Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: +oCnM3c3QFV6o1Cjehwx/JQXxwOw62WPOhyQaMjtD+Q=
Subject key identifier: B0:76:96:92:AF:AF:0D:CE:05:AE:DD:D9:CA:2C:C7:67:40:F7:6C:8F
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 019CADFE5D13A1D961DA22FDC143F5449AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 1495
Signing time: Mon 02 Mar 2026 10:00:54 +0000
Manifest this update: Mon 02 Mar 2026 10:00:54 +0000
Manifest next update: Tue 03 Mar 2026 10:00:54 +0000
Files and hashes: 1: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: Lo0LEyjx9Ap+HSRDChXhJrmtf3zZJA44103RpMyaioM=)
2: Em6H44j6iihpO4fA0GysA5KFhow.roa (hash: cCDm2T/ieWvHFIMXCp6aDYjKM7+qQdF6aF/yhfZ3+5U=)
3: lKk8QfLw_XteveKoVtOlfJoNRts.roa (hash: r9aTJA8F61qWCW+VmZwLY2JSLRPBNLvOPMgRzhMeIAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:5d:13:a1:d9:61:da:22:fd:c1:43:f5:44:9a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Mar 2 10:00:54 2026 GMT
Not After : Mar 3 10:00:54 2026 GMT
Subject: CN=b0769692afaf0dce05aeddd9ca2cc76740f76c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:48:53:ff:12:11:e8:e2:7a:4f:2c:43:cb:
3c:2b:5a:bf:a8:ad:0b:3b:d6:7e:83:c5:b5:55:5f:
f2:78:37:87:c2:26:64:e2:17:9c:fa:f3:2f:38:15:
a8:75:14:3e:01:e9:17:66:21:b1:4e:5c:08:17:33:
fe:9e:de:0e:b2:ca:12:56:f0:0e:97:1b:22:98:af:
77:d6:02:cd:ab:7e:13:13:7e:df:cd:f6:04:c4:be:
8e:9c:8a:93:9b:94:ea:22:fe:cb:82:fe:d6:ed:f8:
ab:23:5e:28:2e:b6:43:2d:92:e2:97:cb:c2:f0:7a:
f1:0e:e9:c8:35:5f:03:94:89:18:70:c4:75:54:07:
9b:01:76:75:38:d2:2d:1e:22:e6:7b:f1:3b:c8:54:
a9:84:8b:0b:a1:fc:a9:4f:e4:53:82:28:a4:a3:0c:
a1:52:41:ba:70:a7:71:90:bb:c5:18:e4:33:eb:f7:
88:1a:72:4b:0c:58:dd:16:ec:bc:be:8a:13:b7:32:
a4:3c:c6:57:be:d5:94:a0:22:d4:89:c8:0b:3d:3f:
d7:1a:e2:5a:09:c3:37:63:ab:01:c3:bf:50:57:e5:
df:41:5c:6d:d5:99:7e:93:b3:a1:82:8a:1b:e2:b5:
53:f2:c4:ac:9b:a5:b1:f8:72:a9:e2:4a:7d:5f:b4:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:76:96:92:AF:AF:0D:CE:05:AE:DD:D9:CA:2C:C7:67:40:F7:6C:8F
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ad:b1:74:f9:a8:07:71:79:e8:bd:4a:3a:b4:a1:9b:55:a7:
d1:fa:5e:fa:b8:91:e0:18:27:a9:15:0f:28:73:7e:63:51:53:
55:82:bd:40:c8:17:a4:bb:da:52:90:5a:5f:6f:18:7a:50:5c:
c0:71:57:af:41:e8:39:76:1f:95:a0:56:71:eb:6d:fb:35:3d:
ae:f5:d8:16:5f:47:62:2c:3b:4d:0e:e0:3e:03:03:4f:68:8f:
ee:3f:e9:a8:0a:55:85:39:95:91:eb:98:69:0e:19:3d:e6:31:
3c:9f:09:ca:49:7f:62:cf:fc:8b:e5:bf:3f:c4:5d:16:f8:41:
a2:58:b3:06:ee:77:85:59:16:20:34:98:7a:51:8d:6b:2a:b6:
c7:fc:36:87:88:20:31:5b:4e:70:b4:ca:fd:64:23:88:33:5e:
17:60:27:e4:a8:82:21:bf:24:ed:b4:ef:18:3c:91:7e:f0:5c:
1d:a1:4c:93:87:e1:10:44:bb:83:2f:f7:58:1e:a6:7a:ff:0f:
0c:c3:1d:64:ab:db:90:d9:ce:75:6c:e3:63:23:b3:b2:8c:0b:
d9:8e:ca:ff:2f:b5:2f:e6:ef:a5:93:e1:5c:68:1b:90:3d:5f:
14:a3:04:9c:2e:25:89:16:33:92:94:4e:a8:32:e3:a3:be:2d:
07:5c:d8:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/l0Todlh2iL9wUP1RJrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDgwMjQxODg0OTFhMzE5YzUyNzY3MjFmOTQwZWZhZTdm
YzIxYWYwHhcNMjYwMzAyMTAwMDU0WhcNMjYwMzAzMTAwMDU0WjAzMTEwLwYDVQQD
EyhiMDc2OTY5MmFmYWYwZGNlMDVhZWRkZDljYTJjYzc2NzQwZjc2YzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZJIU/8SEejiek8sQ8s8K1q/qK0L
O9Z+g8W1VV/yeDeHwiZk4hec+vMvOBWodRQ+AekXZiGxTlwIFzP+nt4OssoSVvAO
lxsimK931gLNq34TE37fzfYExL6OnIqTm5TqIv7Lgv7W7firI14oLrZDLZLil8vC
8HrxDunINV8DlIkYcMR1VAebAXZ1ONItHiLme/E7yFSphIsLofypT+RTgiikowyh
UkG6cKdxkLvFGOQz6/eIGnJLDFjdFuy8vooTtzKkPMZXvtWUoCLUicgLPT/XGuJa
CcM3Y6sBw79QV+XfQVxt1Zl+k7Ohgoob4rVT8sSsm6Wx+HKp4kp9X7SfiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLB2lpKvrw3OBa7d2cosx2dA92yPMB8GA1UdIwQY
MBaAFAPYAkGISRoxnFJ2ch+UDvrn/CGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODct
N2JiYWM4Y2MyNzgzLzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODctN2JiYWM4Y2MyNzgz
LzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsa2xdPmo
B3F56L1KOrShm1Wn0fpe+riR4BgnqRUPKHN+Y1FTVYK9QMgXpLvaUpBaX28YelBc
wHFXr0HoOXYflaBWcett+zU9rvXYFl9HYiw7TQ7gPgMDT2iP7j/pqApVhTmVkeuY
aQ4ZPeYxPJ8Jykl/Ys/8i+W/P8RdFvhBolizBu53hVkWIDSYelGNayq2x/w2h4gg
MVtOcLTK/WQjiDNeF2An5KiCIb8k7bTvGDyRfvBcHaFMk4fhEES7gy/3WB6mev8P
DMMdZKvbkNnOdWzjYyOzsowL2Y7K/y+1L+bvpZPhXGgbkD1fFKMEnC4liRYzkpRO
qDLjo74tB1zY3A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:08 2026 by rpki-client