Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
File: n2m9-bvSpFl-Js4gv-E4YkytM9w.mft (raw, json)
Hash identifier: jHeEPQlSz+feKhamfTQNsIGArDMX9JUcCMMs+ShqHAY=
Subject key identifier: 18:9F:9A:B6:96:AD:FB:6D:0C:A1:76:FC:C7:59:40:E0:9E:C9:85:97
Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
Certificate issuer: /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Certificate serial: 01A1DFBA09E7D880C276065AE0184C63B57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
Manifest number: 1B01
Signing time: Sun 15 Nov 2026 15:01:13 +0000
Manifest this update: Sun 15 Nov 2026 15:01:13 +0000
Manifest next update: Mon 16 Nov 2026 15:01:13 +0000
Files and hashes: 1: _oRX04Ccp7g8yn6Qn7PqMMD7qgg.roa (hash: y56xKKuiofP4Wvb2d2PYOPDkpzXNerKcJtIazDABM0Y=)
2: cQX5eN2lbhVeUxzV1wzLUCHBV1E.roa (hash: ngo5lXOLVy6FLpzOmrGOPzq70ozWmBI0PvKNWkY2CdE=)
3: n2m9-bvSpFl-Js4gv-E4YkytM9w.crl (hash: pt5/SV+Nh54BTPxvcOW0ULueijupOxnzJTWX0HP+iBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:09:e7:d8:80:c2:76:06:5a:e0:18:4c:63:b5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Validity
Not Before: Nov 15 15:01:13 2026 GMT
Not After : Nov 16 15:01:13 2026 GMT
Subject: CN=189f9ab696adfb6d0ca176fcc75940e09ec98597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f2:78:f9:df:0e:57:0b:5d:2e:7b:8e:7e:b8:
ee:f5:6d:8c:e7:0d:54:2e:dc:a9:db:11:05:26:ed:
8d:0d:58:23:9a:7a:d8:1d:11:08:36:80:98:22:7a:
73:51:e2:13:df:0a:18:18:0c:db:26:f9:be:ab:e4:
e0:2d:c2:18:d6:1a:83:95:a5:b8:ac:c8:e7:e0:0f:
b2:33:bc:9d:fd:1b:b7:60:d8:34:e2:d0:8e:a5:74:
f2:3d:bd:c8:b2:af:74:73:7e:f5:14:9b:04:30:1b:
a3:93:c9:30:10:b2:fb:cc:69:74:ed:7a:9b:91:88:
73:f4:87:12:ea:42:9a:e8:41:81:64:03:2b:67:82:
94:0e:43:b5:75:b6:6d:c1:f4:35:ee:18:94:b4:ff:
8b:99:62:b2:db:ae:a4:d5:43:0d:81:06:74:77:68:
2a:a2:45:a5:5f:c7:f0:16:63:b8:6e:4c:d4:43:62:
91:8b:6a:01:d4:e9:67:2b:07:83:f7:6f:25:a4:20:
f6:ad:17:39:0b:34:50:c4:47:a4:a7:fe:0a:1c:c0:
7d:73:3b:80:43:0d:b9:53:95:22:e2:e8:fd:3b:f2:
af:18:47:7a:44:8c:79:fb:51:54:5b:c7:a4:e9:ef:
b6:fc:0a:02:45:b7:77:99:0e:15:86:60:aa:ab:8c:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9F:9A:B6:96:AD:FB:6D:0C:A1:76:FC:C7:59:40:E0:9E:C9:85:97
X509v3 Authority Key Identifier:
keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:81:4b:24:9d:ad:3c:f0:0d:f4:b5:fb:71:f3:34:d7:9d:c3:
4e:d3:6c:aa:70:36:9f:39:f4:f2:07:3c:ba:10:93:92:55:29:
21:a6:4d:4b:55:e7:51:b9:c7:d1:22:81:5b:38:96:5e:08:00:
9b:41:83:36:3b:16:fc:33:5a:ef:67:35:57:78:92:d8:f0:18:
f1:fc:99:6a:91:12:3f:d0:96:d6:e3:69:d4:f0:cf:2c:34:4f:
5a:73:01:63:ff:1a:81:a2:68:e3:7a:3a:d3:22:e6:f0:10:08:
97:ef:62:cc:71:f9:65:33:6a:cc:d9:be:6e:b3:d1:72:5c:c7:
09:fd:e2:f0:66:f1:23:40:f0:29:19:50:c7:66:9a:3b:63:f6:
9f:df:6d:f7:d2:45:50:ad:39:59:65:47:b9:79:a3:e0:10:91:
ae:4f:3b:6d:8d:e4:e9:c0:fa:c0:b9:64:ec:8d:f7:28:2d:10:
9c:74:1e:02:70:b1:4d:72:1f:f2:0d:46:04:6d:6f:56:27:ad:
61:00:f7:5e:7e:56:22:98:6d:5a:63:ad:8f:55:4b:75:f7:f8:
c9:86:e4:dd:36:19:67:96:0c:cb:89:4f:24:4d:e1:7f:e0:78:
1d:d3:a6:c0:b8:73:46:1c:db:d0:27:cc:26:35:af:26:d1:25:
05:dc:1d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:38:56 2026 by rpki-client