Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: QJJK3s6zWaeWE0J+MGhY52ZPckoGC8d8+JQf5gDP3zc=
Subject key identifier: E9:AE:07:DD:E4:93:6B:1F:64:0B:5F:A2:0F:6F:48:8E:C7:47:9F:01
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 01A11BD12DD73DA30D4C97F051805B2BDCF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 16E2
Signing time: Thu 08 Oct 2026 14:00:55 +0000
Manifest this update: Thu 08 Oct 2026 14:00:55 +0000
Manifest next update: Fri 09 Oct 2026 14:00:55 +0000
Files and hashes: 1: A4nevXWVLl5vdfSO_m17bHDukbA.roa (hash: QX/nCQkB1QHkZvD4R7eemwvmvQKwPODodhWHPVsSonY=)
2: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: 5869/JHHkGMskJ0wYFPWuoXKuHnptSf/wKdpjvvGKY8=)
3: Em6H44j6iihpO4fA0GysA5KFhow.roa (hash: cCDm2T/ieWvHFIMXCp6aDYjKM7+qQdF6aF/yhfZ3+5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:d1:2d:d7:3d:a3:0d:4c:97:f0:51:80:5b:2b:dc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Oct 8 14:00:55 2026 GMT
Not After : Oct 9 14:00:55 2026 GMT
Subject: CN=e9ae07dde4936b1f640b5fa20f6f488ec7479f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5b:19:ef:fa:73:a0:3c:80:2a:06:2f:49:12:
4a:51:02:13:23:78:6d:e6:b3:2d:bf:e9:8b:1e:c7:
38:e5:a2:c1:5c:df:ec:44:02:79:79:b0:82:a2:61:
91:a3:e4:30:38:f7:ba:d7:85:3b:c3:be:10:ae:a2:
22:ac:82:5f:72:f6:7a:9c:4b:e6:84:5a:a6:86:ef:
96:6c:70:b2:d0:af:c3:22:f2:f9:82:f1:c1:ce:fd:
33:ba:af:c3:e9:03:00:a4:43:00:21:51:27:ef:c5:
37:86:7b:a2:12:25:14:53:e0:61:e3:af:7d:5e:ff:
4a:5c:5e:b5:e9:e4:32:85:8f:15:ad:17:e5:8e:0e:
07:eb:b6:da:60:ed:c9:b5:38:40:d8:81:af:c0:3f:
79:08:d5:07:9a:e6:85:45:95:c3:2e:82:9e:db:33:
f7:c4:31:ac:01:3e:8f:cf:a4:17:4c:fd:6e:9e:5f:
e0:34:b4:cd:49:2f:00:4b:f3:e2:2f:77:82:04:15:
a4:d2:93:63:81:14:7a:ee:94:2c:20:f6:78:b7:c6:
a1:5a:8f:c5:27:17:4b:90:83:a7:7e:f2:62:9b:8f:
33:49:ef:fd:bc:90:51:c5:b7:46:cc:36:9a:01:0d:
f4:a7:fa:7c:5f:92:10:18:e6:e9:37:0f:ea:37:a6:
09:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AE:07:DD:E4:93:6B:1F:64:0B:5F:A2:0F:6F:48:8E:C7:47:9F:01
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:03:45:e8:fe:29:26:0d:e1:d0:9b:bf:c5:86:ce:88:30:0d:
0d:98:1d:c7:6f:5e:e4:15:13:2d:a8:3f:b5:2f:19:2e:f3:4f:
82:71:15:67:33:fb:16:1c:45:24:8b:63:38:f5:04:bb:53:fe:
da:e1:6c:01:f6:7e:31:f8:1e:0b:f7:bd:fa:bf:4d:74:c1:fc:
5b:6c:25:f3:a0:cb:7e:1e:30:43:77:71:52:5e:c9:03:5f:c5:
3f:97:07:ef:94:9e:f0:da:25:ca:9d:be:48:c3:c1:05:d3:bf:
37:b8:f2:e4:3c:52:97:18:75:ec:b1:33:3c:01:d3:5b:fb:fd:
24:58:e5:85:f8:58:89:de:25:8e:09:4a:b3:c9:8c:40:82:e1:
6b:49:51:22:79:fa:3e:f2:36:90:dd:2a:14:9e:6b:38:5f:2a:
46:c2:2d:6b:9e:13:ca:81:54:87:60:cb:ac:d7:1a:34:d4:7a:
53:2c:d8:0e:67:11:5b:38:cc:0a:a1:3b:41:8e:04:9d:a6:83:
2a:97:23:66:e0:f7:9b:b8:b0:db:c1:c2:1a:71:79:fc:37:3a:
3f:af:72:3e:5d:6a:31:3d:ea:55:7f:d6:cc:1d:c4:5d:30:0c:
eb:d8:15:9e:76:ff:e8:e3:12:0e:a8:ae:28:71:31:dd:c2:dd:
b0:70:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:04:52 2026 by rpki-client