Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: m9Rvb0capvOYFwL7QLdMWm8Ld8+HHMYamsv3Y2wfhLo=
Subject key identifier: FE:1A:D9:36:6D:6F:C4:79:AC:D2:A8:B6:4D:64:3C:15:3D:A8:87:29
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 019F902322CCB699338A7B5490B8B30C8818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 0DDC
Signing time: Thu 23 Jul 2026 18:00:49 +0000
Manifest this update: Thu 23 Jul 2026 18:00:49 +0000
Manifest next update: Fri 24 Jul 2026 18:00:49 +0000
Files and hashes: 1: 1-SeUDqI8Ro4aGCyTtd-jgFozlto.roa (hash: 8a5+u2VImSUXdz/RNQV3GzWRx7Dr6+wCatlfsz939ds=)
2: 11o2iLgDPCuePLQgq2cbeg8IOSU.roa (hash: 7FivvoKuc8ZAaHXETYuK4eG8oIMl6d9f2SuMter7leo=)
3: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: sQ6ssQCWZbFif39titC5VZ4M7CnBKPwmCxvbPjwj9HU=)
4: apdlR9yvflDTKKIXJ67fjl8xDOo.roa (hash: bK32lK6qoaOVabJNvvUP8TTPkjqexdWgmiaw7lt28kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:22:cc:b6:99:33:8a:7b:54:90:b8:b3:0c:88:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Jul 23 18:00:49 2026 GMT
Not After : Jul 24 18:00:49 2026 GMT
Subject: CN=fe1ad9366d6fc479acd2a8b64d643c153da88729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ad:9f:6a:f0:54:24:99:d8:22:a8:d1:68:27:
c9:b1:e0:23:1d:ed:e0:53:45:19:1d:4d:f7:03:5b:
29:5b:b0:bb:fc:9d:d1:4e:cc:d2:1a:c3:75:b8:29:
92:5a:48:94:67:2f:99:9e:5b:06:0f:50:5c:9c:01:
bb:b7:f1:65:f7:5f:33:ca:a3:a3:a6:11:6a:3c:da:
82:5a:c8:dc:62:af:fd:fe:e6:a1:fe:c9:aa:23:a8:
8a:26:1e:15:b9:ba:44:b1:03:4c:d7:f6:79:04:58:
fa:42:25:5b:7f:2a:a1:ba:77:90:24:76:f1:32:77:
65:58:07:9d:0e:c3:4b:62:ca:d4:f2:fb:f6:88:5e:
2e:d2:77:b4:e5:f8:64:10:21:c4:8f:a9:74:54:5e:
58:b3:38:86:8a:ff:9b:79:a6:60:75:33:b7:4b:16:
bd:8e:39:6f:53:1e:d0:29:e2:8f:ad:80:b0:4d:40:
4f:fe:6a:db:40:7f:87:91:e4:e8:e6:e0:4a:6a:29:
bb:2b:c8:c9:8f:1e:2b:ed:3e:cd:b9:b6:ea:75:77:
d0:f2:63:87:b8:5b:1c:68:01:7b:f3:07:22:77:ee:
05:c4:ce:cd:f9:2e:d9:45:17:fb:70:6e:94:cd:6b:
e7:22:01:78:ed:85:98:a2:48:8d:fc:77:bb:45:a7:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1A:D9:36:6D:6F:C4:79:AC:D2:A8:B6:4D:64:3C:15:3D:A8:87:29
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:07:f7:2b:a5:28:de:bd:e1:3d:7e:a1:b6:9c:2f:53:99:93:
41:6b:a7:54:b7:6f:eb:3e:4a:77:18:d0:9d:16:71:a9:64:3f:
c9:3b:0f:26:e4:8d:6d:1d:f0:3a:0f:ce:38:3a:87:3f:ae:c5:
f9:49:39:89:d2:bd:8d:33:45:7e:b7:cf:ad:3b:fc:a6:32:f7:
99:d6:73:33:e8:62:02:b7:b2:29:5f:89:d0:35:b9:36:4a:d3:
d6:05:e1:92:12:10:45:34:e2:09:b7:e3:c2:1b:80:dd:9c:c1:
f0:1a:59:82:df:69:fa:5d:fc:50:b9:a1:67:54:cf:1c:46:f4:
6b:f8:07:05:df:a8:d7:29:bb:9b:ed:a2:6e:e1:2c:1d:2c:eb:
06:68:58:e4:67:64:a1:6e:2c:bc:07:b8:69:32:74:7a:ad:07:
3d:45:7e:25:97:78:c1:f2:05:ef:ed:df:ab:0a:b3:95:5d:ae:
74:54:23:58:d2:37:d6:7f:65:e2:43:e5:39:1c:b3:6f:72:8b:
fa:61:58:7d:30:08:ac:9f:5e:df:74:e2:31:2f:83:2f:67:84:
b5:41:5e:3a:d1:27:69:a2:30:73:ba:68:a4:59:64:e7:a5:a2:
7f:54:6f:f8:d0:48:72:a0:f8:e9:50:33:fc:a3:af:d9:1e:62:
23:97:01:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:50 2026 by rpki-client