Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/1b55df-3012-4c03-8a1d-b631c6d1c5e8/1/M-9NaJSNJyyfOEhtdTIRy16oTis.mft
File: M-9NaJSNJyyfOEhtdTIRy16oTis.mft (raw, json)
Hash identifier: dPy62WU1grI+RP0vvPPPmx/bJZmY5fOHZeRBzspTAt8=
Subject key identifier: 0C:CB:95:86:74:44:D7:2B:7A:3C:20:2E:E3:15:F4:62:8A:02:8A:E7
Authority key identifier: 33:EF:4D:68:94:8D:27:2C:9F:38:48:6D:75:32:11:CB:5E:A8:4E:2B
Certificate issuer: /CN=33ef4d68948d272c9f38486d753211cb5ea84e2b
Certificate serial: 019D27A91BEBE64842672E08696D4AF932B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-9NaJSNJyyfOEhtdTIRy16oTis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/1b55df-3012-4c03-8a1d-b631c6d1c5e8/1/M-9NaJSNJyyfOEhtdTIRy16oTis.mft
Manifest number: 01A3
Signing time: Thu 26 Mar 2026 01:01:27 +0000
Manifest this update: Thu 26 Mar 2026 01:01:27 +0000
Manifest next update: Fri 27 Mar 2026 01:01:27 +0000
Files and hashes: 1: M-9NaJSNJyyfOEhtdTIRy16oTis.crl (hash: mnACYps7WrOVCJ/q/jJ30reiOLkUPQ4YF/e6ZR+fKCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/1b55df-3012-4c03-8a1d-b631c6d1c5e8/1/M-9NaJSNJyyfOEhtdTIRy16oTis.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/1b55df-3012-4c03-8a1d-b631c6d1c5e8/1/M-9NaJSNJyyfOEhtdTIRy16oTis.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-9NaJSNJyyfOEhtdTIRy16oTis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:1b:eb:e6:48:42:67:2e:08:69:6d:4a:f9:32:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ef4d68948d272c9f38486d753211cb5ea84e2b
Validity
Not Before: Mar 26 01:01:27 2026 GMT
Not After : Mar 27 01:01:27 2026 GMT
Subject: CN=0ccb95867444d72b7a3c202ee315f4628a028ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:73:14:85:1c:8f:5f:be:5c:7f:ef:2c:4c:
28:3f:14:59:5f:ab:da:08:d2:c7:4f:7f:64:dc:3f:
05:8b:5f:a7:df:ce:7e:f4:6c:15:86:72:18:22:9c:
31:0c:07:fb:92:2e:a5:be:45:34:14:d9:f3:d7:30:
ee:60:f8:4e:01:a4:11:f2:cf:dc:45:ba:09:29:e7:
1a:8b:af:15:39:df:41:86:42:c8:a8:13:c2:f6:0c:
9b:34:1c:20:71:82:ae:d5:38:ae:9f:20:5e:c8:5e:
50:ac:b5:45:29:0e:4c:55:fe:33:e3:37:f6:3e:54:
54:69:50:82:a3:67:14:bf:12:7a:f9:11:71:b9:7a:
48:b8:19:68:28:d1:bc:ae:cc:0b:f8:71:27:2c:e9:
bf:e6:ab:5b:9d:f7:d4:4b:d3:db:51:b7:3c:3c:d8:
b4:9e:55:af:a3:36:a5:9f:95:1e:96:80:5d:ff:59:
44:5d:d3:9b:fe:31:c6:cd:35:05:c3:50:76:a3:dd:
33:fe:99:be:c1:af:6f:9a:ab:9f:b8:97:1b:4c:1e:
f9:9b:17:30:35:f3:8f:9f:4e:7a:67:ea:f1:18:d9:
67:33:14:c2:19:58:6b:91:d7:3c:af:6b:e5:c1:53:
b7:a7:a7:c1:66:dd:36:2c:50:fe:c8:52:d3:67:b3:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CB:95:86:74:44:D7:2B:7A:3C:20:2E:E3:15:F4:62:8A:02:8A:E7
X509v3 Authority Key Identifier:
keyid:33:EF:4D:68:94:8D:27:2C:9F:38:48:6D:75:32:11:CB:5E:A8:4E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-9NaJSNJyyfOEhtdTIRy16oTis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/1b55df-3012-4c03-8a1d-b631c6d1c5e8/1/M-9NaJSNJyyfOEhtdTIRy16oTis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/1b55df-3012-4c03-8a1d-b631c6d1c5e8/1/M-9NaJSNJyyfOEhtdTIRy16oTis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:10:7d:ee:eb:34:73:63:ca:df:c2:47:ed:07:f5:b2:84:9e:
50:da:e7:94:e7:f4:b2:d8:59:cc:8b:6f:e5:b5:81:52:8e:fe:
bb:29:06:d8:d9:e8:6c:4d:e6:7c:b5:63:1c:e0:eb:a3:92:bb:
21:15:22:84:61:99:8c:18:34:2f:e2:9c:71:a3:3e:57:e3:f4:
00:e6:96:b3:2c:19:6a:ff:e0:ab:d2:40:4b:1d:8f:30:8d:99:
df:ad:0c:70:9d:2d:97:93:8d:a0:7e:1b:70:56:a7:b0:42:70:
b8:a5:5c:2f:c7:ce:11:a9:88:e2:cb:cf:6c:83:a0:0f:2e:93:
14:49:61:5e:2c:18:82:e6:f4:d8:ca:1d:95:3b:4a:f1:ee:78:
5f:38:7a:c3:bb:1c:82:79:45:f5:1b:14:61:3a:1e:dc:66:d6:
9a:d3:18:ac:27:20:bc:81:86:f4:91:94:a6:d9:76:1f:a0:e2:
65:3b:6a:69:2b:17:c3:3a:e3:66:d6:90:b5:bd:f5:57:2f:3b:
71:c0:45:70:d3:6b:89:60:2b:ae:4c:56:bb:ad:17:b6:66:a4:
1d:18:5a:d1:ef:cb:25:ca:68:c3:4f:1b:2b:d6:27:e7:9c:14:
53:12:39:32:0e:7f:c6:f1:c2:05:a5:e8:e9:2b:90:b5:aa:7c:
4c:27:ff:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:28 2026 by rpki-client