Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier: 4H3OzmTB2lv6huq0KXpTQB3SDaD77FDMDf6t33UMyhs=
Subject key identifier: 21:D6:03:1F:66:31:DD:46:0F:46:DD:B5:D9:1A:5A:F4:8C:3D:88:C4
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial: 019E1C7DC2858488E58D7A40450D32674B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number: 05E9
Signing time: Tue 12 May 2026 14:01:04 +0000
Manifest this update: Tue 12 May 2026 14:01:04 +0000
Manifest next update: Wed 13 May 2026 14:01:04 +0000
Files and hashes: 1: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: ztmti6A9clJ8BHYVCX4GFNrkdsM3EeS70Pqt4aXcASE=)
2: R_tuRGNyH8maQImtyJX8ka61Rts.roa (hash: CI3pZc4MmuEvMGaaRVV9hzb41var6bWscwqeDxkewRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:c2:85:84:88:e5:8d:7a:40:45:0d:32:67:4b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Validity
Not Before: May 12 14:01:04 2026 GMT
Not After : May 13 14:01:04 2026 GMT
Subject: CN=21d6031f6631dd460f46ddb5d91a5af48c3d88c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:85:9c:2a:44:b5:c4:24:d2:82:23:04:03:
d5:33:b5:b0:3d:c8:d8:25:0f:60:2f:82:4d:1c:73:
24:5e:15:99:c5:72:c6:cf:3d:1d:b0:70:43:7b:cb:
7c:67:80:eb:cc:a3:cf:ea:9b:0b:d8:72:d8:a8:a2:
33:ad:3e:13:41:24:11:fd:a5:22:4c:6e:73:5c:f6:
cb:fd:ef:75:24:da:f6:8d:42:f2:74:42:e2:09:49:
16:23:a5:0f:fb:79:cd:0b:a7:90:5e:7a:63:d0:7a:
50:92:3b:b1:34:da:25:e0:63:ce:08:9c:f1:57:f3:
e5:fe:1b:2e:b5:ac:c8:27:6a:14:e1:ba:0d:c2:bc:
87:bb:e4:02:34:93:c4:30:b7:35:cc:f2:9c:4b:e1:
03:89:33:18:93:c1:b3:2e:b0:cf:cf:36:20:25:4f:
13:37:11:56:2b:81:ad:74:6d:bc:16:ba:56:4c:bd:
9b:2d:c5:20:80:bd:98:4d:81:75:bb:1d:15:eb:33:
fd:69:cf:00:31:e1:22:2b:c7:67:1f:10:a0:30:0c:
cb:fc:c3:e0:a9:0c:36:1d:4d:67:ca:46:a7:17:d9:
8c:76:45:b8:da:81:dd:ce:d4:6f:9b:0d:d0:d3:79:
21:91:bc:ce:6a:00:cf:4d:7a:30:56:43:cd:06:18:
61:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D6:03:1F:66:31:DD:46:0F:46:DD:B5:D9:1A:5A:F4:8C:3D:88:C4
X509v3 Authority Key Identifier:
keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:45:4a:c4:86:7b:90:f9:1e:ad:a5:a1:05:99:fb:4e:6b:cb:
0e:47:d4:8c:f2:ee:c7:6c:4b:a0:38:a3:2d:e5:2c:11:bf:b3:
92:94:c2:3a:6e:f9:87:34:be:2b:1d:8f:cc:1a:2b:60:bf:27:
bd:a1:d4:0b:63:fa:6d:c3:fb:ef:96:a0:cc:56:36:cd:ce:1a:
65:a6:ec:40:11:e5:37:71:46:f3:50:d7:7b:ed:de:bd:66:d4:
0f:1f:1a:94:80:bb:8a:ae:28:c4:d9:ba:89:63:1e:3d:1d:5c:
9c:94:27:1a:d4:af:12:2e:44:b3:7b:83:72:34:00:5c:8a:81:
bb:c5:b2:88:84:18:ab:73:d3:cf:e1:68:94:a9:4c:96:89:9b:
99:e0:37:a1:79:05:3b:ee:5a:58:10:6b:66:95:31:31:a3:14:
3d:4f:91:13:17:88:be:86:ff:ed:6b:da:15:c0:da:6c:55:5f:
a0:aa:91:e9:8e:24:7b:c6:7b:29:ef:2e:94:77:58:4b:5d:df:
2f:f9:15:6c:a8:36:68:70:bb:6f:b0:cb:93:5a:c9:44:1f:cb:
58:f7:33:28:79:48:45:13:85:8d:de:3e:7f:df:41:4f:7a:c7:
68:99:e7:78:8f:82:00:59:b5:0d:57:6d:1b:2b:f9:b7:a6:cf:
6f:e6:07:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:37 2026 by rpki-client