Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
File: A9G3rsab2CgwAtuxX1KCylj7OEo.mft (raw, json)
Hash identifier: Ddp5OTyfApeSsmpTUu21YaKVFhF7cV131lZfIjn3JvY=
Subject key identifier: C2:A6:AE:C1:E7:31:C5:F5:FF:25:BC:33:FA:04:99:B2:D8:7B:B0:F8
Authority key identifier: 03:D1:B7:AE:C6:9B:D8:28:30:02:DB:B1:5F:52:82:CA:58:FB:38:4A
Certificate issuer: /CN=03d1b7aec69bd8283002dbb15f5282ca58fb384a
Certificate serial: 01A0E92DC7AE1DD63D082BFC7630322EAFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 18:01:26 +0000
Manifest this update: Mon 28 Sep 2026 18:01:26 +0000
Manifest next update: Tue 29 Sep 2026 18:01:26 +0000
Files and hashes: 1: A9G3rsab2CgwAtuxX1KCylj7OEo.crl (hash: pu0CIopdCKOkQ3YxB4oZuDIG8hXYlqtYBDc4FaKPFWU=)
2: bHi-VQFa9MvXId7sxoFZ8aj0JuQ.roa (hash: 4pgz3zfm1oyZFOz2biai8bwyEIr9GkWt9/WXYL3YjBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 18:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:c7:ae:1d:d6:3d:08:2b:fc:76:30:32:2e:af:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d1b7aec69bd8283002dbb15f5282ca58fb384a
Validity
Not Before: Sep 28 18:01:26 2026 GMT
Not After : Sep 29 18:01:26 2026 GMT
Subject: CN=c2a6aec1e731c5f5ff25bc33fa0499b2d87bb0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e3:1e:fa:63:0c:f3:51:b2:2f:55:ad:af:98:
a0:3c:5d:75:4a:48:a3:f5:4b:77:af:8d:aa:e0:fb:
fb:ab:b6:2e:e1:df:21:30:f4:ca:50:fc:92:53:6a:
9e:3a:16:d4:dd:bd:b7:17:5d:d1:00:0b:67:b6:03:
f8:b1:16:15:65:8b:8b:3a:dc:46:c2:e2:bb:8f:7c:
eb:82:8c:63:af:e0:13:37:0d:7c:86:4a:6c:eb:a2:
de:04:51:00:7b:5b:c1:bf:8b:22:bf:f7:4e:8a:6a:
fc:98:23:18:0c:db:f5:fc:4d:de:55:4d:c6:d1:45:
ef:d4:47:8f:0a:64:0c:37:dc:99:67:45:fd:65:1b:
c1:6a:80:03:f5:9e:bf:98:bc:3c:c9:9c:97:6e:87:
29:bc:8f:1c:65:b7:76:51:ac:6b:55:d7:7c:87:e2:
4e:2f:ae:f6:09:e4:72:68:04:d2:c3:2c:ba:cd:c6:
0c:5e:37:9f:30:64:97:b3:ad:05:54:9d:13:68:99:
2c:1e:44:75:86:c4:5b:97:4e:0a:7a:63:d7:ce:45:
96:c8:3b:c7:a6:d5:9b:c3:9e:de:21:84:97:0c:ca:
46:67:c3:b5:82:6f:54:cb:ee:d9:2c:54:5b:aa:32:
5e:e1:de:3a:49:0e:8a:43:0d:cf:4c:5c:a9:e0:ac:
3e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A6:AE:C1:E7:31:C5:F5:FF:25:BC:33:FA:04:99:B2:D8:7B:B0:F8
X509v3 Authority Key Identifier:
keyid:03:D1:B7:AE:C6:9B:D8:28:30:02:DB:B1:5F:52:82:CA:58:FB:38:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b3:80:49:1c:35:f7:d9:09:15:00:49:84:42:a9:e7:fd:06:
1a:6d:03:f3:59:ad:60:7d:45:cc:a2:59:c5:80:6b:80:2b:7b:
0d:49:ce:7b:a6:90:10:c5:0e:6d:7c:44:84:10:f0:40:f0:2c:
d9:fa:53:fc:c3:82:d8:f9:bd:ec:ae:c8:4b:03:2f:85:fe:d4:
c2:12:97:1c:d2:84:c4:a6:60:a7:e5:b3:73:bc:a3:12:ab:d3:
d1:6d:21:e3:dd:50:90:b9:49:66:01:aa:d8:95:22:17:b7:f5:
7a:ff:62:c2:4b:a8:59:86:e6:33:a9:db:d4:dd:c6:bb:b0:1b:
9b:3f:46:ed:b9:1e:85:b3:f3:68:85:6f:e4:93:9a:09:ff:dd:
1e:1f:dc:52:eb:f6:2e:2f:57:35:8c:32:59:0b:0e:17:5f:74:
c0:c5:91:78:4c:1b:7a:07:d9:cb:52:15:55:49:38:f9:17:d8:
07:06:80:d3:6b:9c:29:3a:71:ed:45:6f:74:b0:77:d1:18:71:
f5:48:89:ad:0c:82:2a:32:ad:0e:67:a4:7d:d3:da:ef:4c:b2:
a7:0e:86:1c:b3:d2:fa:b0:12:e8:f3:f8:b5:79:b4:da:4d:43:
6d:77:51:6f:25:d4:61:90:07:24:5f:cd:6a:0f:12:7d:59:95:
8e:d5:17:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:25:05 2026 by rpki-client