Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier: 5uC/tgeWoDeZtUZvtSa+g4U92WzYppy+jF0SAppunEs=
Subject key identifier: E9:96:28:8E:02:A5:54:31:95:F5:98:6C:9E:50:E8:E5:B0:DF:14:B6
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 019D26CCE04EC4AB4805467EE52F0C135E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number: 17EC
Signing time: Wed 25 Mar 2026 21:00:54 +0000
Manifest this update: Wed 25 Mar 2026 21:00:54 +0000
Manifest next update: Thu 26 Mar 2026 21:00:54 +0000
Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: kLahjqg3J22G2EIb9B/FThS4+TPB9kUFPor7miJtMMM=)
2: oY8wzqxSZtFw6pVYs4NFV60daUg.roa (hash: DFgw9sxWQdsrNBj4RrkibFIZhSj9mHDN7Zn+MkePlLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e0:4e:c4:ab:48:05:46:7e:e5:2f:0c:13:5e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: Mar 25 21:00:54 2026 GMT
Not After : Mar 26 21:00:54 2026 GMT
Subject: CN=e996288e02a5543195f5986c9e50e8e5b0df14b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:8c:da:f4:bb:14:dd:07:2a:2d:9a:bb:34:
20:c3:3a:b0:20:f5:f0:d7:98:48:94:86:7e:14:59:
72:c9:4a:c4:73:41:64:3d:7e:dc:60:e3:86:71:cc:
5b:03:d0:a0:ed:81:f9:07:3f:4f:62:d7:fc:d9:63:
7f:d1:16:25:38:14:66:8c:5a:5d:d9:44:2d:a5:6d:
02:31:50:63:d5:b2:d6:d1:f5:a3:23:be:8f:cd:9e:
cd:ec:50:5a:3a:4b:a5:98:15:21:63:d4:00:cb:ee:
d8:e9:91:78:89:23:2c:2c:67:b1:7a:7b:16:d2:92:
c2:35:f9:26:65:9c:d4:bc:3d:36:2c:d3:c4:a1:a6:
1f:fb:3c:97:91:19:20:eb:95:59:2f:29:61:5d:65:
99:08:bd:97:e7:fb:57:74:22:23:f0:a5:d8:db:27:
47:b9:5c:e3:06:d8:b9:39:cd:00:66:e8:94:70:6e:
c4:03:39:cc:b5:e7:16:34:01:15:6b:4c:2e:8a:d3:
a0:e6:25:13:63:99:20:48:52:b3:a1:a3:b0:eb:f3:
ab:a4:d1:21:21:54:a2:f0:ff:a4:c5:52:ea:6f:8d:
10:76:38:d1:5c:db:82:42:51:16:f6:ee:fa:13:06:
e4:cb:a6:cf:7c:ea:a7:02:7f:8e:57:c7:2e:e2:db:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:96:28:8E:02:A5:54:31:95:F5:98:6C:9E:50:E8:E5:B0:DF:14:B6
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:da:6e:77:a9:cd:71:d0:96:3e:eb:a7:d4:91:83:6b:56:a1:
e5:dd:51:e0:cb:9d:5b:67:a3:24:18:f1:d9:57:4a:c0:14:97:
67:07:8e:4f:d5:36:8d:79:14:31:c6:3a:c0:85:cc:0c:0e:b2:
05:3f:71:3d:9c:80:ce:90:ab:06:05:b9:aa:7a:fc:50:8a:75:
0c:ba:ae:dd:96:b7:08:c5:3b:d6:d6:ed:58:96:8b:00:40:f8:
e9:34:07:95:2b:7a:8a:fb:32:ee:90:8a:ee:d3:ed:c6:f8:a3:
9b:19:50:df:e6:19:b8:84:2d:08:f2:c1:4d:c1:9a:1e:39:2c:
98:ce:d7:53:d4:24:4d:eb:00:c5:9b:47:2e:74:72:2c:de:15:
d9:a3:a0:d4:7a:ef:dc:57:3f:87:57:f9:70:b3:ee:32:79:63:
7e:58:d0:77:ca:21:cc:23:6a:0b:51:5b:ed:99:36:52:71:8a:
4a:0e:28:49:f0:64:c2:42:11:a7:1d:d4:44:cb:de:85:78:c0:
06:e1:67:a6:af:c8:39:9c:84:30:96:fa:e8:85:13:ad:cb:79:
5b:0e:b8:7f:31:85:6c:03:b9:13:33:70:10:91:55:14:e9:48:
c2:be:e1:b1:6d:6d:42:b8:f8:ea:2f:8b:ff:4b:17:e6:7f:c7:
7a:60:f9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:44 2026 by rpki-client