Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: NsY76eP+xSBWpEnHa+9IVJ1zbEqLB5dUydtKO+610Pw=
Subject key identifier: D5:59:35:A2:D9:08:69:B9:FA:50:C3:6C:92:31:E0:BE:80:4D:B3:25
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 019E20FFD7F1BB4A1C651DC231DBA5E5AD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 1557
Signing time: Wed 13 May 2026 11:01:38 +0000
Manifest this update: Wed 13 May 2026 11:01:38 +0000
Manifest next update: Thu 14 May 2026 11:01:38 +0000
Files and hashes: 1: A4nevXWVLl5vdfSO_m17bHDukbA.roa (hash: QX/nCQkB1QHkZvD4R7eemwvmvQKwPODodhWHPVsSonY=)
2: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: 1+GvpmK0aJmhZC+syZMsUJauT/cUfOX3Y2H3xG3oJ/Y=)
3: Em6H44j6iihpO4fA0GysA5KFhow.roa (hash: cCDm2T/ieWvHFIMXCp6aDYjKM7+qQdF6aF/yhfZ3+5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:d7:f1:bb:4a:1c:65:1d:c2:31:db:a5:e5:ad:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: May 13 11:01:38 2026 GMT
Not After : May 14 11:01:38 2026 GMT
Subject: CN=d55935a2d90869b9fa50c36c9231e0be804db325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:67:7a:c6:36:05:9f:63:0e:2c:f8:88:a7:
d6:83:90:c8:56:6c:1b:3e:c5:31:94:a0:45:26:7c:
da:9a:a8:7f:c1:3e:95:46:62:31:3e:a5:15:4e:43:
60:08:68:fd:b2:36:dd:18:7a:f6:e3:61:ed:74:34:
3e:8a:c3:ee:d7:f5:56:ff:9b:e1:2c:3b:e4:1b:c6:
b8:02:15:99:43:1e:97:3d:85:c1:61:41:7a:ea:be:
03:37:80:7e:15:f8:c6:1f:72:e2:39:a3:ac:2f:15:
0a:94:dc:6f:5d:fc:44:5c:b8:5a:bc:21:62:90:5b:
14:7c:09:23:01:3b:87:03:71:a2:71:9b:39:5c:ee:
cf:cf:9f:97:ff:e6:6f:0e:56:09:92:68:e9:e2:6e:
6e:78:bd:0f:8c:25:a2:58:52:b5:82:31:6d:39:bf:
38:62:31:40:63:75:28:98:8f:42:14:1e:f4:6f:42:
f2:24:0e:89:17:2f:e0:4b:31:ba:81:e0:b3:b9:5b:
b8:c1:8c:b0:bd:43:35:08:2c:fe:09:35:f1:af:39:
82:79:aa:96:dd:73:30:35:a5:32:71:b3:85:15:74:
d7:18:b5:60:54:af:0c:44:14:f2:e4:88:90:de:75:
9a:ea:bc:3d:43:f7:21:3d:b0:7b:44:f5:cf:ae:2a:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:59:35:A2:D9:08:69:B9:FA:50:C3:6C:92:31:E0:BE:80:4D:B3:25
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:03:e5:09:00:8b:85:e8:32:1d:0f:05:ef:fd:af:1e:33:22:
89:68:b7:96:9a:26:ab:56:9d:4e:79:89:6b:f7:e0:66:86:e9:
39:52:7d:df:3d:b1:61:60:fe:36:8c:34:61:4f:98:f1:0a:e1:
e8:87:41:09:5e:d7:17:0f:6e:a4:3e:88:74:4b:85:c9:9c:08:
46:5f:5d:12:0a:ea:b0:6c:d3:36:7b:7b:97:63:a4:50:84:20:
df:71:4c:3d:3c:31:3e:82:d6:54:56:3a:78:d2:1b:3c:ae:13:
dc:9d:98:82:b5:39:15:ad:90:40:17:ff:99:f5:a7:d1:1f:20:
1f:9e:7c:71:3f:4f:39:87:ec:3d:06:7f:e6:e8:8d:54:50:a0:
10:5e:d7:58:e7:ce:10:84:8b:31:04:11:d5:02:93:1f:c5:58:
34:88:67:1f:26:7c:99:89:2c:db:0f:75:2b:46:46:88:00:9d:
93:1f:c0:b1:1b:ab:cb:b9:a5:8b:3a:73:25:53:ad:c2:53:a7:
44:bc:bd:e1:b4:27:4b:47:6c:7b:f7:de:5b:7f:f1:4d:5b:fe:
56:46:cf:d6:87:4a:d6:30:e1:1f:f4:a3:e2:37:f2:c9:72:e8:
c3:ee:20:64:d7:45:29:b7:6d:69:1e:4c:ed:d2:cf:70:f2:e8:
6c:32:f5:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/9fxu0ocZR3CMdul5a1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDgwMjQxODg0OTFhMzE5YzUyNzY3MjFmOTQwZWZhZTdm
YzIxYWYwHhcNMjYwNTEzMTEwMTM4WhcNMjYwNTE0MTEwMTM4WjAzMTEwLwYDVQQD
EyhkNTU5MzVhMmQ5MDg2OWI5ZmE1MGMzNmM5MjMxZTBiZTgwNGRiMzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp9nesY2BZ9jDiz4iKfWg5DIVmwb
PsUxlKBFJnzamqh/wT6VRmIxPqUVTkNgCGj9sjbdGHr242HtdDQ+isPu1/VW/5vh
LDvkG8a4AhWZQx6XPYXBYUF66r4DN4B+FfjGH3LiOaOsLxUKlNxvXfxEXLhavCFi
kFsUfAkjATuHA3GicZs5XO7Pz5+X/+ZvDlYJkmjp4m5ueL0PjCWiWFK1gjFtOb84
YjFAY3UomI9CFB70b0LyJA6JFy/gSzG6geCzuVu4wYywvUM1CCz+CTXxrzmCeaqW
3XMwNaUycbOFFXTXGLVgVK8MRBTy5IiQ3nWa6rw9Q/chPbB7RPXPriqCIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVZNaLZCGm5+lDDbJIx4L6ATbMlMB8GA1UdIwQY
MBaAFAPYAkGISRoxnFJ2ch+UDvrn/CGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODct
N2JiYWM4Y2MyNzgzLzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODctN2JiYWM4Y2MyNzgz
LzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAPlCQCL
hegyHQ8F7/2vHjMiiWi3lpomq1adTnmJa/fgZobpOVJ93z2xYWD+Now0YU+Y8Qrh
6IdBCV7XFw9upD6IdEuFyZwIRl9dEgrqsGzTNnt7l2OkUIQg33FMPTwxPoLWVFY6
eNIbPK4T3J2YgrU5Fa2QQBf/mfWn0R8gH558cT9POYfsPQZ/5uiNVFCgEF7XWOfO
EISLMQQR1QKTH8VYNIhnHyZ8mYks2w91K0ZGiACdkx/AsRury7mlizpzJVOtwlOn
RLy94bQnS0dse/feW3/xTVv+VkbP1odK1jDhH/Sj4jfyyXLow+4gZNdFKbdtaR5M
7dLPcPLobDL17g==
-----END CERTIFICATE-----
Generated at Wed May 13 13:21:15 2026 by rpki-client