Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier: fnMYw0cWCzQlObkL80ppj7lBzBvZq3AQNdB9bgWIa4o=
Subject key identifier: A5:73:D2:B1:68:6E:5E:35:30:6A:1B:6D:21:A9:12:5A:C3:04:5F:44
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial: 019D27DF8EDF72B797B1F4AFD16DA5B7F0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number: 0645
Signing time: Thu 26 Mar 2026 02:00:55 +0000
Manifest this update: Thu 26 Mar 2026 02:00:55 +0000
Manifest next update: Fri 27 Mar 2026 02:00:55 +0000
Files and hashes: 1: BbSoHPZ6_5cJFXmdCfnvim5a3TI.roa (hash: McuildlUAIggMuk9JmdtRzn1hMk29EnAK+dUtR/t2JI=)
2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: w1gsqEAZtWCYy5QrVlwrobHMLDYzu7ZUopyok3/7HIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:8e:df:72:b7:97:b1:f4:af:d1:6d:a5:b7:f0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Validity
Not Before: Mar 26 02:00:55 2026 GMT
Not After : Mar 27 02:00:55 2026 GMT
Subject: CN=a573d2b1686e5e35306a1b6d21a9125ac3045f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:00:fe:6f:3b:f9:f7:58:25:7c:0a:ba:9d:b7:
9d:8b:81:05:ca:9d:46:24:6c:19:06:ab:8d:9c:2e:
18:1e:03:91:25:2e:f0:2f:09:51:aa:9e:0a:98:58:
ae:17:96:dd:68:c7:bf:da:8e:d8:58:bc:36:a5:ce:
39:05:96:d0:66:23:92:a5:7b:16:68:06:5f:f7:23:
45:9a:4b:be:7e:ad:56:bf:85:7e:80:d1:44:5c:87:
c2:3b:da:34:b4:f9:33:55:ff:90:cf:3d:9e:6f:d7:
d1:ac:2a:18:19:49:3a:0e:98:55:de:a6:65:01:ab:
5a:7d:e5:62:ae:34:fc:5d:88:ce:86:04:ef:26:94:
81:9b:3e:a4:87:ff:96:b4:0b:bc:aa:37:d8:9e:f9:
7d:4f:6a:85:9f:20:29:0a:80:58:34:d1:bb:87:07:
00:2b:bf:d0:3a:b8:03:d0:1c:ec:e1:80:75:71:80:
9c:0a:9a:15:9b:78:46:29:31:f4:7f:ad:78:58:54:
3c:87:c8:7c:c2:82:98:38:88:c9:73:84:8d:1b:de:
dc:32:ea:c4:e1:aa:0d:1e:75:39:31:0a:2c:98:71:
e3:5c:4c:b1:39:92:71:4b:2b:cb:49:b1:0c:c9:15:
0f:96:34:70:cd:12:3b:b0:02:97:7d:27:61:72:5f:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:73:D2:B1:68:6E:5E:35:30:6A:1B:6D:21:A9:12:5A:C3:04:5F:44
X509v3 Authority Key Identifier:
keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:86:5a:4a:f8:de:f8:e4:c1:f6:87:4e:a5:6e:95:fd:2f:38:
fa:d7:54:f5:93:2e:73:44:68:2c:05:b3:3e:c5:1d:a8:54:ea:
7f:2f:a1:77:53:f7:57:cd:bf:04:b2:d5:d4:82:1c:6e:61:be:
7b:d4:ef:65:c7:e2:6a:54:df:18:40:ca:23:4c:f5:ed:0d:9c:
48:46:58:c9:46:5a:09:64:9b:e6:06:df:69:95:f8:71:c2:86:
7c:ad:0c:ef:bf:16:6a:af:8a:87:92:46:6c:9d:e2:2c:b4:de:
8d:65:9c:3a:f4:3f:f8:81:cc:26:34:2b:1f:0b:83:e9:5e:a8:
f8:1e:ea:73:9d:7f:99:d7:52:2c:4d:21:0a:16:1d:aa:35:16:
b8:f2:b1:0f:52:4c:0e:0c:62:fc:33:9b:3b:0b:4b:47:78:c9:
ef:fa:f4:3d:30:7b:3d:1c:bb:00:5d:e8:5e:63:8d:5f:0b:d3:
fb:58:a5:c5:fb:14:54:4a:72:fa:03:71:b0:8d:f4:e4:08:d1:
57:32:16:ac:c0:c6:16:62:4e:e3:bf:06:2e:16:7f:f7:71:07:
8f:7a:76:2c:25:65:d6:12:1e:40:3a:79:2d:0b:c2:8d:5c:73:
3c:da:16:2d:8f:c3:bb:22:a1:ab:45:1d:36:ac:e0:67:6f:ba:
de:52:8d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:25:48 2026 by rpki-client