Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
File: n2m9-bvSpFl-Js4gv-E4YkytM9w.mft (raw, json)
Hash identifier: Qnp+wrBWic8TVdi4Wve3FkhA6bsh2I0dNVLeEmF7j0A=
Subject key identifier: F2:AA:FB:F1:DE:B3:E2:02:02:27:8C:D0:8F:0B:07:5A:9E:9E:87:86
Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
Certificate issuer: /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Certificate serial: 01A0CF6D45BBE37C86970BC47BECA1B5E506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
Manifest number: 1A74
Signing time: Wed 23 Sep 2026 18:00:39 +0000
Manifest this update: Wed 23 Sep 2026 18:00:39 +0000
Manifest next update: Thu 24 Sep 2026 18:00:39 +0000
Files and hashes: 1: _oRX04Ccp7g8yn6Qn7PqMMD7qgg.roa (hash: y56xKKuiofP4Wvb2d2PYOPDkpzXNerKcJtIazDABM0Y=)
2: cQX5eN2lbhVeUxzV1wzLUCHBV1E.roa (hash: ngo5lXOLVy6FLpzOmrGOPzq70ozWmBI0PvKNWkY2CdE=)
3: n2m9-bvSpFl-Js4gv-E4YkytM9w.crl (hash: PSInnPFLsmyPX5uB++Fh8pqk/xcNSvrgniyNnpHl3KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:45:bb:e3:7c:86:97:0b:c4:7b:ec:a1:b5:e5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Validity
Not Before: Sep 23 18:00:39 2026 GMT
Not After : Sep 24 18:00:39 2026 GMT
Subject: CN=f2aafbf1deb3e20202278cd08f0b075a9e9e8786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:1c:a6:e9:96:60:f0:c7:54:8d:e4:d4:3e:
30:8f:9a:74:96:c5:a7:cf:0d:6d:8b:d9:74:b6:78:
30:52:96:9e:07:d3:63:49:13:d7:b5:41:b6:1d:9f:
ac:4c:0f:fe:e6:84:5e:07:ba:eb:f9:6a:da:47:02:
a9:b8:dc:b7:d6:c2:97:b4:83:73:f8:dd:04:bd:23:
2e:90:7a:53:55:35:2e:2d:52:0b:20:b5:8e:38:77:
6c:7f:ae:78:03:db:54:0b:71:59:e6:1b:6c:6c:e7:
01:8f:b6:f3:1c:ac:15:6f:c6:f1:7e:66:c7:4c:43:
d4:ca:ad:05:06:63:c5:d1:a0:a5:b1:4a:8e:07:c1:
16:a2:14:b6:2c:30:73:ae:96:d1:47:42:d1:c2:dc:
17:aa:9d:5d:97:a7:3d:ec:90:71:0b:96:49:bb:0c:
4c:f7:30:08:56:d5:70:93:fe:c3:a2:12:dd:f4:2a:
9f:29:25:0a:ae:a2:c6:35:d9:97:5a:fe:56:23:1f:
59:32:25:2d:70:c1:7f:66:b6:a6:4b:4b:3d:a7:7f:
cf:c2:27:85:3b:16:69:c5:a5:73:d7:63:27:36:99:
be:32:33:a8:3c:96:ce:3f:86:bc:f3:2f:0a:c0:fd:
db:e2:4f:af:ff:46:28:e1:89:f2:1a:be:c8:44:74:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AA:FB:F1:DE:B3:E2:02:02:27:8C:D0:8F:0B:07:5A:9E:9E:87:86
X509v3 Authority Key Identifier:
keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c8:c1:2f:a0:1d:c9:31:76:3b:36:4d:9a:55:c8:9f:71:32:
a3:b8:50:72:53:b7:0c:57:54:e2:b3:25:b3:ae:71:1c:d2:21:
57:a1:8e:39:9c:b9:9a:4f:67:4c:31:b4:a7:8e:91:b3:5e:c7:
f0:35:9d:43:b3:d4:6b:c0:74:22:88:d5:e4:1a:57:70:81:85:
ee:2e:6b:5c:73:01:28:da:6d:b2:00:7a:97:d4:b3:31:bb:36:
7a:a3:46:ab:6e:17:ac:0b:53:ff:9a:d1:0d:92:9e:16:91:9f:
5f:38:4b:cb:fb:2e:2b:9a:66:cb:70:90:f6:16:f3:6f:65:5b:
78:97:eb:77:a5:6d:ee:94:7d:42:ab:02:99:e2:f4:41:c4:72:
35:d0:0e:64:b5:6e:cf:a8:7a:de:ca:f3:c4:63:8b:7c:07:0c:
5d:ca:eb:56:5c:31:69:22:17:b0:a8:6f:d7:0f:a6:66:2d:b7:
53:1d:81:19:cd:e3:e8:15:f1:63:4a:ee:f4:15:a0:17:84:0c:
f7:1b:32:5d:72:ba:b2:a8:3c:5a:14:b4:91:f0:4c:fb:3a:8d:
e3:a7:90:22:d2:20:6d:b6:fc:d8:3b:6a:89:68:9e:f6:6b:97:
92:d2:11:58:08:d6:09:cf:7f:df:01:e8:8e:f7:a9:47:25:2e:
c5:df:fe:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:22:58 2026 by rpki-client