Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: M4GAkYh70mBMBhs4g3MM9YecFmD4Bp/q1q+3h6hUW+g=
Subject key identifier: A3:F4:C3:9F:B2:98:AD:A6:D2:9C:FB:A8:D4:AC:AC:B4:52:60:3A:E2
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 019E1DFE35BD6D8CA4AD13878A06D8FFD670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 1241
Signing time: Tue 12 May 2026 21:00:59 +0000
Manifest this update: Tue 12 May 2026 21:00:59 +0000
Manifest next update: Wed 13 May 2026 21:00:59 +0000
Files and hashes: 1: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (hash: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg=)
2: JhHZEdKJAkP34-ikWpJJrLVsEs4.roa (hash: KnIixUB21MIMX8vhmGnPkdfsgJQVtWJkg4ouIc7Q8O8=)
3: L6kvFhmw2HRimiOHYbmI9LP_LC8.roa (hash: bz6jH/jd8xJJNx0vVfwgOgrPiMsJ1ZK1zrtVm+WmTlk=)
4: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: 4bbBQY1WzqklfeekZF8W7qpIJ0IBs7biEg6kec3+mOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:35:bd:6d:8c:a4:ad:13:87:8a:06:d8:ff:d6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: May 12 21:00:59 2026 GMT
Not After : May 13 21:00:59 2026 GMT
Subject: CN=a3f4c39fb298ada6d29cfba8d4acacb452603ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2a:94:f0:58:da:a1:a5:51:0f:d7:eb:8d:6d:
3c:94:91:97:a2:ad:17:2e:31:67:67:05:ef:c1:00:
32:6b:01:74:66:e5:48:aa:5f:e6:dc:5b:9a:6f:9a:
e2:c5:96:ad:92:01:96:40:2a:ab:06:40:c7:3c:c5:
e8:3f:03:7a:78:f4:8c:cc:73:d4:c7:03:27:fa:61:
1e:dc:3a:ca:d8:6d:a5:b6:2d:8d:d3:83:4c:ca:eb:
9f:40:bf:e8:8b:57:02:60:70:3e:6a:23:b8:9a:a7:
b1:40:91:13:2f:f5:4a:b6:c5:4d:29:ee:b3:83:c9:
87:5f:54:f3:8b:81:e4:0a:35:3d:7b:5b:8c:89:d6:
23:50:6f:3f:4f:03:18:90:57:99:1d:90:7b:12:7f:
cd:16:d6:29:40:3f:0a:69:83:b1:46:74:ce:44:28:
90:d2:c2:9b:85:9f:b2:4e:35:1e:b3:b0:41:c6:c1:
e0:88:57:1c:73:56:27:a9:33:9d:8c:49:c8:17:74:
ae:62:4a:d0:eb:eb:24:0f:3d:3f:50:04:8b:ba:d9:
37:0b:88:11:a0:db:0c:4b:d6:c0:b3:be:6a:69:a9:
7a:3b:42:6d:ac:b4:f5:71:91:40:b5:67:e5:cc:87:
00:7c:7f:78:b7:7c:26:2a:eb:16:56:67:07:5b:da:
16:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F4:C3:9F:B2:98:AD:A6:D2:9C:FB:A8:D4:AC:AC:B4:52:60:3A:E2
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:26:9f:d8:52:83:08:2d:2d:eb:a3:55:bd:0e:7d:41:3d:17:
1b:59:26:47:1e:82:e5:52:46:ae:3b:03:b3:41:da:58:6c:f1:
48:6c:6a:07:79:c6:3d:0d:6c:d3:4b:16:79:b3:3f:a1:38:5b:
0c:7f:3b:a9:7a:2a:ae:8d:79:60:42:96:cc:41:6b:04:a8:03:
b0:ee:09:31:5c:14:ab:09:d6:7e:9c:9d:82:7c:7a:e0:9f:b9:
fd:45:fb:f4:6a:b5:30:02:55:fa:39:be:af:4a:29:96:b8:ee:
f3:b9:8c:25:20:dc:b4:df:fa:fb:c0:33:49:c0:34:de:29:1d:
c5:a0:c0:0a:48:3c:1f:13:36:51:59:02:01:ed:09:0d:32:1a:
ca:cb:36:d8:74:88:9f:0f:a2:6e:b9:ef:ae:28:74:5c:83:4b:
f5:c3:cf:1c:3f:86:c6:d3:60:51:2e:2c:e6:65:41:79:c4:78:
ab:e1:83:f9:ed:98:30:91:39:4d:f9:a2:cf:49:5f:92:af:51:
d8:06:37:82:dc:10:1e:b8:c2:93:90:fc:e6:67:91:a6:f0:cc:
d1:69:9e:1b:0e:53:ac:85:d4:8b:35:1b:d1:d1:22:63:6c:b7:
51:af:68:b6:a7:d3:35:e7:69:64:78:a2:0d:d4:22:dd:aa:38:
97:88:b7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:08 2026 by rpki-client