Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: SoT6+WtnfBKSzLUiev5QmitYnbgXqNPrEUzjfrrTTM0=
Subject key identifier: E2:9A:18:A0:E9:F8:C6:8F:A0:BF:B6:9E:D0:60:45:A6:D1:A9:A6:11
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 01A0E5BE6B0A4149D75ACA9E8DE124899AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 16C6
Signing time: Mon 28 Sep 2026 02:00:56 +0000
Manifest this update: Mon 28 Sep 2026 02:00:56 +0000
Manifest next update: Tue 29 Sep 2026 02:00:56 +0000
Files and hashes: 1: A4nevXWVLl5vdfSO_m17bHDukbA.roa (hash: QX/nCQkB1QHkZvD4R7eemwvmvQKwPODodhWHPVsSonY=)
2: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: ZVdU72lDdI3oi/P6wpF9xxxZXFaHbvYumOShRCl/x4c=)
3: Em6H44j6iihpO4fA0GysA5KFhow.roa (hash: cCDm2T/ieWvHFIMXCp6aDYjKM7+qQdF6aF/yhfZ3+5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:be:6b:0a:41:49:d7:5a:ca:9e:8d:e1:24:89:9a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Sep 28 02:00:56 2026 GMT
Not After : Sep 29 02:00:56 2026 GMT
Subject: CN=e29a18a0e9f8c68fa0bfb69ed06045a6d1a9a611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:62:50:78:c8:83:d5:1c:99:c6:76:7f:b4:
27:ff:29:e6:81:4b:ed:44:5d:5f:1e:33:fd:4c:40:
c1:be:f8:d3:23:9e:44:2a:48:80:20:06:9e:19:f7:
25:7b:ea:e9:33:87:95:1e:75:40:b8:d9:26:19:07:
09:71:c7:4b:6f:e7:18:6a:3a:a2:e8:98:e7:ed:51:
0f:3b:ea:14:ac:fa:d4:e3:d6:17:49:51:5b:a4:8b:
c5:84:46:2d:7c:01:d6:8b:02:e8:68:26:84:c9:cd:
7d:ce:97:32:a3:8b:ee:b8:6d:de:b1:dc:19:93:40:
20:ff:86:c0:0a:21:eb:4f:83:a9:24:16:2c:eb:12:
ef:13:67:ff:4f:3a:7e:98:c2:78:8d:a4:03:43:36:
e9:e9:b4:ec:ae:79:6c:75:8f:71:eb:86:dd:e6:6a:
ea:f9:bf:a0:9a:71:9a:a5:5a:18:5f:db:73:44:5f:
9a:09:81:80:f9:5b:d1:e5:5c:00:4c:b7:ef:a2:2f:
55:43:3a:f6:e7:3d:75:ec:14:33:61:25:3e:63:40:
f8:48:ef:62:e0:47:ce:7b:d7:7c:b7:f8:b0:d8:f0:
00:be:e4:d6:12:4c:92:d9:ab:9b:40:88:18:0a:47:
ce:23:df:e3:0f:52:09:2c:20:b9:58:af:97:82:a0:
98:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9A:18:A0:E9:F8:C6:8F:A0:BF:B6:9E:D0:60:45:A6:D1:A9:A6:11
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d4:01:7a:3b:d5:11:61:53:12:c7:a8:05:49:b4:02:69:1a:
3d:d0:4b:8f:dc:5f:a4:40:6f:23:2d:e0:a0:f7:65:9c:40:05:
54:73:bf:da:e6:7c:e3:88:1b:a1:ee:9b:df:ac:92:3a:96:ec:
a9:a8:c0:47:2e:75:13:0a:04:7f:95:eb:d3:49:dc:83:5a:74:
ad:e2:a0:45:ee:dd:6c:06:c0:5f:22:21:7a:44:b2:6a:71:e6:
ba:4e:9f:46:9d:67:2e:ee:70:03:63:a0:58:c6:53:18:35:79:
8a:c7:8b:f4:78:cb:a4:be:04:c7:b6:37:64:2e:76:ba:66:27:
c3:1b:09:d8:93:f4:95:7d:3e:4c:76:b9:a5:7b:bf:5d:65:3e:
4e:70:33:58:65:f1:73:64:9f:c3:fd:cb:4a:86:d6:02:8f:56:
2a:b0:3d:4b:d7:5b:5c:57:7d:0b:27:33:d3:d1:cb:dc:90:96:
3d:5d:7a:ae:ef:2a:fc:09:f8:9f:19:40:14:85:c5:7f:98:f1:
d4:a1:58:e4:f1:a2:56:77:d9:cc:b3:f9:58:c4:5b:ee:09:6c:
79:9a:b9:9c:ef:3e:1a:42:5a:42:0f:08:94:57:1d:80:bf:e2:
66:73:9f:f3:47:a1:26:08:67:01:38:50:d9:b5:16:6f:e0:be:
eb:85:d8:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDlvmsKQUnXWsqejeEkiZqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDgwMjQxODg0OTFhMzE5YzUyNzY3MjFmOTQwZWZhZTdm
YzIxYWYwHhcNMjYwOTI4MDIwMDU2WhcNMjYwOTI5MDIwMDU2WjAzMTEwLwYDVQQD
EyhlMjlhMThhMGU5ZjhjNjhmYTBiZmI2OWVkMDYwNDVhNmQxYTlhNjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXBiUHjIg9UcmcZ2f7Qn/ynmgUvt
RF1fHjP9TEDBvvjTI55EKkiAIAaeGfcle+rpM4eVHnVAuNkmGQcJccdLb+cYajqi
6Jjn7VEPO+oUrPrU49YXSVFbpIvFhEYtfAHWiwLoaCaEyc19zpcyo4vuuG3esdwZ
k0Ag/4bACiHrT4OpJBYs6xLvE2f/Tzp+mMJ4jaQDQzbp6bTsrnlsdY9x64bd5mrq
+b+gmnGapVoYX9tzRF+aCYGA+VvR5VwATLfvoi9VQzr25z117BQzYSU+Y0D4SO9i
4EfOe9d8t/iw2PAAvuTWEkyS2aubQIgYCkfOI9/jD1IJLCC5WK+XgqCYdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKaGKDp+MaPoL+2ntBgRabRqaYRMB8GA1UdIwQY
MBaAFAPYAkGISRoxnFJ2ch+UDvrn/CGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODct
N2JiYWM4Y2MyNzgzLzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODctN2JiYWM4Y2MyNzgz
LzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9QBejvV
EWFTEseoBUm0AmkaPdBLj9xfpEBvIy3goPdlnEAFVHO/2uZ844gboe6b36ySOpbs
qajARy51EwoEf5Xr00ncg1p0reKgRe7dbAbAXyIhekSyanHmuk6fRp1nLu5wA2Og
WMZTGDV5iseL9HjLpL4Ex7Y3ZC52umYnwxsJ2JP0lX0+THa5pXu/XWU+TnAzWGXx
c2Sfw/3LSobWAo9WKrA9S9dbXFd9Cycz09HL3JCWPV16ru8q/An4nxlAFIXFf5jx
1KFY5PGiVnfZzLP5WMRb7glseZq5nO8+GkJaQg8IlFcdgL/iZnOf80ehJghnAThQ
2bUWb+C+64XYcA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:50:26 2026 by rpki-client