Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: bBXzQZF0et+UVtImhSbmCfgRYenRFcViJ/1s2edK61A=
Subject key identifier: B1:EF:70:67:85:D7:7D:C6:8F:D8:29:C2:DC:C3:FD:9C:80:7F:42:C7
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 019EC336FEBA8BD5552B5E5593029B5E82AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 15AB
Signing time: Sat 13 Jun 2026 23:00:21 +0000
Manifest this update: Sat 13 Jun 2026 23:00:21 +0000
Manifest next update: Sun 14 Jun 2026 23:00:21 +0000
Files and hashes: 1: A4nevXWVLl5vdfSO_m17bHDukbA.roa (hash: QX/nCQkB1QHkZvD4R7eemwvmvQKwPODodhWHPVsSonY=)
2: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: i11OANmXGYsLiFi/44wcOZVIFzRWSnBafPPNXGVinGc=)
3: Em6H44j6iihpO4fA0GysA5KFhow.roa (hash: cCDm2T/ieWvHFIMXCp6aDYjKM7+qQdF6aF/yhfZ3+5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:36:fe:ba:8b:d5:55:2b:5e:55:93:02:9b:5e:82:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Jun 13 23:00:21 2026 GMT
Not After : Jun 14 23:00:21 2026 GMT
Subject: CN=b1ef706785d77dc68fd829c2dcc3fd9c807f42c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:a4:6c:34:14:7c:25:0d:db:25:43:37:9e:
46:3e:fb:7e:ef:a8:ea:3e:70:a7:bd:ab:c2:a1:e6:
57:21:2a:15:4c:4f:ca:63:72:d8:52:e8:06:db:5e:
ff:b6:09:6a:29:8a:da:bb:cc:80:72:32:19:4e:87:
f6:2d:43:03:d2:47:37:b9:1d:bc:72:1b:99:40:9a:
2e:60:7f:21:c8:7b:59:2c:df:b4:3d:59:37:49:47:
89:97:7d:4b:55:5c:8c:2b:2a:51:ef:31:2e:f5:a3:
96:c2:71:90:c1:a4:23:1b:23:5a:fe:61:7e:8b:3f:
74:c2:3e:4d:05:d6:9e:94:68:05:7f:b5:d3:06:5f:
17:9f:c3:1b:e8:61:c7:a7:58:fa:43:7f:23:cb:63:
9b:f4:6a:e5:a9:74:48:14:cc:e8:c6:91:48:d8:5b:
5a:a3:28:94:5b:56:31:2a:05:48:0f:70:a2:70:75:
6d:6c:24:3a:43:bc:7f:80:d1:7b:f5:2e:49:83:55:
c1:6a:13:d9:7c:1f:53:15:22:d7:05:cc:a8:99:a8:
84:47:3f:f2:d7:08:9a:b8:c7:1f:f9:02:47:53:14:
8d:9a:8c:e6:16:6b:37:c7:ea:72:dd:cd:97:e0:a9:
6c:27:d4:71:8e:94:29:cc:fb:da:cc:94:ae:e3:57:
e5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EF:70:67:85:D7:7D:C6:8F:D8:29:C2:DC:C3:FD:9C:80:7F:42:C7
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:84:57:d7:81:c0:da:2f:ed:b3:ec:9e:a1:76:12:bb:9d:43:
af:da:0b:42:b6:d9:59:2d:2e:85:7b:58:ea:77:ca:ba:6c:c2:
1c:13:1e:80:c0:d8:e6:88:4c:ca:9c:46:5b:43:f6:89:06:79:
8d:d3:0c:2f:e2:77:9e:61:d2:58:68:88:1d:09:38:36:59:a1:
fa:3f:6e:f5:59:f0:04:bc:a0:44:73:7a:e2:23:7f:ea:92:0a:
29:d7:34:45:50:ef:1e:64:73:e6:fd:51:2a:29:1d:4e:06:53:
fa:7f:79:b3:58:76:40:41:f4:89:f7:3e:a8:a4:88:34:f9:74:
ce:ee:bc:6d:e6:57:95:3a:b5:1b:36:8d:c0:60:2e:ad:7a:98:
b8:c0:c6:f2:a9:6b:30:d8:28:b5:ef:84:4b:27:22:91:84:86:
6f:82:a1:2f:22:ff:f6:1b:a5:43:d9:65:29:11:aa:9b:38:e6:
f0:b4:c3:53:4f:1d:99:b7:91:07:28:4d:3f:5b:eb:5a:d1:ae:
f2:5c:11:bb:5b:c6:a2:7e:19:09:cc:65:4f:02:15:3f:77:8b:
b5:72:03:2f:4c:78:5e:d9:61:59:ba:93:08:bd:82:5c:26:43:
a0:59:56:2a:95:93:78:ad:16:ba:5b:2c:79:26:b8:98:a0:9f:
b2:df:e2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:53 2026 by rpki-client