Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json)
Hash identifier: 8vSZA9Ar1HXz8278e8AqUvogRBVF71w0Tbsa34IUVDM=
Subject key identifier: 41:94:B3:C8:C3:D7:D1:53:E0:6E:95:3B:B5:AF:B3:18:7A:0A:54:61
Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Certificate serial: 019CAAC64F1A518FD5AEA3A49E111CA8A1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
Manifest number: 097C
Signing time: Sun 01 Mar 2026 19:00:48 +0000
Manifest this update: Sun 01 Mar 2026 19:00:48 +0000
Manifest next update: Mon 02 Mar 2026 19:00:48 +0000
Files and hashes: 1: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: pC9k0rHAVTVQSj9UN1Xzo1xbVt/LtCJQl5LkvBuXyKM=)
2: d5uZsHk5psUBNIiK0yURePVkIj4.roa (hash: s7XGbhnDoYFsLMagak/nA9yObweAfTDGqMpZ2d7pox0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4f:1a:51:8f:d5:ae:a3:a4:9e:11:1c:a8:a1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Validity
Not Before: Mar 1 19:00:48 2026 GMT
Not After : Mar 2 19:00:48 2026 GMT
Subject: CN=4194b3c8c3d7d153e06e953bb5afb3187a0a5461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:35:70:9b:89:7a:34:b6:c8:9a:8e:50:55:
b7:6b:ef:b1:e7:a8:91:b0:8e:95:97:63:24:7e:86:
0a:11:7c:0c:ea:da:53:d0:be:b4:cf:a9:12:29:2b:
1b:39:57:54:c4:ae:b4:80:bb:b1:fd:ed:82:26:61:
89:c0:f9:09:32:cc:b9:cc:19:dd:30:ca:d3:8d:ee:
c2:e2:70:d2:1c:c3:68:24:0e:03:24:eb:76:8f:4c:
b9:92:c4:48:ad:0f:a7:ce:75:f7:bc:5a:6e:ed:69:
75:90:b9:8d:2b:7f:9a:8d:c3:86:64:e7:33:96:65:
cc:ad:6d:e8:05:ad:fd:bb:67:e4:fc:30:a0:6e:4d:
2a:a4:d1:99:9c:c2:f0:a9:86:cb:6e:30:06:d9:a1:
c2:c2:2a:88:a7:df:87:91:cf:05:69:14:a4:98:d2:
93:99:c6:d9:43:f2:63:84:f3:1a:d4:e3:9e:11:53:
97:80:88:f9:98:6c:09:44:f5:07:41:d4:40:1f:75:
e9:63:7f:ec:38:e0:ef:ff:d6:75:85:0f:d4:ac:91:
90:5e:0a:1e:f3:90:d4:da:88:ac:74:45:00:90:bc:
f2:d0:7a:f4:6b:6b:61:03:5c:4c:78:6f:13:58:de:
c5:aa:e6:5d:93:5d:80:54:fb:91:05:29:f2:a3:6c:
d9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:94:B3:C8:C3:D7:D1:53:E0:6E:95:3B:B5:AF:B3:18:7A:0A:54:61
X509v3 Authority Key Identifier:
keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3c:4f:bb:e4:7c:c4:cd:a4:fb:91:aa:0f:2c:c9:5b:31:d5:
e2:3d:8a:7e:85:28:16:8c:17:60:57:9c:d1:d6:91:e6:73:9a:
2c:b6:61:de:62:19:49:bc:fb:e6:25:41:ab:49:f3:01:eb:5e:
53:a3:a3:27:89:3e:5f:27:5e:a8:84:4e:ae:23:49:f8:aa:a8:
89:41:fe:37:74:cd:09:41:c3:c3:f1:e3:37:9f:23:a1:fa:f6:
44:ef:7e:71:57:f6:20:ed:26:93:08:a8:cf:1c:63:2b:9a:83:
36:39:af:97:d0:45:3d:2e:69:05:0c:e8:9d:45:42:19:6f:0b:
eb:2d:11:63:ae:d5:c9:8e:56:c9:6a:e5:f2:c2:00:94:3e:d4:
cd:0f:8a:ea:c7:04:42:83:74:5e:a0:6c:c0:7f:a8:51:58:01:
14:4f:4c:37:bf:62:f5:ad:71:93:b3:9c:53:58:04:1c:64:d8:
be:f1:82:46:be:7e:fe:1e:f4:ba:3c:e7:da:83:26:db:88:94:
71:dc:99:36:1c:d0:fd:8f:65:b1:c9:21:7b:7c:7c:fd:90:46:
9b:a6:07:cf:b0:39:ff:63:31:2a:6c:9e:eb:83:1c:5e:38:fe:
b9:61:1f:5a:c4:10:2d:75:ac:a1:ef:9a:84:ee:df:38:62:db:
07:30:c0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:45 2026 by rpki-client