Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
File: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft (raw, json)
Hash identifier: XCll67ohVmb9S/0Svql3t/EkKFyjdiODN018PSvRdXg=
Subject key identifier: C4:27:C8:40:12:3E:2E:38:3D:C6:8F:7C:F8:9A:7A:64:ED:FB:85:45
Authority key identifier: A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
Certificate issuer: /CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Certificate serial: 602529958C1544568B932FB4B8E5B0C5FB811A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
Manifest number: 0218
Signing time: Thu 24 Sep 2026 01:55:30 +0000
Manifest this update: Thu 24 Sep 2026 01:50:30 +0000
Manifest next update: Fri 25 Sep 2026 04:31:30 +0000
Files and hashes: 1: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl (hash: 5vw8BHsrMBbd5ALRWRjQc9KRy7E1gr3F6zpzUuJ31JI=)
2: AS215216.asa (hash: 0S0UZXwUh8izwqjeqSWK8dmeJh+jfpdEMtPa5HnqZwE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:25:29:95:8c:15:44:56:8b:93:2f:b4:b8:e5:b0:c5:fb:81:1a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Validity
Not Before: Sep 24 01:50:30 2026 GMT
Not After : Sep 25 04:31:30 2026 GMT
Subject: CN=C427C840123E2E383DC68F7CF89A7A64EDFB8545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:6f:64:1e:15:6f:fe:6c:73:82:9a:0d:e7:
bb:9a:22:60:44:f9:f0:b1:da:ed:49:5f:4a:0b:53:
86:5e:4d:fb:e3:d3:df:98:a7:54:5d:9c:ce:0c:78:
32:d1:ee:3f:77:31:5c:39:a8:84:3e:af:ad:32:c2:
ed:d2:64:4e:17:d6:8e:62:f8:b6:b4:72:b0:fe:fa:
d6:62:ec:1b:b9:9d:32:a1:a1:eb:d3:35:92:ad:a0:
a3:5e:0f:b7:51:de:99:84:e9:ca:54:fd:ec:ae:2c:
4f:af:df:85:f1:ff:c6:52:52:ae:fd:8c:73:0b:30:
ca:ea:7a:71:30:b8:56:e9:46:f8:ad:32:91:d3:b4:
16:ed:a3:0a:39:b2:01:3f:ca:99:b2:19:55:7a:ce:
9d:61:c5:96:89:44:ce:4b:73:87:0c:50:22:62:82:
72:e6:53:cf:ed:54:66:c8:fa:a7:c6:53:49:41:92:
cb:e7:25:34:5b:a8:11:cb:76:bd:b4:28:a4:01:9e:
d3:7e:f6:c4:4b:db:8e:42:5b:29:bf:9e:0c:4f:39:
6a:23:b7:55:3e:1b:2a:bc:fc:3e:50:bf:39:e7:6a:
b8:88:56:f8:83:c6:fe:d5:30:24:6d:a8:f7:b0:91:
29:cf:5a:d2:25:93:c4:95:d3:1e:6f:ea:09:c1:6b:
31:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:27:C8:40:12:3E:2E:38:3D:C6:8F:7C:F8:9A:7A:64:ED:FB:85:45
X509v3 Authority Key Identifier:
keyid:A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c6:48:c9:ce:6a:2f:0b:17:36:e7:b6:a0:90:2e:50:28:f0:
ee:47:b6:f9:e5:2b:a4:33:94:cc:b7:d1:8c:0f:53:ca:8b:38:
60:ff:8b:2a:d8:b1:3f:53:51:b8:8a:03:5c:31:53:01:1a:78:
e7:be:37:2b:9a:46:6c:c5:ca:e9:00:43:c8:f4:8d:77:2a:d7:
77:bf:47:fb:ef:c6:1f:f9:5e:18:f6:78:df:b1:86:1f:9c:61:
67:91:60:79:22:62:77:6c:10:30:26:a2:58:ee:d7:13:35:7c:
ae:df:91:97:73:20:d3:9c:6a:da:8e:d3:95:4f:3b:4d:7a:fd:
2f:f6:d4:2b:48:fd:4f:67:3c:8e:82:06:97:3e:6f:41:25:f5:
a9:c4:87:7a:82:33:37:5a:5c:1b:13:57:b6:5f:d3:06:f4:02:
c4:06:84:e0:64:4d:ca:dd:f5:3e:79:6e:cb:9c:23:08:d6:fd:
2e:7a:43:53:0c:5b:e5:fa:78:97:ff:04:45:49:b4:8c:f3:cc:
db:db:a6:a9:1d:2a:5c:7f:47:c7:88:25:ec:01:a9:d8:01:db:
bf:6f:39:ce:a2:9e:d5:ba:75:94:10:84:63:92:71:dd:1b:58:
81:15:51:4f:2d:b7:23:fb:08:f8:05:27:4a:9b:1e:b8:a4:09:
c6:f7:fc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:59:08 2026 by rpki-client