Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier: ZX9e+3KHwxA5XDK7g32vtTF59RKoBHCOhdkldPbuy6A=
Subject key identifier: 37:3C:0A:DD:3C:59:DC:5E:CC:88:03:87:8C:7A:6E:90:76:E0:D2:32
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 01A11CAC98915B26DCAAC1C94147B464982A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number: 19F9
Signing time: Thu 08 Oct 2026 18:00:35 +0000
Manifest this update: Thu 08 Oct 2026 18:00:35 +0000
Manifest next update: Fri 09 Oct 2026 18:00:35 +0000
Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: otJeSh3Fc9/Np3iN28Dez3SRn8N4j7/Cy4jcAJr3t8E=)
2: oY8wzqxSZtFw6pVYs4NFV60daUg.roa (hash: DFgw9sxWQdsrNBj4RrkibFIZhSj9mHDN7Zn+MkePlLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:ac:98:91:5b:26:dc:aa:c1:c9:41:47:b4:64:98:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: Oct 8 18:00:35 2026 GMT
Not After : Oct 9 18:00:35 2026 GMT
Subject: CN=373c0add3c59dc5ecc8803878c7a6e9076e0d232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:6e:0e:49:2f:f5:22:86:fa:b3:2e:44:71:
07:76:7f:d1:c6:71:1b:27:c9:f9:09:e4:88:1d:d9:
86:31:fb:4f:18:f6:6d:7f:e3:f2:8c:8c:98:4f:4d:
e1:b2:ea:6c:26:f9:a4:15:a0:c3:02:02:fb:35:4f:
31:96:09:b5:fe:e2:df:0e:e6:29:dd:75:95:f6:d4:
26:f6:d7:42:2a:f8:91:d2:52:54:79:d7:1b:5f:b3:
8c:8a:0b:43:a6:8c:23:3c:ef:f5:c9:89:6f:f2:18:
8c:fe:b1:70:8d:53:0b:85:e0:21:ed:5c:05:b8:88:
09:6c:9c:cf:14:f9:79:c7:b7:1c:d7:93:99:03:d0:
2b:f7:a2:ac:ae:30:8a:81:8e:f4:1e:4d:be:f5:3e:
eb:8c:88:b2:64:30:21:40:9a:bb:fe:db:d8:15:a4:
91:62:50:1c:ff:cc:a4:19:29:1d:ff:67:d4:14:3e:
2d:e2:bf:51:60:20:38:4e:f5:f4:81:7f:73:f7:34:
86:d7:91:b6:a0:a8:73:62:df:fa:a7:43:c5:03:c2:
a2:ca:0b:63:c0:64:74:15:77:d0:6b:41:80:6c:1c:
ae:b4:f7:7d:b4:3f:f6:12:f8:40:66:f9:38:19:63:
11:ff:1f:51:39:76:4b:07:9b:3b:52:66:7c:68:e8:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3C:0A:DD:3C:59:DC:5E:CC:88:03:87:8C:7A:6E:90:76:E0:D2:32
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e0:40:13:9f:02:f4:3b:68:06:53:5c:d5:0b:55:07:fb:90:
8d:92:18:69:00:f2:2a:e9:bd:68:5a:cf:02:0d:2a:0f:44:a7:
9f:7f:6f:5d:f1:20:3b:31:bd:54:e0:77:df:a2:d1:ec:32:dc:
a5:15:28:54:63:e6:30:89:d0:ac:8e:8e:b4:fc:e6:7a:ed:54:
02:9f:a6:35:3e:47:79:7f:ec:d1:23:d0:2a:2a:cd:f2:41:84:
b9:c7:cb:02:06:ed:86:11:92:af:31:e2:81:ad:1e:13:80:15:
df:41:49:12:a9:1c:d0:ed:00:94:35:3d:86:5f:f6:1c:01:35:
43:20:e9:4e:d9:5f:df:19:33:a9:36:1f:37:b7:c9:59:b0:9a:
e3:a9:c6:41:d5:72:92:5c:89:ea:d6:0a:0d:7e:76:55:0e:77:
19:c6:2a:7e:2d:67:7a:dc:24:94:78:ce:8f:da:c8:87:2f:e6:
82:96:85:50:2f:97:47:a4:f6:79:13:e2:a5:fe:a3:ce:d6:65:
18:fb:10:66:21:99:f7:7a:ee:d6:d6:9a:21:e6:17:c1:63:cc:
6c:76:22:60:05:93:1e:21:79:d8:b1:ee:7b:46:19:fd:f0:68:
ea:51:cd:f9:5f:92:4b:4c:a1:42:b1:ca:b4:ca:aa:ce:58:e1:
d1:eb:9d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:57:40 2026 by rpki-client