Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: Og+Ki2JtyxZdrnhQp5eaFncZFbtSptQRy2sVBJZWIR4=
Subject key identifier: 2A:61:28:59:53:4E:AE:E5:E6:B4:2A:CC:4F:80:92:7A:84:8C:EF:18
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 01A0D727A97049D84FAD6275AB7C2F4C61A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 13AA
Signing time: Fri 25 Sep 2026 06:01:35 +0000
Manifest this update: Fri 25 Sep 2026 06:01:35 +0000
Manifest next update: Sat 26 Sep 2026 06:01:35 +0000
Files and hashes: 1: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (hash: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg=)
2: JhHZEdKJAkP34-ikWpJJrLVsEs4.roa (hash: KnIixUB21MIMX8vhmGnPkdfsgJQVtWJkg4ouIc7Q8O8=)
3: L6kvFhmw2HRimiOHYbmI9LP_LC8.roa (hash: bz6jH/jd8xJJNx0vVfwgOgrPiMsJ1ZK1zrtVm+WmTlk=)
4: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: KUopko+ldmTaS9HuQp11dzQMtYydaIVG7aHI1cFhceI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:a9:70:49:d8:4f:ad:62:75:ab:7c:2f:4c:61:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Sep 25 06:01:35 2026 GMT
Not After : Sep 26 06:01:35 2026 GMT
Subject: CN=2a612859534eaee5e6b42acc4f80927a848cef18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:8c:c5:f2:86:84:0c:71:43:12:7b:6c:cf:
b9:ba:7a:42:4f:1c:a6:e6:20:29:7a:0b:b7:20:6a:
d6:1d:b4:37:62:a0:d7:3f:74:dd:8e:02:05:6a:77:
5a:0f:b1:54:5e:22:1e:18:84:fa:a7:1b:25:5b:cb:
b4:63:ff:5c:86:5d:86:a8:6f:31:a9:2e:78:60:83:
49:fc:73:0e:aa:35:14:67:55:22:a0:60:9a:46:1a:
a5:1f:54:b3:6d:ed:29:dc:aa:5b:72:81:70:09:ce:
a8:9f:a7:e9:93:d5:8a:2e:19:87:79:0b:f6:6e:8e:
98:40:c6:e5:3e:6b:34:6d:1c:35:fe:a6:24:d1:e8:
bb:66:ff:10:55:fb:1e:4d:c7:26:99:b5:52:19:fd:
79:1a:99:2a:a7:c4:2a:e4:da:13:5f:41:b5:42:ae:
47:15:59:ba:6c:31:52:61:ac:f6:9f:62:47:14:87:
31:6f:4f:a9:99:b6:48:07:4f:f8:b5:c3:f7:9d:b0:
2f:74:7d:cc:d1:96:7d:75:6c:59:5f:f9:64:41:e0:
e8:2a:91:d4:16:7b:06:a2:15:ac:c2:4d:11:42:c8:
2b:f3:60:bd:c0:e2:92:59:d0:a5:ea:da:92:d2:03:
c3:86:3d:48:5f:0a:c8:dc:d3:dd:d3:75:cc:3d:bb:
a1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:61:28:59:53:4E:AE:E5:E6:B4:2A:CC:4F:80:92:7A:84:8C:EF:18
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:42:9b:78:82:27:70:4b:9d:cb:28:d2:a4:01:41:ff:c9:0c:
86:e4:21:d0:fc:59:06:cb:68:f6:e6:c2:6a:16:9e:6d:81:a7:
9d:06:4e:a4:ee:cc:d1:0d:e8:ce:0f:32:b6:bf:e7:db:cb:52:
7c:99:78:01:ef:d4:1d:3b:7b:27:68:d1:5a:8a:1c:2d:9e:33:
89:36:5f:42:a5:da:c3:e3:dd:c0:13:63:d9:13:f9:57:0f:f0:
06:36:63:e7:40:73:72:1c:f1:e4:41:cf:7e:55:61:1b:72:3b:
8c:c9:2d:9d:26:a1:57:24:20:24:d1:11:2d:96:52:59:34:d4:
88:e9:97:b8:15:3f:47:fd:d0:4a:8b:22:ed:da:e1:27:f5:91:
57:7d:a4:79:1a:87:a0:7e:c9:ba:6e:53:c9:2c:2a:d3:49:28:
18:77:e9:16:3f:96:b2:01:ba:c3:23:2a:22:cb:97:81:a8:e6:
a3:73:18:05:12:64:d0:a5:c0:8a:92:d4:ed:ba:e4:9b:83:6a:
0b:6a:2d:92:91:e4:b3:8e:f7:a4:4b:c9:7c:05:40:87:c6:0a:
39:db:77:55:d0:89:aa:e6:88:1a:cf:64:5c:47:71:a9:0c:97:
6e:3a:7b:ff:86:d7:7d:40:c1:29:3c:ad:33:65:1c:67:55:68:
3c:14:2f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:19:55 2026 by rpki-client