzEvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85ZTExNjUtYzYxMC00OTg4LWE0OWQtOTQ1NTg1OGU5YzA2
LzEvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjv6I65dw
Y16mMlcyla9M4fUsX3WT91G98mjDvgS6wqd+5csWTLeMiWLxtG2KF8FcZ0fdOFHJ
dC6X4Dhlsc3/Fsp7m6pzAaIPz/4C8vDoBw61VT3wmYGaAN6d8AZYUmnuO5AZktBi
Y6G56LHExGZ3fEGt0jwpQqOiE0QaLIlkBJDtnuOjhlCiCfVM0u/9Qd04Y3V/FwGt
BUiFFeOfVRtlm1PGEj/Jep3NwGgiaLuQx2AWGk70vGH7GO/6gWRAn0WJaJqk1tqY
lZyNELvFhN4OM6tLcyI65JqoNxP/rH4Gh4z/1Is7BQjSCffOYAZLHkfLGnVpylLN
yIulWM8vNXcvvQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:52:59 2026 by rpki-client