Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
File: A9G3rsab2CgwAtuxX1KCylj7OEo.mft (raw, json)
Hash identifier: JCjZWMeNsqx0UPxbPj7xaUZ+2ndh+ocDeVdkfAIAe2s=
Subject key identifier: 5C:DC:78:F2:AC:EF:35:4C:74:3F:C9:D9:80:BD:DC:8D:DF:26:27:EC
Authority key identifier: 03:D1:B7:AE:C6:9B:D8:28:30:02:DB:B1:5F:52:82:CA:58:FB:38:4A
Certificate issuer: /CN=03d1b7aec69bd8283002dbb15f5282ca58fb384a
Certificate serial: 01A0E1747A06B958258D15522DFC61273067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:01:41 +0000
Manifest this update: Sun 27 Sep 2026 06:01:41 +0000
Manifest next update: Mon 28 Sep 2026 06:01:41 +0000
Files and hashes: 1: A9G3rsab2CgwAtuxX1KCylj7OEo.crl (hash: 1ILNrQN86bmiBDgxxPhUi+6vNYCoLze8MgqrOSrsnNk=)
2: bHi-VQFa9MvXId7sxoFZ8aj0JuQ.roa (hash: 4pgz3zfm1oyZFOz2biai8bwyEIr9GkWt9/WXYL3YjBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:7a:06:b9:58:25:8d:15:52:2d:fc:61:27:30:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d1b7aec69bd8283002dbb15f5282ca58fb384a
Validity
Not Before: Sep 27 06:01:41 2026 GMT
Not After : Sep 28 06:01:41 2026 GMT
Subject: CN=5cdc78f2acef354c743fc9d980bddc8ddf2627ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c6:8d:3f:c5:e3:26:9b:78:3f:41:51:6c:09:
a6:7f:f5:f2:de:57:d4:e3:de:8d:cd:fc:5c:09:01:
a3:0f:68:11:7b:c1:d2:61:90:fc:f0:5e:67:9a:2f:
19:fd:88:52:50:b4:d8:29:60:cb:c0:3a:19:d9:a7:
ec:d3:cf:49:30:0a:e6:45:6a:45:a2:2e:2a:42:cc:
e0:6e:01:b1:e2:70:dd:79:dd:46:8d:87:81:d3:01:
1c:1a:ca:5e:59:33:a1:09:73:eb:56:5d:66:85:61:
ac:17:95:06:c1:62:0b:b8:d4:a8:34:a3:9e:70:aa:
f2:b9:b6:99:25:5f:fa:20:10:eb:80:3b:49:f4:88:
30:02:03:19:c8:a9:38:7d:49:6c:03:d0:4e:12:72:
06:17:ce:45:e7:8f:e1:ee:98:54:47:46:62:8d:2a:
c7:21:ed:4e:00:10:ed:29:72:98:cb:1c:e5:7a:6f:
28:12:e1:b5:4f:ea:f1:a9:0c:08:d2:bf:c6:70:8d:
b4:3f:09:15:f8:55:d1:36:5e:68:f6:c7:2a:2e:ec:
91:8f:44:cb:aa:92:7d:35:9a:33:58:0b:94:6d:69:
06:ee:5e:e0:bf:ea:9f:2b:99:ec:e4:af:78:44:6b:
21:29:1e:b9:f6:0b:75:50:10:24:75:61:68:4d:4a:
0e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DC:78:F2:AC:EF:35:4C:74:3F:C9:D9:80:BD:DC:8D:DF:26:27:EC
X509v3 Authority Key Identifier:
keyid:03:D1:B7:AE:C6:9B:D8:28:30:02:DB:B1:5F:52:82:CA:58:FB:38:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9G3rsab2CgwAtuxX1KCylj7OEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/A9G3rsab2CgwAtuxX1KCylj7OEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:22:77:ad:cd:32:7f:31:1f:ea:ad:01:e6:5b:09:f3:c9:7e:
e0:7e:b8:b6:ae:ff:82:9a:8b:c4:a1:37:d3:f6:25:8e:a9:11:
05:3f:61:af:85:95:4e:8e:97:c3:3b:6e:b0:16:03:d7:e7:69:
79:9a:34:21:ea:a0:58:61:30:60:b1:7d:b3:f8:d9:b7:79:37:
cb:6a:f7:64:9c:21:1b:10:61:6a:6e:50:f2:ed:83:01:f1:aa:
19:df:04:01:e9:b8:7c:c3:3e:6f:02:ee:af:7b:b8:94:c4:25:
b0:4b:71:99:42:fa:f0:ce:62:93:0b:12:bd:a8:bb:57:cd:d6:
d8:68:26:b6:47:7b:24:e5:f3:c5:fb:0c:80:ef:24:c2:f4:26:
ea:c4:5b:3a:58:b5:60:6a:1a:b7:bb:4c:d7:77:e7:73:b5:11:
34:67:95:42:9f:7a:81:0f:80:f6:2c:b4:e8:a0:9a:06:ab:5d:
44:5d:b2:73:f8:d0:e4:a6:3a:5d:6c:74:1b:a3:5b:84:4c:13:
5b:22:05:5e:c8:6d:51:04:69:83:ab:3c:b3:1e:bb:aa:9b:c8:
e6:a6:80:f2:76:12:30:2e:d5:d2:9e:d7:6c:ac:20:28:46:75:
37:e0:12:f3:f7:82:73:0b:1d:6b:ea:be:01:c3:85:99:eb:42:
f7:fa:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:42:56 2026 by rpki-client