Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json)
Hash identifier: 769XP5f63td0+nhrAZNarWuLvXRpSVtIAhl6QiBaS3g=
Subject key identifier: F4:CD:9E:A2:D8:97:9D:AA:05:ED:3F:D2:1D:3C:51:46:82:A8:2F:E9
Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Certificate serial: 019DA3E6FDCEACDD4BADBAAD05E2039E3267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
Manifest number: 09FD
Signing time: Sun 19 Apr 2026 04:01:57 +0000
Manifest this update: Sun 19 Apr 2026 04:01:57 +0000
Manifest next update: Mon 20 Apr 2026 04:01:57 +0000
Files and hashes: 1: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: ROrjc+OYi7a9mRmeTwanjzCqd7pt/BHyTVzgmGNHBXw=)
2: d5uZsHk5psUBNIiK0yURePVkIj4.roa (hash: s7XGbhnDoYFsLMagak/nA9yObweAfTDGqMpZ2d7pox0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:fd:ce:ac:dd:4b:ad:ba:ad:05:e2:03:9e:32:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Validity
Not Before: Apr 19 04:01:57 2026 GMT
Not After : Apr 20 04:01:57 2026 GMT
Subject: CN=f4cd9ea2d8979daa05ed3fd21d3c514682a82fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:94:b5:ba:18:5c:8e:2c:f6:ec:46:a4:b3:
ea:86:2c:7f:b1:2f:d2:75:be:3e:0e:76:9d:cc:e3:
da:8a:d8:d7:db:e5:98:19:1e:59:04:c2:8d:c6:9b:
3c:13:85:da:a3:fb:ee:7d:7e:05:22:f8:a5:7b:51:
7f:51:27:cc:8f:f4:de:b4:e4:32:b7:70:ec:eb:83:
7e:f7:d6:74:72:a4:f9:c7:08:55:2a:eb:8f:58:f0:
c8:fd:5a:ac:52:79:5b:e0:de:43:c9:21:fc:5d:b8:
d3:56:e1:e3:3c:d5:e0:fa:22:78:24:3f:5b:95:8c:
ff:17:e9:73:7b:35:e0:68:1e:15:cd:23:1d:78:d3:
43:4b:29:39:90:f7:c6:c8:bd:52:e4:b8:97:09:03:
1b:95:50:78:e9:e1:cf:7f:82:ff:c0:0e:97:2e:9d:
98:03:f2:70:72:1a:8b:30:e9:c6:35:24:30:9a:2e:
87:dc:27:05:04:84:d5:a3:98:23:65:8f:42:b0:4c:
64:11:00:cc:f3:be:8d:4b:cf:b7:a6:4e:df:bb:eb:
10:3d:80:42:82:ad:e0:b9:8c:eb:39:65:c6:af:0f:
83:36:94:c1:aa:3a:44:ce:78:1b:9a:d8:50:f0:c6:
55:d0:6e:f5:0c:e2:68:d0:cd:fb:21:ac:aa:35:3c:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CD:9E:A2:D8:97:9D:AA:05:ED:3F:D2:1D:3C:51:46:82:A8:2F:E9
X509v3 Authority Key Identifier:
keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c9:03:ee:9f:22:d0:18:81:ac:22:75:57:f4:ed:ab:4a:fa:
c1:4e:94:29:d7:d7:04:21:1a:66:a8:ef:3f:69:8a:29:ec:52:
f7:f5:96:c4:8b:e0:80:c1:33:2e:a7:13:60:87:c2:1c:fa:c7:
16:00:4a:28:ef:f6:c9:fa:ff:48:fe:eb:28:3b:e0:70:2d:7c:
92:3e:a6:c0:d8:0b:0f:94:6d:7c:c7:b9:5a:79:50:e7:08:b7:
26:8f:df:10:62:00:f2:fc:83:85:68:54:50:85:59:c3:6f:31:
19:b9:05:24:3c:2e:eb:14:b9:63:07:49:bb:61:33:09:8f:30:
e5:49:ca:54:44:46:33:22:82:f5:04:53:97:cc:cf:83:97:1c:
eb:7d:db:bf:e1:54:2c:57:29:a7:60:27:e0:03:e1:d1:14:75:
be:3c:ad:1c:12:aa:41:d3:0c:e7:34:7e:64:2e:ab:dd:6f:ad:
d0:67:ed:47:01:1e:6d:6d:9c:01:64:1c:2a:6d:02:00:5d:7a:
90:5b:5b:ae:5b:37:1f:48:98:f7:49:85:1a:c5:0d:8b:08:1b:
5d:6b:e7:0b:70:47:60:f5:7d:f4:26:4b:35:1c:a0:bc:bd:65:
f2:d8:0c:e8:17:b2:06:d4:2a:ef:7b:f7:39:f8:3f:62:ef:14:
3d:90:0c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:55:21 2026 by rpki-client