Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
File: b9M_nmhWjdYFvJKvwe9raeEnq9g.mft (raw, json)
Hash identifier: LfiE/J3DiWZtNLkn70A2mDhiFcLdzDF+yoKe1f0WgiQ=
Subject key identifier: 23:76:7A:15:7B:FB:E3:AA:8D:DE:C1:98:D4:64:9E:87:99:89:2E:0B
Authority key identifier: 6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
Certificate issuer: /CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Certificate serial: 019D277247DAC6DEF8B3253A82DAC8332494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
Manifest number: 11F2
Signing time: Thu 26 Mar 2026 00:01:33 +0000
Manifest this update: Thu 26 Mar 2026 00:01:33 +0000
Manifest next update: Fri 27 Mar 2026 00:01:33 +0000
Files and hashes: 1: b9M_nmhWjdYFvJKvwe9raeEnq9g.crl (hash: XdPizrZWqA9DPmXr8ojLx3Ng7OWrlUViTPhI5Lc9WZM=)
2: tlNcT1MiBSkZmUCLK9DZ-_CTY2g.roa (hash: 6s3KHnByP7wHbQjNbj6YgCo5HA6sEDGtTC7Og3yhpfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:47:da:c6:de:f8:b3:25:3a:82:da:c8:33:24:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Validity
Not Before: Mar 26 00:01:33 2026 GMT
Not After : Mar 27 00:01:33 2026 GMT
Subject: CN=23767a157bfbe3aa8ddec198d4649e8799892e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:fa:ed:ad:12:17:34:54:5b:02:4c:36:fa:
3f:48:87:95:a8:d9:1c:61:b6:88:65:8d:2a:44:8a:
eb:e2:f3:dc:d0:6a:fb:d2:87:1d:c2:f3:94:91:b9:
96:1a:10:2e:5a:37:c1:33:80:1c:b9:41:bb:2a:11:
b8:c8:9c:4a:ae:41:20:84:9b:4d:de:1c:e7:4c:3a:
8e:a3:38:f7:89:c2:27:36:17:2b:67:d4:ab:50:45:
a1:fd:6e:86:c3:37:62:d2:20:26:d3:ab:6e:5c:57:
c8:a7:4a:13:92:09:07:89:51:d1:bd:fa:36:a1:b0:
b9:0c:10:af:3b:55:02:f6:be:a1:3b:c2:60:8d:27:
a7:eb:5d:9e:79:e0:9d:22:7e:d8:8e:3e:33:ef:27:
1c:a7:84:74:4d:6d:f7:cf:a0:fb:bf:ec:51:4d:c8:
97:a4:cb:64:08:71:4e:94:95:a5:ec:73:7d:b8:f2:
c6:4b:88:99:f5:3b:8d:fd:87:55:01:8b:6e:9e:36:
31:7a:6a:40:00:4e:a2:ae:cc:38:df:04:90:25:ae:
b7:28:5f:8b:26:fd:74:e8:6d:b9:a9:9a:cb:3f:0d:
bb:4a:cf:87:d1:35:10:5d:53:dd:5c:8b:19:1d:13:
e2:89:f7:99:de:f2:93:b2:d2:22:49:ed:50:bf:9b:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:76:7A:15:7B:FB:E3:AA:8D:DE:C1:98:D4:64:9E:87:99:89:2E:0B
X509v3 Authority Key Identifier:
keyid:6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fa:06:06:87:9d:38:68:9b:5a:57:86:24:43:7d:35:66:58:
55:54:12:19:fb:e4:75:e7:0f:cb:6d:37:5b:ca:bc:dd:38:f2:
99:aa:ba:42:9b:44:b5:c8:87:76:73:48:6b:db:dc:34:7a:db:
c1:f8:44:9d:3d:2a:ff:99:e9:10:81:28:a7:19:51:8d:09:37:
1a:95:53:da:7e:1a:aa:32:38:ce:0a:44:2b:d8:38:d3:c5:dc:
11:57:14:f7:1d:8d:7e:5e:57:15:f6:3a:d1:41:db:7b:f8:62:
9c:36:e2:fc:23:f0:56:51:6c:67:5b:32:83:b8:50:9b:22:61:
47:1a:bf:56:13:e4:dc:99:48:42:f9:23:de:3b:5b:11:ba:b1:
23:e3:06:fa:06:d9:28:21:03:48:d4:16:58:45:85:29:f4:92:
d5:97:c2:0b:61:df:2c:c0:e7:88:e7:54:df:8b:aa:07:db:b1:
1d:7f:50:74:36:f9:1a:33:bb:33:86:d0:74:90:6a:f0:60:9d:
13:20:84:cd:19:a9:54:5f:a9:41:ce:9d:80:cc:25:36:11:89:
23:6c:e5:9d:68:77:09:d6:f3:22:4a:76:36:56:f8:f2:c0:01:
2f:4f:ad:d2:d4:8d:c4:84:75:31:6c:80:56:53:b5:5b:4d:f7:
71:51:ee:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:34 2026 by rpki-client