Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: R9qYOlQ8KhnWHB/KPqP7ylUQhlk9rI0D5CwKYm0zzOw=
Subject key identifier: E6:0D:86:2E:85:C2:50:42:7E:56:BF:E5:61:BB:BE:EA:17:3D:F3:0D
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 019D29CDB24314F6398B3678534116C6B205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 14D7
Signing time: Thu 26 Mar 2026 11:00:39 +0000
Manifest this update: Thu 26 Mar 2026 11:00:39 +0000
Manifest next update: Fri 27 Mar 2026 11:00:39 +0000
Files and hashes: 1: A4nevXWVLl5vdfSO_m17bHDukbA.roa (hash: QX/nCQkB1QHkZvD4R7eemwvmvQKwPODodhWHPVsSonY=)
2: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: WVXKlt1HQGotDYOfJmAFw44nJR7nRZwH+Tj3mp+/0bA=)
3: Em6H44j6iihpO4fA0GysA5KFhow.roa (hash: cCDm2T/ieWvHFIMXCp6aDYjKM7+qQdF6aF/yhfZ3+5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:b2:43:14:f6:39:8b:36:78:53:41:16:c6:b2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Mar 26 11:00:39 2026 GMT
Not After : Mar 27 11:00:39 2026 GMT
Subject: CN=e60d862e85c250427e56bfe561bbbeea173df30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:93:7c:fe:02:f4:58:14:56:20:fd:0d:49:cc:
fd:1c:f6:d5:54:6a:00:4f:23:29:94:3f:40:f1:64:
2f:65:1e:ec:e0:04:b6:c4:da:43:cf:14:ca:cd:57:
f0:65:8b:fa:fe:b7:16:c8:c5:e3:a2:97:af:92:f9:
e5:9d:92:d3:31:c4:35:24:92:f3:f3:2e:df:ae:04:
bd:39:ee:c0:b2:1e:52:89:38:02:23:24:4d:5d:85:
52:37:1f:38:fe:d0:c4:68:a6:c3:bb:9f:27:ef:3f:
70:7c:08:d4:86:ea:97:04:31:83:ac:0b:76:2a:3e:
b9:6b:32:6c:dc:e6:c4:a1:8b:90:9c:1e:be:c2:06:
a9:75:2e:fc:38:a3:41:e1:88:d2:84:58:3d:3e:dc:
18:1e:d7:56:45:a2:ea:ce:0d:8d:fb:56:fe:e8:6a:
39:27:60:c8:07:b3:97:4d:60:7c:f2:00:11:53:d9:
db:92:bc:31:f6:2a:a8:15:24:51:0a:42:d2:40:13:
8f:44:e2:c4:27:71:51:3d:c6:72:c1:8c:f6:0a:99:
0b:2c:04:05:fc:8e:91:0a:ad:ad:20:75:7e:95:c3:
b7:68:50:ac:2a:6c:8f:b9:a3:06:2f:e6:3e:76:cd:
b3:09:96:b0:15:5a:4f:18:fe:76:e5:41:27:e7:e6:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0D:86:2E:85:C2:50:42:7E:56:BF:E5:61:BB:BE:EA:17:3D:F3:0D
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d8:33:5f:f5:03:08:56:04:59:4e:09:25:9b:a9:68:04:04:
ae:ef:2b:dd:59:89:d6:9e:1c:47:66:9b:09:3a:84:15:87:a9:
11:91:74:db:a5:b0:08:4d:0d:57:68:7e:fd:a0:00:87:f1:ad:
14:07:b1:50:fa:c5:df:5c:53:56:9d:f2:f6:fe:31:05:a8:5b:
d4:ad:ce:a7:f9:32:68:e1:90:4d:af:91:f2:56:67:3c:52:70:
4f:da:85:a4:59:e5:51:d3:30:60:bd:2b:12:79:c1:37:f4:09:
60:99:38:51:00:9c:58:fa:dd:7a:98:95:f4:e1:c9:6a:e0:0b:
1f:bc:3c:c2:72:59:2d:ac:92:52:8a:ee:70:6f:9b:6a:29:d8:
ae:83:da:ae:08:69:d2:38:7f:23:cb:6b:a9:aa:ed:13:7a:77:
16:e4:f7:66:76:c9:c2:eb:82:da:3c:7f:f8:34:02:5a:07:51:
22:72:e2:a5:90:a9:3b:8c:e2:d4:6e:ae:11:6f:85:17:4b:d8:
7d:12:76:69:b2:c7:9e:04:6f:56:cf:43:48:b2:7b:43:3d:cc:
ab:c8:03:20:6b:81:3d:7a:3e:a5:ca:e4:42:15:f0:ab:28:e9:
7a:93:ee:f5:03:57:d4:07:34:86:d3:1b:6e:cf:4e:a2:ae:a0:
9a:1a:4f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:25:48 2026 by rpki-client