Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json)
Hash identifier: DiUnt5+TDab7dMq7N31Eufqmpur49b3ZROMtcJSQwZ8=
Subject key identifier: 39:82:FE:05:70:87:C0:C0:F1:3D:93:AD:82:3E:EE:7B:D2:A8:61:27
Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Certificate serial: 019D265EF8DB01ABBFFCB95CBEEB1C9D7451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
Manifest number: 09BC
Signing time: Wed 25 Mar 2026 19:00:51 +0000
Manifest this update: Wed 25 Mar 2026 19:00:51 +0000
Manifest next update: Thu 26 Mar 2026 19:00:51 +0000
Files and hashes: 1: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: sNbA5ACY3eZA9waP5AbIsi40egmCDKFPbMw/IvDtefc=)
2: d5uZsHk5psUBNIiK0yURePVkIj4.roa (hash: s7XGbhnDoYFsLMagak/nA9yObweAfTDGqMpZ2d7pox0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f8:db:01:ab:bf:fc:b9:5c:be:eb:1c:9d:74:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Validity
Not Before: Mar 25 19:00:51 2026 GMT
Not After : Mar 26 19:00:51 2026 GMT
Subject: CN=3982fe057087c0c0f13d93ad823eee7bd2a86127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e6:c4:f0:0e:9f:41:b4:67:78:44:86:81:9d:
97:d5:d3:bb:ad:62:75:4e:a4:6f:cb:ce:bb:85:2a:
de:f8:77:f7:fb:d7:6e:48:3f:2c:40:94:bb:55:a5:
8a:0b:b2:6e:7e:ed:23:f3:82:7b:eb:04:0d:a2:0f:
6f:84:b0:cc:d4:93:be:bc:17:f6:a0:cb:1f:2f:e4:
dd:68:1c:27:58:ec:69:9d:ec:56:82:33:dd:73:ae:
70:ba:ff:78:50:35:c8:9b:0d:bc:de:02:2d:a8:35:
f1:39:39:9c:cf:ae:54:b1:98:db:17:8f:dc:04:a4:
1b:da:1c:fc:47:49:a4:82:80:60:da:58:c9:7b:ff:
8d:cd:0d:45:8a:39:c7:f4:09:62:9a:cb:06:cb:86:
07:3a:81:53:95:9b:0d:98:99:41:df:cd:64:1c:45:
aa:71:4a:63:07:64:f3:11:58:f2:ee:1d:ee:ca:ea:
de:5d:c1:cf:d1:9d:d3:75:a5:f3:79:e0:2e:5a:b2:
1a:c5:ec:d0:b2:4d:33:e6:86:26:41:47:93:46:cf:
6c:84:ea:7e:1d:50:67:e0:06:8a:31:be:a8:b8:d5:
9e:76:ec:82:df:58:66:25:03:a3:ff:27:bc:d8:a5:
15:fc:67:0a:56:21:18:8d:2b:cc:16:b3:05:26:bf:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:82:FE:05:70:87:C0:C0:F1:3D:93:AD:82:3E:EE:7B:D2:A8:61:27
X509v3 Authority Key Identifier:
keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:44:2a:46:af:0d:d0:2d:51:a6:23:33:b4:03:ca:c6:8c:1c:
40:79:9c:9d:b8:aa:65:a4:e3:8d:02:4a:17:b7:fd:13:f9:b4:
92:a5:4a:24:91:5c:1b:18:e0:3d:fc:a8:89:8e:ba:83:a0:72:
43:14:b2:7f:b2:45:84:e1:97:86:cf:90:b0:25:b7:fd:d6:bf:
86:bf:0c:2f:ca:78:20:dc:ba:01:ce:24:84:32:b2:2c:4d:67:
21:3e:57:ac:e1:37:48:ec:da:d0:d0:3e:0b:ca:d0:d9:6e:a1:
fb:5c:0f:80:22:14:ea:03:fa:d6:19:ab:b2:34:08:55:57:9f:
7e:d0:0b:b5:3c:d4:12:e7:52:21:b7:0c:b9:99:c0:94:2a:da:
c5:7d:37:64:7b:9e:60:cc:c9:45:c1:02:ee:07:6f:21:16:d7:
31:a3:e9:1c:db:e0:22:0e:4d:c4:8c:0c:8b:e2:4e:10:8a:be:
04:30:ce:53:57:dd:37:ba:fb:0c:99:8e:b6:97:80:81:25:dc:
19:58:53:41:2e:9d:72:f0:b6:b7:8c:99:49:20:ed:86:f7:b0:
ff:75:ed:a1:cd:8f:f8:02:2d:9a:c6:99:de:87:bf:09:93:72:
56:a5:16:63:0b:d1:6c:e9:9e:37:1d:0a:0d:78:df:cf:a2:78:
80:54:d0:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXvjbAau//LlcvuscnXRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZDE5ZDY5NzAxZjEzYTU5NzdjZDIyOTZmYTg3YTI1MmZi
ZjA1ZjcwHhcNMjYwMzI1MTkwMDUxWhcNMjYwMzI2MTkwMDUxWjAzMTEwLwYDVQQD
EygzOTgyZmUwNTcwODdjMGMwZjEzZDkzYWQ4MjNlZWU3YmQyYTg2MTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkubE8A6fQbRneESGgZ2X1dO7rWJ1
TqRvy867hSre+Hf3+9duSD8sQJS7VaWKC7Jufu0j84J76wQNog9vhLDM1JO+vBf2
oMsfL+TdaBwnWOxpnexWgjPdc65wuv94UDXImw283gItqDXxOTmcz65UsZjbF4/c
BKQb2hz8R0mkgoBg2ljJe/+NzQ1FijnH9AlimssGy4YHOoFTlZsNmJlB381kHEWq
cUpjB2TzEVjy7h3uyureXcHP0Z3TdaXzeeAuWrIaxezQsk0z5oYmQUeTRs9shOp+
HVBn4AaKMb6ouNWeduyC31hmJQOj/ye82KUV/GcKViEYjSvMFrMFJr+uSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmC/gVwh8DA8T2TrYI+7nvSqGEnMB8GA1UdIwQY
MBaAFGvRnWlwHxOll3zSKW+oeiUvvwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUt
OGYwZDRlZWY2YWI1LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUtOGYwZDRlZWY2YWI1
LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUQqRq8N
0C1RpiMztAPKxowcQHmcnbiqZaTjjQJKF7f9E/m0kqVKJJFcGxjgPfyoiY66g6By
QxSyf7JFhOGXhs+QsCW3/da/hr8ML8p4INy6Ac4khDKyLE1nIT5XrOE3SOza0NA+
C8rQ2W6h+1wPgCIU6gP61hmrsjQIVVefftALtTzUEudSIbcMuZnAlCraxX03ZHue
YMzJRcEC7gdvIRbXMaPpHNvgIg5NxIwMi+JOEIq+BDDOU1fdN7r7DJmOtpeAgSXc
GVhTQS6dcvC2t4yZSSDthvew/3Xtoc2P+AItmsaZ3oe/CZNyVqUWYwvRbOmeNx0K
DXjfz6J4gFTQyQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:44:28 2026 by rpki-client