Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
File: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft (raw, json)
Hash identifier: boQJpdhFy0/ERNHnS3/UYQ6t1PC9LJmJEYFxdKpb7Y8=
Subject key identifier: D7:16:B4:4C:3F:71:03:FF:B8:58:0C:78:1E:3A:C7:F3:85:A6:C0:70
Authority key identifier: A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
Certificate issuer: /CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Certificate serial: 2EB11E907F64C734831AA9519BC00140DD743C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
Manifest number: 021A
Signing time: Fri 25 Sep 2026 14:10:30 +0000
Manifest this update: Fri 25 Sep 2026 14:05:30 +0000
Manifest next update: Sat 26 Sep 2026 18:06:30 +0000
Files and hashes: 1: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl (hash: oWWIontWDaXLwnfU/c1kJcj595JWOrgaw5F4LMQ57XU=)
2: AS215216.asa (hash: 0S0UZXwUh8izwqjeqSWK8dmeJh+jfpdEMtPa5HnqZwE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b1:1e:90:7f:64:c7:34:83:1a:a9:51:9b:c0:01:40:dd:74:3c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Validity
Not Before: Sep 25 14:05:30 2026 GMT
Not After : Sep 26 18:06:30 2026 GMT
Subject: CN=D716B44C3F7103FFB8580C781E3AC7F385A6C070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ed:b1:c0:f3:b1:71:ea:58:86:b2:b0:68:0e:
ad:71:58:73:67:85:ed:90:bf:d7:43:29:10:c1:b8:
8d:03:11:4c:1f:24:2f:6d:88:1a:65:ea:5f:8f:10:
dc:f6:8f:4c:e2:45:6f:df:d7:3a:c6:0e:a8:9a:4e:
59:f0:47:a5:e9:6b:b2:42:c2:ce:bb:7a:6e:72:64:
36:24:f7:e9:e4:f1:43:34:ff:56:47:4c:aa:e6:81:
e4:1e:22:ce:ca:91:13:d0:38:15:a0:5a:0a:dd:98:
97:b5:39:8a:ee:c1:39:0f:27:65:14:0c:d5:7a:c0:
7b:56:6c:51:0e:97:02:3c:4a:8e:00:6c:75:c0:53:
b3:26:ce:e8:8b:fd:8f:e8:3d:7d:97:8e:a0:c0:16:
d3:69:35:0d:95:0f:e3:bf:58:1a:3c:4f:e2:8b:b8:
d8:4a:77:f3:17:7f:8a:84:ae:6f:36:54:f9:a3:ec:
17:ec:90:fc:63:9f:30:a3:81:c9:2c:77:bb:ac:03:
fa:3e:b1:4f:da:7d:f1:1c:8c:28:1e:26:3a:f7:8c:
49:55:1c:3d:3e:95:da:9a:e9:43:c6:e8:9f:65:64:
fe:68:b0:a6:83:3a:28:36:4d:f1:a4:93:81:45:db:
ca:ad:aa:51:66:ad:cc:27:c6:ec:5d:79:72:1f:31:
78:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:16:B4:4C:3F:71:03:FF:B8:58:0C:78:1E:3A:C7:F3:85:A6:C0:70
X509v3 Authority Key Identifier:
keyid:A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:32:6e:c6:63:4f:d5:9b:6f:f2:70:ca:1f:ab:4f:8b:08:bb:
f3:9c:f8:85:79:70:56:aa:d4:f1:c0:a9:11:c9:60:3f:a7:f4:
5d:d2:05:1a:b8:34:28:64:9d:60:24:46:f5:87:7a:ec:e8:de:
cf:88:12:d7:e4:bc:95:6d:e1:d7:b0:ae:45:db:85:13:ab:c7:
57:e8:aa:45:97:fb:3e:9c:f6:51:fd:a8:ed:7d:08:03:16:06:
7b:cf:8d:36:85:f4:d4:7b:a4:c6:47:23:b6:d5:7b:29:4d:a5:
1c:f2:9e:77:e3:8d:61:19:06:7b:39:ad:ab:93:d5:ca:78:fc:
84:d0:56:f8:44:11:54:2e:de:a8:06:10:00:13:67:08:2c:d1:
e7:c5:8b:7c:a5:1a:36:63:b8:4c:ce:31:8c:43:0e:43:0f:af:
12:08:4f:15:ac:a3:29:cf:65:8e:bd:83:99:81:b7:9c:b8:f6:
49:b9:2e:5c:22:e0:5d:a3:76:b9:7c:1a:3d:9e:a4:90:9e:8e:
26:58:8e:a2:16:4f:ff:f4:6c:4d:b3:73:b7:5d:86:f8:18:42:
8e:8b:9b:c9:43:f8:ce:c2:79:c0:7f:03:3c:0b:f6:b7:62:4a:
e3:51:12:96:56:76:0b:9b:1f:39:91:ef:1e:c4:cf:87:37:e1:
8b:a3:3d:50
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIULrEekH9kxzSDGqlRm8ABQN10PHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTlkZDlmNmI2NTQ5MWQ5MGM0ZTE5ZTljOTYwMjUyNDY2
YzJjOWQxMjAeFw0yNjA5MjUxNDA1MzBaFw0yNjA5MjYxODA2MzBaMDMxMTAvBgNV
BAMTKEQ3MTZCNDRDM0Y3MTAzRkZCODU4MEM3ODFFM0FDN0YzODVBNkMwNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV7bHA87Fx6liGsrBoDq1xWHNn
he2Qv9dDKRDBuI0DEUwfJC9tiBpl6l+PENz2j0ziRW/f1zrGDqiaTlnwR6Xpa7JC
ws67em5yZDYk9+nk8UM0/1ZHTKrmgeQeIs7KkRPQOBWgWgrdmJe1OYruwTkPJ2UU
DNV6wHtWbFEOlwI8So4AbHXAU7MmzuiL/Y/oPX2XjqDAFtNpNQ2VD+O/WBo8T+KL
uNhKd/MXf4qErm82VPmj7BfskPxjnzCjgcksd7usA/o+sU/affEcjCgeJjr3jElV
HD0+ldqa6UPG6J9lZP5osKaDOig2TfGkk4FF28qtqlFmrcwnxuxdeXIfMXhfAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU1xa0TD9xA/+4WAx4HjrH84WmwHAwHwYDVR0j
BBgwFoAUqd2fa2VJHZDE4Z6clgJSRmwsnRIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjRkYjZlMGUtNjk2Yy00Zjg5LThkNDgtMjc0NTU5NzAw
YWY1LzEvQTlERDlGNkI2NTQ5MUQ5MEM0RTE5RTlDOTYwMjUyNDY2QzJDOUQxMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FkMmZhMlZKSFpERTRaNmNsZ0pTUm13
c25SSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yNGRiNmUwZS02
OTZjLTRmODktOGQ0OC0yNzQ1NTk3MDBhZjUvMS9BOUREOUY2QjY1NDkxRDkwQzRF
MTlFOUM5NjAyNTI0NjZDMkM5RDEyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDJuxmNP1Ztv8nDKH6tP
iwi785z4hXlwVqrU8cCpEclgP6f0XdIFGrg0KGSdYCRG9Yd67Ojez4gS1+S8lW3h
17CuRduFE6vHV+iqRZf7Ppz2Uf2o7X0IAxYGe8+NNoX01HukxkcjttV7KU2lHPKe
d+ONYRkGezmtq5PVynj8hNBW+EQRVC7eqAYQABNnCCzR58WLfKUaNmO4TM4xjEMO
Qw+vEghPFayjKc9ljr2DmYG3nLj2SbkuXCLgXaN2uXwaPZ6kkJ6OJliOohZP//Rs
TbNzt12G+BhCjoubyUP4zsJ5wH8DPAv2t2JK41ESllZ2C5sfOZHvHsTPhzfhi6M9
UA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:08:38 2026 by rpki-client