Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
File: 9uGk5drZ5MwU4BaRDsS2adXjq5w.mft (raw, json)
Hash identifier: gSG1VGZDTC6PWqU37bbabuqoQrgoGgTOws/16J+IvJ8=
Subject key identifier: C4:73:FB:53:B6:F5:C4:A0:4B:CB:CF:7B:07:38:7E:D2:43:45:65:5C
Authority key identifier: F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
Certificate issuer: /CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Certificate serial: 019D25F1BBD46DE4C49681A196EE3395AFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
Manifest number: A3
Signing time: Wed 25 Mar 2026 17:01:32 +0000
Manifest this update: Wed 25 Mar 2026 17:01:32 +0000
Manifest next update: Thu 26 Mar 2026 17:01:32 +0000
Files and hashes: 1: 9uGk5drZ5MwU4BaRDsS2adXjq5w.crl (hash: tDwGqRuYOGKytrh7s2wYdNs7OiU1kUIdrqYpWz47fZw=)
2: H_uYynhuG6l8wZqNzHCCCngrv6I.asa (hash: cNBW9xKMdJGhXlb3YQvmEsKCGDZEJR6jaSu58wTwgns=)
3: SRCK7Ufu64KsijFRcRFiAbmnlfM.roa (hash: r3tIqkepOEqyJpInWtiArXc2WfvA20Y21WU/4jD8OPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:bb:d4:6d:e4:c4:96:81:a1:96:ee:33:95:af:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Validity
Not Before: Mar 25 17:01:32 2026 GMT
Not After : Mar 26 17:01:32 2026 GMT
Subject: CN=c473fb53b6f5c4a04bcbcf7b07387ed24345655c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:05:40:c3:c8:9b:f1:0f:7f:51:76:5b:9d:
06:3f:bd:ed:10:52:f2:0f:d6:44:12:58:44:21:d4:
da:67:62:bf:8a:94:6b:b4:52:f4:d8:e9:88:35:e3:
ec:49:e8:96:cb:cd:2e:32:44:7e:de:bd:88:7a:5b:
cb:f7:23:08:86:83:a5:5c:1f:46:cc:ef:e1:4d:20:
1a:8d:75:e5:c3:ff:65:bf:51:02:c3:ae:25:4a:fb:
6f:05:fe:59:94:4e:d8:eb:d4:56:63:d9:f2:7b:44:
b3:1d:ea:91:8c:ac:0c:4b:aa:63:fd:68:d2:06:8f:
ef:9f:95:c4:8d:f4:46:62:63:e5:59:ba:8a:6a:24:
65:f8:9e:0b:b6:47:0e:c7:28:a6:4d:3c:f0:6f:71:
e8:b7:84:b4:82:40:67:e7:3f:39:21:7e:fd:19:32:
4a:cc:9f:73:44:55:43:91:39:b3:f8:3a:29:21:98:
99:b5:14:dd:82:0e:05:68:63:a6:81:99:19:00:c8:
20:2b:71:b1:75:27:98:85:d0:19:40:d5:a9:9c:61:
ba:95:74:12:f8:0c:5e:03:42:27:ad:ab:c1:57:a3:
50:b8:63:f7:8e:d0:10:bf:85:ed:50:50:97:99:3e:
d8:48:79:aa:21:91:25:38:70:ac:be:a2:c9:62:5c:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:73:FB:53:B6:F5:C4:A0:4B:CB:CF:7B:07:38:7E:D2:43:45:65:5C
X509v3 Authority Key Identifier:
keyid:F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:56:ab:bd:66:12:e3:db:a6:a3:69:56:70:c3:6c:f1:2c:30:
59:4e:09:9e:22:dd:43:f0:9b:85:36:1a:06:e1:80:8f:60:e0:
36:b8:c4:30:60:d3:c6:a2:70:0e:c4:2a:86:65:47:bc:1c:27:
fa:be:69:0b:2d:19:a2:4e:59:1e:7c:47:ae:09:1a:58:a3:c5:
0f:42:9e:e7:76:31:a2:c8:83:14:92:05:8b:d9:f8:73:6b:12:
4c:d5:49:08:fb:56:f5:69:f3:0c:c3:01:1c:92:16:be:02:0d:
9a:e0:31:f8:7d:e3:06:1b:09:c0:3b:80:ad:57:91:2f:8a:80:
d7:a0:05:dc:22:7c:5a:00:4c:b0:b8:63:bd:52:c4:4c:f1:fa:
90:47:03:5c:38:56:7d:54:c7:b3:01:6f:14:ef:f4:c3:01:b4:
93:50:4b:21:1e:70:84:80:7f:3c:b6:e2:05:cd:2f:38:a9:b8:
6c:d9:c2:04:33:61:1a:a3:22:d9:fa:66:61:11:f9:ff:4b:41:
65:73:2d:2d:58:2f:9e:e2:c5:d6:6a:ab:55:b3:2e:d1:6c:8a:
a8:86:eb:0b:a3:3a:44:5c:da:d5:91:6c:ec:ec:ab:42:b5:5c:
55:d8:ef:8e:e2:13:a7:45:3e:2a:ca:1b:e3:bf:7d:dd:0b:e4:
01:72:8e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:11 2026 by rpki-client