Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
File: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft (raw, json)
Hash identifier: C0Yosr0Wne3TDuGaA0ghN1OzlU0oPyzYBqEgkB8Rk4Y=
Subject key identifier: 3F:1D:E4:36:21:62:FA:3D:F6:AA:8E:48:98:87:6A:C0:2D:AE:12:5B
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial: 01A0DACD3D155E0DA2630DB22B01C0C985C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
Manifest number: 1A75
Signing time: Fri 25 Sep 2026 23:01:18 +0000
Manifest this update: Fri 25 Sep 2026 23:01:18 +0000
Manifest next update: Sat 26 Sep 2026 23:01:18 +0000
Files and hashes: 1: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl (hash: D9gNwXYIo56fdlAozKC2fU25AE/tnlqRsRfBRgDRpFs=)
2: LxJaOC-2KIpwwVVZABAlIWlsIp0.roa (hash: 7ma0hwDbVZMGk4nMz3JXDWUYVRt/2Dj4M9Onwnqp5u4=)
3: pCX_Df1xcNspUxHlFIrg2C-Qt_g.roa (hash: kTCwSVUPhhizrIBbzo+G2rorHsKLRW35XnzDp2Z2CKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:3d:15:5e:0d:a2:63:0d:b2:2b:01:c0:c9:85:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Validity
Not Before: Sep 25 23:01:18 2026 GMT
Not After : Sep 26 23:01:18 2026 GMT
Subject: CN=3f1de4362162fa3df6aa8e4898876ac02dae125b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:31:d3:b1:5a:9e:c1:3a:eb:e8:e4:8d:b0:
ae:cc:c2:cd:ba:19:d0:0d:60:9a:6e:9e:e2:ca:79:
17:29:ff:9b:62:8a:21:00:ea:5d:4f:a9:88:dd:d2:
05:6f:44:ed:11:3d:ac:84:21:37:50:94:ce:fe:86:
38:b6:e0:12:f4:fc:f3:c7:05:96:6b:c8:1f:b9:20:
f5:51:c8:51:63:fc:5a:c9:3b:a6:a7:09:a0:bd:c0:
f5:2c:21:74:37:09:12:cb:11:be:50:5d:9e:fc:9f:
5c:fb:0e:88:31:92:2b:b5:b1:8c:01:f0:78:ee:ba:
b6:72:fe:af:08:3c:78:4b:36:88:c0:ba:90:f4:f0:
63:dc:6e:98:da:d8:f0:7a:62:93:03:2c:2e:b5:41:
4d:fd:63:b7:e6:a6:39:66:be:33:95:31:54:84:b9:
56:bd:cc:86:51:6d:d0:3d:9b:35:a2:b2:62:c3:80:
1d:2a:e1:7c:e1:aa:d2:93:ea:4c:66:75:89:c2:91:
44:5d:b7:5d:dd:41:8c:2e:46:e7:58:0a:f4:22:39:
79:2a:8a:3e:1c:f5:e2:b1:cb:8c:d1:e8:a6:18:e3:
97:a9:8d:56:12:b8:56:e4:cb:3a:4b:f1:db:03:9b:
64:25:8f:e0:f5:32:d1:a4:e5:0e:a9:ef:ca:b7:56:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1D:E4:36:21:62:FA:3D:F6:AA:8E:48:98:87:6A:C0:2D:AE:12:5B
X509v3 Authority Key Identifier:
keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:dc:68:d4:6e:17:7b:ac:91:ba:19:94:17:c5:2a:11:c0:5d:
81:74:10:8b:d9:70:de:9e:cc:41:8a:bd:9c:a3:5a:72:bb:66:
67:2c:00:65:77:25:e8:de:25:52:91:a2:eb:91:cf:e5:17:dd:
34:15:4b:99:f1:94:f0:33:74:c4:7c:a7:49:4d:07:75:8b:53:
c8:cf:fc:67:aa:15:b4:4c:3f:9e:93:cc:85:3a:51:1c:0d:a2:
e5:27:10:f3:d3:41:c2:e4:f9:e5:39:38:68:1e:2b:14:89:54:
43:fb:f6:65:44:44:7d:78:63:7d:fe:6c:01:dc:f0:b9:04:7a:
3c:38:84:8f:7b:99:10:c9:1c:e6:50:87:bc:58:b4:37:35:bb:
70:ed:3c:6f:54:aa:b4:5b:60:76:e3:53:40:7c:19:d7:7f:1c:
5a:60:bc:66:08:32:b0:f8:4a:36:df:11:b1:ee:8f:37:32:aa:
d9:8e:d9:9b:37:29:23:54:c9:72:d7:1b:42:44:24:c3:1c:4b:
fc:9b:3b:4a:dc:08:ca:c7:a9:0c:5f:f4:78:8d:5b:2d:a1:bc:
33:06:63:4e:d0:d6:4a:51:e5:9c:bf:06:75:c1:d9:bd:b8:34:
aa:18:9b:1d:a1:0f:e2:23:80:45:72:ca:e5:f2:47:1d:45:ac:
bc:ff:0b:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDazT0VXg2iYw2yKwHAyYXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZTUzZDE4ZjVmMjEyYWUwODAyYTE3ZWU1OTk0YzMzMzFh
NDM1MjQwHhcNMjYwOTI1MjMwMTE4WhcNMjYwOTI2MjMwMTE4WjAzMTEwLwYDVQQD
EygzZjFkZTQzNjIxNjJmYTNkZjZhYThlNDg5ODg3NmFjMDJkYWUxMjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHgx07FansE66+jkjbCuzMLNuhnQ
DWCabp7iynkXKf+bYoohAOpdT6mI3dIFb0TtET2shCE3UJTO/oY4tuAS9PzzxwWW
a8gfuSD1UchRY/xayTumpwmgvcD1LCF0NwkSyxG+UF2e/J9c+w6IMZIrtbGMAfB4
7rq2cv6vCDx4SzaIwLqQ9PBj3G6Y2tjwemKTAywutUFN/WO35qY5Zr4zlTFUhLlW
vcyGUW3QPZs1orJiw4AdKuF84arSk+pMZnWJwpFEXbdd3UGMLkbnWAr0Ijl5Koo+
HPXiscuM0eimGOOXqY1WErhW5Ms6S/HbA5tkJY/g9TLRpOUOqe/Kt1YztQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8d5DYhYvo99qqOSJiHasAtrhJbMB8GA1UdIwQY
MBaAFAPlPRj18hKuCAKhfuWZTDMxpDUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kZGQ5ZjEtMGYyZS00ZDVmLTg1N2Qt
MDJiYWI5ZjZmOTU1LzEvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kZGQ5ZjEtMGYyZS00ZDVmLTg1N2QtMDJiYWI5ZjZmOTU1
LzEvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNxo1G4X
e6yRuhmUF8UqEcBdgXQQi9lw3p7MQYq9nKNacrtmZywAZXcl6N4lUpGi65HP5Rfd
NBVLmfGU8DN0xHynSU0HdYtTyM/8Z6oVtEw/npPMhTpRHA2i5ScQ89NBwuT55Tk4
aB4rFIlUQ/v2ZUREfXhjff5sAdzwuQR6PDiEj3uZEMkc5lCHvFi0NzW7cO08b1Sq
tFtgduNTQHwZ138cWmC8ZggysPhKNt8Rse6PNzKq2Y7ZmzcpI1TJctcbQkQkwxxL
/Js7StwIysepDF/0eI1bLaG8MwZjTtDWSlHlnL8GdcHZvbg0qhibHaEP4iOARXLK
5fJHHUWsvP8L/Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:05:42 2026 by rpki-client