Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: nbQ4xN3ACYBgMc0mcHBBF9ANcb/OaDXP1BYmydP34Kg=
Subject key identifier: 33:2D:ED:FB:80:F1:C8:FF:32:78:BB:2C:4C:79:6E:A9:85:3F:44:4E
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 019D26CCA5A78461978B40A7EB947C4859A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 11C1
Signing time: Wed 25 Mar 2026 21:00:38 +0000
Manifest this update: Wed 25 Mar 2026 21:00:38 +0000
Manifest next update: Thu 26 Mar 2026 21:00:38 +0000
Files and hashes: 1: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (hash: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg=)
2: JhHZEdKJAkP34-ikWpJJrLVsEs4.roa (hash: KnIixUB21MIMX8vhmGnPkdfsgJQVtWJkg4ouIc7Q8O8=)
3: L6kvFhmw2HRimiOHYbmI9LP_LC8.roa (hash: bz6jH/jd8xJJNx0vVfwgOgrPiMsJ1ZK1zrtVm+WmTlk=)
4: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: 1glxeoIm5K0pX+8kG4ETgc2qbVD3U1P0fqMOBkuKYaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:a5:a7:84:61:97:8b:40:a7:eb:94:7c:48:59:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Mar 25 21:00:38 2026 GMT
Not After : Mar 26 21:00:38 2026 GMT
Subject: CN=332dedfb80f1c8ff3278bb2c4c796ea9853f444e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e7:23:52:8c:d8:42:e5:49:37:e6:bf:5a:0c:
04:99:d9:aa:0d:6d:f8:0a:ec:a2:f4:f9:43:0a:e6:
22:5d:5f:50:73:bf:d3:0b:72:66:1e:52:43:6b:23:
5a:bf:42:01:d0:4f:96:24:7a:92:ed:ae:b1:cc:c8:
29:2d:45:31:d1:99:48:b4:cb:57:80:fa:71:1d:c9:
9b:c7:c3:9b:34:8f:84:11:04:d6:14:58:0c:29:7e:
4b:73:9c:cf:76:e7:a0:28:67:4e:51:12:40:3b:ee:
16:6b:87:09:b6:fb:ff:56:00:b0:89:0c:f1:1f:d0:
de:02:e5:df:f0:82:9b:40:96:ff:e9:0a:28:ab:49:
e7:ad:b8:13:08:04:7a:7e:30:31:e1:65:3a:04:79:
ed:26:65:7d:2c:4b:e9:63:5f:bd:f0:8f:98:7a:e2:
91:d7:df:e3:ce:17:06:b2:57:99:7d:c7:ef:d7:0b:
b5:74:8e:77:bd:8b:4b:73:38:f1:2f:48:b2:b6:c9:
b9:c2:7d:2b:12:46:c8:6e:aa:c2:82:af:ad:de:f9:
67:18:7e:f1:5b:f2:6a:aa:1f:4e:49:ff:85:c9:8c:
e7:aa:11:3d:ab:6e:66:a0:3a:f1:1f:84:d6:90:10:
80:47:fa:29:66:85:6c:e0:b0:e7:1d:e8:25:15:88:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2D:ED:FB:80:F1:C8:FF:32:78:BB:2C:4C:79:6E:A9:85:3F:44:4E
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c4:83:81:b9:b8:7f:87:f1:6d:2c:1b:a8:90:f3:7a:b6:af:
a4:16:e3:87:27:b2:5b:17:06:ab:e5:01:b5:91:fc:eb:47:bf:
d0:dd:64:1f:bc:a7:16:06:ce:09:c9:9a:cd:b3:2b:17:79:d0:
0d:7f:9f:a6:f2:cd:fb:4f:eb:a8:1c:b1:f5:d7:48:96:50:55:
f1:02:69:d5:eb:6a:c0:2b:6e:f5:02:56:af:1c:1e:40:cd:52:
cd:1b:29:a5:9c:16:b7:51:3d:47:c8:32:43:e8:46:cf:a6:fa:
18:90:61:f8:f3:48:d5:ef:32:6a:f3:9f:10:1a:bb:bc:b3:a2:
28:c9:8a:5e:dd:0b:86:30:0b:5b:d8:7e:90:4d:a5:04:b0:a2:
29:f7:8b:ee:49:11:ae:ca:84:67:22:fa:c3:a2:b6:5b:f1:16:
ce:8a:fc:06:b2:7f:e3:a8:25:b3:59:09:d2:6b:35:c2:d2:5e:
d2:c5:76:a7:77:aa:5a:9d:19:9f:1e:d6:bd:ad:b9:b0:5b:12:
ab:ca:99:fb:c4:91:88:40:e1:b2:23:59:a9:18:c2:9f:2e:db:
31:a5:f1:60:8b:86:d4:53:62:17:71:61:56:b1:60:ad:3f:aa:
ea:a1:ae:05:fa:2d:3a:b4:50:b7:4b:5d:0d:47:8e:b6:b7:a1:
5b:cb:ff:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:23 2026 by rpki-client