Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
File: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft (raw, json)
Hash identifier: RGFruYS2qrGbwYDo/7/VaOrbJGlcitDTPG+z7QAsgJ8=
Subject key identifier: 14:9B:BB:1C:2E:5C:9A:AB:53:58:80:01:45:85:83:C6:C3:78:1D:56
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial: 019D269667D2A6609660E79B3E418E21423D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 20:01:24 +0000
Manifest this update: Wed 25 Mar 2026 20:01:24 +0000
Manifest next update: Thu 26 Mar 2026 20:01:24 +0000
Files and hashes: 1: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl (hash: SnyGOJimRzG6uDdijZ1kEz4vSyFiqltkaLhHLM7f6X4=)
2: LxJaOC-2KIpwwVVZABAlIWlsIp0.roa (hash: 7ma0hwDbVZMGk4nMz3JXDWUYVRt/2Dj4M9Onwnqp5u4=)
3: pCX_Df1xcNspUxHlFIrg2C-Qt_g.roa (hash: kTCwSVUPhhizrIBbzo+G2rorHsKLRW35XnzDp2Z2CKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:67:d2:a6:60:96:60:e7:9b:3e:41:8e:21:42:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Validity
Not Before: Mar 25 20:01:24 2026 GMT
Not After : Mar 26 20:01:24 2026 GMT
Subject: CN=149bbb1c2e5c9aab53588001458583c6c3781d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:76:0e:05:f0:4a:89:2f:68:ce:92:81:a4:
f7:bf:c5:18:7c:6f:de:d5:fa:f3:9a:f3:ba:dd:f3:
f9:6c:ed:71:10:93:10:02:3b:6d:7c:f4:4e:7a:cb:
2c:61:02:16:30:1a:a5:e5:b3:7c:a7:9c:96:3e:21:
34:16:d7:35:38:98:2f:e6:25:b1:cc:50:48:1e:d4:
e6:68:13:bf:f8:72:b0:9c:b3:95:c9:e1:bf:a5:f1:
96:e6:10:04:e1:fc:ae:88:2f:cf:a8:c7:78:5a:ab:
9f:0d:f6:69:be:4b:5d:97:e9:74:96:9d:4e:91:c3:
2e:da:05:0a:ae:02:6b:b2:4c:c8:4d:0a:03:cd:b2:
47:38:28:21:70:63:03:62:d3:99:5e:7d:2b:5c:10:
7e:8c:94:37:44:6e:53:66:9e:b8:70:4e:a0:f1:de:
a7:13:f4:8b:e2:02:1e:47:99:01:6a:70:e0:34:89:
ea:c8:95:ff:0a:c8:dc:8a:7f:d4:23:8b:71:ad:05:
6e:c6:a6:5f:aa:5a:41:e8:75:ab:71:b6:8c:19:a1:
5c:f5:2e:9b:fd:3b:32:54:52:e6:88:cb:0a:f6:84:
a1:0a:76:5c:89:68:26:79:6c:ea:94:14:3d:12:60:
85:3f:df:bd:56:5b:00:5b:07:f9:7e:b6:b1:0c:a0:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9B:BB:1C:2E:5C:9A:AB:53:58:80:01:45:85:83:C6:C3:78:1D:56
X509v3 Authority Key Identifier:
keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:60:81:d0:5c:92:d4:3d:52:3e:cd:04:39:bc:b0:3b:4c:eb:
be:27:a3:42:16:cb:50:e3:3c:4b:ce:cf:22:30:7a:83:4e:8f:
7a:4f:e9:f8:b8:63:74:6a:5a:1f:d3:4e:ec:20:b1:75:58:47:
2f:d3:89:70:c0:10:eb:11:f2:3c:8a:e6:0f:f4:f5:d0:88:d5:
43:d3:c1:78:67:6e:1a:2a:5b:0e:ed:85:36:a6:72:c0:e8:16:
5f:fc:03:9f:90:37:52:b0:74:a1:64:44:30:d2:49:4d:d1:a0:
bd:22:cb:39:24:2b:04:95:32:72:8c:ad:78:55:4e:2f:35:b0:
0f:5f:ba:72:d7:75:5b:03:b0:21:90:2a:87:6f:7e:7e:a2:c6:
a0:f0:23:25:b6:29:12:cc:4c:b1:93:c0:32:93:22:6d:b4:97:
26:8b:c0:ea:5a:20:04:d7:a0:d0:2e:34:8c:ac:13:cc:18:7c:
6c:e7:ff:3d:d2:b8:41:3e:51:21:e3:73:42:21:cc:71:7d:26:
02:26:89:46:08:a0:b9:05:4d:fa:32:fa:71:13:4f:d5:47:21:
89:b7:0c:52:8a:f1:fd:07:92:ee:da:38:d8:36:e0:21:1b:55:
79:bf:83:1b:d3:4b:82:72:e0:ad:cd:90:0d:46:80:09:58:1b:
e1:d7:a4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:34 2026 by rpki-client