Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: PHZ0NHlaLh5fhQImzQ5ChTIrLgdRLrekDqayd9pI8eA=
Subject key identifier: 83:07:35:F5:EF:84:C1:08:6B:0F:64:CA:75:5E:01:48:6F:2A:21:08
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 019E1D59AD4FBBBD2195D50FBA86E52B7568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 0D1C
Signing time: Tue 12 May 2026 18:01:16 +0000
Manifest this update: Tue 12 May 2026 18:01:16 +0000
Manifest next update: Wed 13 May 2026 18:01:16 +0000
Files and hashes: 1: 1-SeUDqI8Ro4aGCyTtd-jgFozlto.roa (hash: 8a5+u2VImSUXdz/RNQV3GzWRx7Dr6+wCatlfsz939ds=)
2: 11o2iLgDPCuePLQgq2cbeg8IOSU.roa (hash: 7FivvoKuc8ZAaHXETYuK4eG8oIMl6d9f2SuMter7leo=)
3: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: D+osfFFisqC80/yRKyN4ZSIvwVb6JXSqK4NXhtXXKeM=)
4: apdlR9yvflDTKKIXJ67fjl8xDOo.roa (hash: bK32lK6qoaOVabJNvvUP8TTPkjqexdWgmiaw7lt28kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:ad:4f:bb:bd:21:95:d5:0f:ba:86:e5:2b:75:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: May 12 18:01:16 2026 GMT
Not After : May 13 18:01:16 2026 GMT
Subject: CN=830735f5ef84c1086b0f64ca755e01486f2a2108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:ff:b9:37:9d:fd:3f:3d:31:e9:35:b3:15:
7e:99:39:c0:f9:c8:8c:67:38:71:b8:68:c2:16:9c:
a9:5d:4e:30:af:67:cc:92:42:0b:e7:95:92:89:ab:
92:e9:8e:16:b0:92:f0:5e:41:a3:65:fd:01:60:6d:
ba:27:4d:85:bc:60:ff:22:f8:2e:8c:ee:2f:81:56:
b2:c7:da:78:4c:be:2b:f4:27:4b:f1:30:f8:72:ac:
92:d1:aa:4c:d4:ff:3a:e9:3e:7b:08:d8:61:b5:09:
7d:0c:b2:30:cb:41:09:36:4e:cd:a0:5a:c1:20:14:
06:c0:e1:05:5e:b3:d3:fe:d9:09:7a:08:0a:bb:3b:
aa:55:84:64:f7:c5:c0:0a:6a:78:0c:bc:b0:aa:fd:
16:bf:71:6b:2c:fe:d9:bc:7b:da:2a:79:a1:f2:5a:
24:a8:6f:89:80:45:5f:21:0d:66:db:ca:55:8a:12:
33:bf:6e:87:81:9f:6f:b7:ad:5d:05:3f:a8:9a:94:
0c:3e:d1:a8:e6:de:53:87:09:53:ad:8f:5e:c6:d7:
70:dd:62:d2:e9:2d:ee:b6:c4:91:94:29:27:a4:8b:
85:f4:4b:01:a1:9a:46:ab:fc:ea:3d:5b:55:48:4e:
89:77:15:e1:3c:c1:a8:c6:15:b9:73:18:d0:29:3b:
2d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:07:35:F5:EF:84:C1:08:6B:0F:64:CA:75:5E:01:48:6F:2A:21:08
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:2a:7a:2a:a9:4c:e4:43:8c:25:69:b8:12:7b:29:b4:d2:58:
24:f7:a0:67:55:86:1e:6d:4f:21:21:eb:93:16:b5:ba:c8:06:
f3:e4:ec:79:72:e0:64:f8:a9:78:b5:cf:8b:a8:15:e4:5c:1b:
eb:06:3f:47:92:de:43:51:9f:11:e3:5c:bf:c9:1e:1c:c1:86:
a7:e1:e8:3d:04:9c:db:0b:3b:3a:6d:17:78:71:58:b8:6d:44:
73:2c:45:3e:e3:6c:02:8f:7b:15:b5:22:78:14:4b:28:89:43:
f5:1a:e0:7f:45:28:0e:7b:9c:1d:aa:00:c3:c3:36:af:9f:b2:
1a:47:21:46:3d:f0:51:cf:4d:45:a5:08:19:97:23:78:80:4f:
98:17:7b:87:ad:ab:71:13:f7:67:f5:ea:ac:fe:98:bd:9d:52:
07:b2:0d:5a:9f:14:07:a7:45:9d:a7:09:5e:5e:83:99:94:1b:
f6:c8:a0:cd:f2:44:e7:49:c2:70:69:0d:9a:08:e4:02:3f:46:
7a:60:31:3d:ee:48:30:bc:b6:12:7c:ef:f4:8b:92:b7:32:4b:
91:9f:e6:87:6d:82:66:b2:a0:e8:ff:18:60:55:a6:d2:52:14:
dc:8e:5e:42:d8:2d:75:9a:2f:3e:7f:87:5d:ed:5f:ce:15:c5:
09:b2:8e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:19 2026 by rpki-client