Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: Cuz9+Ht16kpNOiChC+60b1ODHu3xwthpyvPOB92hOtI=
Subject key identifier: 9F:DB:3F:68:31:B7:6B:7F:5B:63:5D:BA:2F:42:2B:3B:79:FB:52:D1
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 019D9BBE90D52C12D5836642046CE00E72C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 1512
Signing time: Fri 17 Apr 2026 14:00:50 +0000
Manifest this update: Fri 17 Apr 2026 14:00:50 +0000
Manifest next update: Sat 18 Apr 2026 14:00:50 +0000
Files and hashes: 1: A4nevXWVLl5vdfSO_m17bHDukbA.roa (hash: QX/nCQkB1QHkZvD4R7eemwvmvQKwPODodhWHPVsSonY=)
2: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: wXTAskl5rw+Xh9YJ3DQOws27tdfgAOZq17UiYsL+vCc=)
3: Em6H44j6iihpO4fA0GysA5KFhow.roa (hash: cCDm2T/ieWvHFIMXCp6aDYjKM7+qQdF6aF/yhfZ3+5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:90:d5:2c:12:d5:83:66:42:04:6c:e0:0e:72:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Apr 17 14:00:50 2026 GMT
Not After : Apr 18 14:00:50 2026 GMT
Subject: CN=9fdb3f6831b76b7f5b635dba2f422b3b79fb52d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:35:87:f5:91:49:e0:89:14:ec:db:06:fd:
09:63:f6:9c:47:ea:9c:32:ea:8e:70:a8:64:bf:66:
6e:58:89:ee:8a:0b:18:01:be:67:6e:33:2d:6f:1a:
96:1f:21:d1:8b:46:8d:1f:84:44:8e:8b:b3:52:22:
07:e1:bb:63:96:27:31:42:9b:5e:23:78:90:58:c1:
d4:b9:1d:97:92:77:33:dd:05:7e:82:6d:26:31:20:
d4:57:78:36:d7:77:c8:f7:27:c7:69:59:b9:6f:49:
b7:f3:45:2c:39:aa:14:18:ec:a6:3d:e5:b8:f7:68:
37:c0:bb:68:e5:d5:81:7c:76:0d:53:25:0c:ac:91:
e7:06:b8:8e:f5:99:15:31:9f:97:ce:f8:fd:fc:11:
27:8d:0f:77:03:01:6f:89:28:db:0a:8b:85:15:0e:
39:6a:cd:e5:11:83:43:bf:c4:60:48:b3:40:2c:be:
43:7d:60:34:9e:64:6b:2f:c4:7e:73:0a:10:97:34:
3a:d6:2a:f8:dd:c6:f7:83:6e:86:0f:48:d7:30:78:
e0:05:48:11:f6:9a:87:12:cf:50:de:52:82:79:7e:
b0:b9:86:2c:9e:db:e7:47:bf:20:2b:6f:6d:ed:cb:
19:ed:55:b3:37:85:2c:f2:05:7c:d5:3f:81:5b:08:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DB:3F:68:31:B7:6B:7F:5B:63:5D:BA:2F:42:2B:3B:79:FB:52:D1
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:54:a4:76:7e:3c:16:8a:83:a6:a6:4e:4a:22:47:26:9d:da:
c6:97:bc:4a:30:b5:5e:ea:82:0b:4c:e8:66:a0:e7:bb:23:91:
23:bb:af:8c:9d:c0:ae:0d:5d:87:1d:01:63:96:90:0c:1f:da:
81:33:f6:bf:c7:d8:8d:75:88:fc:0f:69:5b:97:3d:2f:fd:e1:
2c:86:74:a5:9e:d9:ec:e8:62:e4:05:87:6f:77:ea:c6:4c:9b:
b0:09:c9:8d:8c:43:28:30:05:32:2e:22:6b:55:3d:2d:aa:fe:
cd:ff:86:f4:03:a8:72:f1:3f:f9:4b:6b:8c:72:b2:ea:6e:15:
5d:19:b9:d9:fa:59:d1:ac:f6:06:55:d0:69:36:12:a6:1c:77:
91:c6:80:5c:d8:38:f7:af:c7:6f:ff:ad:54:23:f2:a7:5c:47:
2a:42:22:dc:c5:49:a1:9c:b1:4c:a5:99:94:3f:ee:a9:c9:97:
16:8f:11:71:b5:53:a9:82:cd:02:93:23:c8:1f:61:6f:dc:78:
08:01:e7:20:5c:e0:e2:b3:de:bd:c4:dd:b6:14:3b:9c:2e:4e:
81:c7:34:76:50:40:17:46:6a:3f:9c:15:50:dd:f1:78:29:28:
5c:fe:98:78:9b:a0:c4:c5:a7:da:20:d8:df:a3:ac:49:46:78:
1b:12:44:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvpDVLBLVg2ZCBGzgDnLDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDgwMjQxODg0OTFhMzE5YzUyNzY3MjFmOTQwZWZhZTdm
YzIxYWYwHhcNMjYwNDE3MTQwMDUwWhcNMjYwNDE4MTQwMDUwWjAzMTEwLwYDVQQD
Eyg5ZmRiM2Y2ODMxYjc2YjdmNWI2MzVkYmEyZjQyMmIzYjc5ZmI1MmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNg1h/WRSeCJFOzbBv0JY/acR+qc
MuqOcKhkv2ZuWInuigsYAb5nbjMtbxqWHyHRi0aNH4REjouzUiIH4btjlicxQpte
I3iQWMHUuR2Xkncz3QV+gm0mMSDUV3g213fI9yfHaVm5b0m380UsOaoUGOymPeW4
92g3wLto5dWBfHYNUyUMrJHnBriO9ZkVMZ+Xzvj9/BEnjQ93AwFviSjbCouFFQ45
as3lEYNDv8RgSLNALL5DfWA0nmRrL8R+cwoQlzQ61ir43cb3g26GD0jXMHjgBUgR
9pqHEs9Q3lKCeX6wuYYsntvnR78gK29t7csZ7VWzN4Us8gV81T+BWwhP+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/bP2gxt2t/W2Ndui9CKzt5+1LRMB8GA1UdIwQY
MBaAFAPYAkGISRoxnFJ2ch+UDvrn/CGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODct
N2JiYWM4Y2MyNzgzLzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODctN2JiYWM4Y2MyNzgz
LzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilSkdn48
FoqDpqZOSiJHJp3axpe8SjC1XuqCC0zoZqDnuyORI7uvjJ3Arg1dhx0BY5aQDB/a
gTP2v8fYjXWI/A9pW5c9L/3hLIZ0pZ7Z7Ohi5AWHb3fqxkybsAnJjYxDKDAFMi4i
a1U9Lar+zf+G9AOocvE/+UtrjHKy6m4VXRm52fpZ0az2BlXQaTYSphx3kcaAXNg4
96/Hb/+tVCPyp1xHKkIi3MVJoZyxTKWZlD/uqcmXFo8RcbVTqYLNApMjyB9hb9x4
CAHnIFzg4rPevcTdthQ7nC5Ogcc0dlBAF0ZqP5wVUN3xeCkoXP6YeJugxMWn2iDY
36OsSUZ4GxJEhg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:24:18 2026 by rpki-client