Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
File: m9upUpCphaaXdj0wq0L5w3hAeLI.mft (raw, json)
Hash identifier: npjRgWtoZF6rk8dxErVhwdz+WXUv4K38EM5nvuuYsYE=
Subject key identifier: 8E:12:10:66:97:2A:8B:57:01:FD:70:89:66:B2:25:4E:68:A0:BB:FF
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial: 019D2996E1938A205E73C8B7E46E26C0962E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
Manifest number: 0F03
Signing time: Thu 26 Mar 2026 10:00:47 +0000
Manifest this update: Thu 26 Mar 2026 10:00:47 +0000
Manifest next update: Fri 27 Mar 2026 10:00:47 +0000
Files and hashes: 1: BcEnhr3TM-NXG8Q4ay62cxztpy4.roa (hash: pqYAoj6DHioE/63Z2p/ewbVxl274tw4E0vVzLjsfmyg=)
2: DCrG4g3sJo2PisD_hc4NckgDZw8.roa (hash: FifxalB73pfyrHIphM4RguBQlmOIeI0ZS9qLf/+J8cI=)
3: m9upUpCphaaXdj0wq0L5w3hAeLI.crl (hash: NKXhMOQVmstiUjaUtacdFHeLkFTCFa/WqI6r6XdvG10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:e1:93:8a:20:5e:73:c8:b7:e4:6e:26:c0:96:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
Validity
Not Before: Mar 26 10:00:47 2026 GMT
Not After : Mar 27 10:00:47 2026 GMT
Subject: CN=8e121066972a8b5701fd708966b2254e68a0bbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:6f:cd:51:0c:fd:64:e5:dc:4d:66:05:f2:
b1:ec:8f:d6:cf:52:e4:4d:ef:ea:52:15:e7:b5:41:
46:e6:ca:be:28:2a:da:2a:27:27:ff:ee:09:ab:09:
b0:9e:64:5a:ee:25:da:d7:fe:f2:02:82:2a:49:ff:
c1:a1:7b:19:64:84:54:8d:0c:cb:c1:3d:43:3e:bc:
fb:d1:aa:99:75:71:e8:60:66:f0:04:22:66:be:6b:
06:86:90:bb:8b:2d:11:51:b7:4d:3f:86:d0:a6:88:
0b:0f:d4:74:bf:49:f6:51:62:e3:cb:fc:70:54:5a:
16:1e:f7:29:7f:84:00:7c:d9:95:3e:c5:dc:45:1d:
eb:90:4e:99:41:fa:4c:ea:08:55:f9:62:3d:e1:98:
21:ad:67:c9:91:84:c4:14:c7:69:42:db:7e:eb:5e:
bc:c5:99:e6:b3:00:a8:bb:29:bd:ae:64:63:c4:89:
dd:28:3c:85:80:20:51:23:16:98:05:73:e1:d8:8c:
70:7b:f6:57:a8:eb:96:24:c2:60:b7:e0:02:8a:29:
13:c2:ed:a0:53:61:09:91:08:5f:3d:8e:91:44:42:
94:fa:34:4e:88:fb:10:6d:55:96:0d:38:55:16:29:
2e:54:92:5a:ae:77:d2:e9:87:9b:14:d9:d4:e9:91:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:12:10:66:97:2A:8B:57:01:FD:70:89:66:B2:25:4E:68:A0:BB:FF
X509v3 Authority Key Identifier:
keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c8:ee:1f:bd:98:1e:4b:87:28:0e:83:df:8a:b3:92:ed:ea:
a8:8a:33:73:39:46:c8:a8:e0:1a:78:8f:23:2e:85:91:e9:37:
93:2d:15:07:9c:4e:ca:4a:f7:61:16:6d:7a:3a:87:23:f0:6d:
3c:7d:d5:c1:d0:64:6e:07:bf:92:ab:a7:f5:fe:41:ce:5b:f4:
2c:8a:4c:2d:df:aa:0d:49:cc:e2:e0:fb:d2:a9:03:2f:d1:2c:
e7:d8:3f:49:8a:fa:3b:25:f9:4d:91:71:6f:ce:ba:a2:37:e1:
57:e3:62:fd:b9:bc:4c:1e:73:e0:dd:f3:2f:eb:a9:a9:e2:f6:
c8:30:ab:19:18:5c:49:fd:b4:69:33:39:f4:f0:7f:a2:70:45:
3e:e6:f4:6b:c2:43:c9:fe:35:c5:d2:cf:ff:06:e1:91:ba:53:
31:61:24:6f:8f:11:6a:3e:63:a9:8f:86:33:84:18:bd:80:68:
d2:c9:d6:ca:8e:c3:92:8e:18:5a:03:b3:50:40:d9:e1:e4:6b:
d3:ff:50:68:04:f0:e9:90:03:b4:26:8e:5d:63:6e:fc:26:f6:
04:3c:1b:2e:42:1e:a5:2d:58:4e:60:8b:b4:8e:60:74:78:b0:
d4:bb:18:18:c6:23:ba:61:46:11:f1:b2:a6:07:60:7f:2f:1a:
8f:44:02:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:59 2026 by rpki-client