Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
File: A9yMYjke_dTdGORoGeF3gAKpoYc.mft (raw, json)
Hash identifier: xe2QhSkXp8+I0ouhawAc7LaSBvL1vg1u/7QTKZObIVs=
Subject key identifier: 42:9B:12:F3:71:88:38:04:28:45:03:9E:01:9D:50:CE:12:A1:3B:1B
Authority key identifier: 03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
Certificate issuer: /CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Certificate serial: 019D29299BBA2B4C4861CDA82FEDB53BAEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
Manifest number: 0647
Signing time: Thu 26 Mar 2026 08:01:25 +0000
Manifest this update: Thu 26 Mar 2026 08:01:25 +0000
Manifest next update: Fri 27 Mar 2026 08:01:25 +0000
Files and hashes: 1: 1-eoC_GN2YbYe4XqCQ3dQUDWLMGU.roa (hash: CCW99WT+qJ1fktgS1Nv1Xts5RljXDXbC1tmqj4HW2vI=)
2: A9yMYjke_dTdGORoGeF3gAKpoYc.crl (hash: QSGejh4uGetT/PVfOnKeHPiXDMDtpgDwPYwZF6vbalA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:9b:ba:2b:4c:48:61:cd:a8:2f:ed:b5:3b:ae:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Validity
Not Before: Mar 26 08:01:25 2026 GMT
Not After : Mar 27 08:01:25 2026 GMT
Subject: CN=429b12f3718838042845039e019d50ce12a13b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:76:82:eb:20:34:fa:cd:fc:2d:b2:c3:33:
38:d6:79:9b:39:d3:19:11:bc:57:38:fd:0f:ea:36:
5e:17:53:cc:5c:e7:36:51:bf:70:81:3f:32:30:6e:
0f:a3:95:e6:f7:f0:e9:28:26:72:eb:a7:75:f5:dd:
37:89:d7:e9:0d:82:43:67:8d:4d:35:cd:27:7b:6e:
80:05:68:19:72:cc:88:85:3b:3d:42:2d:21:47:36:
3a:51:02:bc:25:c8:56:e9:ec:7f:22:5a:d7:f6:12:
67:9f:9f:e9:9b:b2:ed:52:47:44:15:7c:8a:e4:e2:
ff:58:b3:9e:47:40:14:6f:d8:3f:d7:16:c5:20:19:
c1:be:9b:bc:22:5d:90:dd:e0:61:d2:f5:58:ea:19:
fc:3d:0e:c0:a0:1d:b6:1f:65:af:7e:ba:c1:b0:3f:
04:53:66:fd:a9:49:dd:9f:d1:9a:d6:f6:13:89:b6:
b5:98:96:7c:b3:72:19:a9:fd:d3:0d:34:25:ce:a0:
c3:d8:97:de:df:22:fa:f8:8e:17:6c:c7:81:5b:65:
cf:ac:55:3b:ce:52:fa:48:7d:b0:17:54:0c:b6:1c:
42:9b:a6:44:52:76:7d:5d:28:96:ba:09:60:43:0d:
ef:7c:e0:71:81:be:08:63:2f:f6:7a:27:13:53:bc:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9B:12:F3:71:88:38:04:28:45:03:9E:01:9D:50:CE:12:A1:3B:1B
X509v3 Authority Key Identifier:
keyid:03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:57:23:21:0d:e8:55:23:14:e8:a4:d1:76:d0:3e:9c:3e:b9:
fa:0a:e8:bf:83:5e:07:39:f7:f2:66:9c:6b:d8:3f:0f:ab:85:
d3:28:43:ea:4a:51:62:0d:40:de:e6:10:5e:f6:45:b8:39:6e:
a3:4b:fb:cf:37:03:c8:be:36:1c:27:72:1c:10:ba:be:6f:e5:
a7:b9:ad:97:34:59:7f:4c:9c:62:47:10:c5:3d:91:4b:72:9e:
d1:47:55:ca:69:03:7c:27:a7:c0:b3:76:78:fa:71:c9:dd:15:
82:af:30:ad:7b:39:9e:1b:21:c6:18:04:3b:b6:5b:32:10:97:
d1:7b:85:03:0e:84:d9:c8:0f:82:47:c9:c4:d1:75:69:0d:5c:
f7:6d:f4:10:76:c3:39:d1:7c:f8:16:f1:48:25:0a:b7:05:59:
75:da:cc:d6:b6:f7:07:57:dc:c6:8e:51:1a:82:55:ad:99:73:
b2:93:3e:04:cc:04:e9:4d:36:7b:d7:7a:98:f6:da:e7:e5:0e:
aa:3f:73:c8:16:7a:43:bb:c6:f4:65:6e:5e:91:a9:d8:f5:d0:
20:95:d5:0f:ed:69:4c:21:20:3f:3f:99:35:45:27:26:d1:38:
69:ea:5a:45:d5:77:1b:cf:46:ba:5a:57:5b:a7:02:86:1f:6f:
17:85:40:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:02 2026 by rpki-client