Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
File: m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json)
Hash identifier: aN/YV3Xmr/bmea/2HxmNcUoPyxU5afSz3CnsAa6bPfo=
Subject key identifier: D5:89:E9:8D:9D:2B:ED:D0:31:18:97:FD:EE:3A:73:17:80:14:07:54
Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Certificate serial: 019D2AA97521964A5374B63B41C998D43C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
Manifest number: 162F
Signing time: Thu 26 Mar 2026 15:00:41 +0000
Manifest this update: Thu 26 Mar 2026 15:00:41 +0000
Manifest next update: Fri 27 Mar 2026 15:00:41 +0000
Files and hashes: 1: Fv879_Am10jrA5ouJAPoLdH70T0.roa (hash: KPAB1vwqjlRwv1SDULu1bkWVJKlKimcArRb9moMnmKg=)
2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: GF+8Pp4G1kfemYw8pxsPtp3Cnr+mdhmOROf+zAvKPxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:75:21:96:4a:53:74:b6:3b:41:c9:98:d4:3c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Validity
Not Before: Mar 26 15:00:41 2026 GMT
Not After : Mar 27 15:00:41 2026 GMT
Subject: CN=d589e98d9d2bedd0311897fdee3a731780140754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:00:fa:6f:0f:bc:20:e3:9f:f5:bd:19:7d:
c1:91:f5:71:71:12:e2:de:0c:ad:f5:17:f3:10:2a:
bc:c0:c1:fa:29:62:bc:8c:cd:8e:cd:17:99:53:b2:
62:20:6a:ce:10:23:d4:16:1a:67:8b:7b:b0:65:2a:
71:de:61:9d:ca:6c:3e:da:0d:00:c5:78:7d:6a:4e:
de:6d:8c:6d:68:2f:92:23:b2:c8:34:dd:af:ef:26:
bb:f9:d8:2f:c2:c1:e5:84:d6:47:f5:37:af:8d:60:
ae:76:91:fe:4a:9c:e8:06:c8:6f:09:ac:27:c6:8a:
84:8f:f9:5e:1d:fb:8d:38:17:05:c5:c9:5c:ab:6e:
72:98:64:76:bd:9a:c4:96:99:d6:64:6f:1e:0d:15:
b6:f1:9a:46:26:5f:1f:3a:21:42:a0:59:5c:0b:d7:
ed:6a:e2:c0:42:91:0f:0f:e1:14:c9:b0:d9:46:ec:
09:58:01:ff:e3:03:8d:71:f3:5d:d7:0f:fe:ed:87:
8f:e6:4b:2f:96:34:ad:d6:f4:92:1b:86:8f:78:56:
0e:da:a0:c3:cb:b3:f7:2b:4f:69:2f:fd:e8:d2:15:
b8:13:65:72:9c:0c:52:92:09:78:68:c9:c5:4f:eb:
42:29:cd:7d:de:21:57:34:84:64:a0:65:2f:3a:5a:
c9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:89:E9:8D:9D:2B:ED:D0:31:18:97:FD:EE:3A:73:17:80:14:07:54
X509v3 Authority Key Identifier:
keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:74:10:7d:32:5e:be:d6:4c:4c:2d:65:17:d3:9d:da:cc:77:
ef:45:c1:11:97:73:a8:7e:f9:33:e9:47:0c:0f:6e:0e:0e:3f:
89:31:37:4d:3c:b0:0a:2b:26:16:18:ab:40:ac:30:a7:be:d3:
64:06:9d:5b:3d:71:5d:45:5d:11:ae:61:61:6d:b7:1d:ab:bd:
52:03:35:d8:a2:64:26:83:5d:c2:fa:3d:84:c0:73:28:cc:bb:
1d:60:b8:27:4e:d3:ed:57:dd:5f:aa:43:89:ad:77:ff:6f:dd:
c4:8b:10:65:e1:3d:90:d9:8d:97:a2:16:8a:9d:81:87:99:ca:
ad:d4:ff:5d:e7:2e:ca:8b:d6:5d:2d:44:7b:d7:65:b0:d3:21:
31:be:40:a8:2f:0a:a4:ea:ca:3a:f1:56:27:6a:f9:d0:ef:dc:
3c:64:00:07:b2:33:e7:2d:14:35:af:84:4e:29:bf:bd:07:dd:
06:fa:41:63:fb:5c:38:5c:e9:51:9f:94:99:88:26:f5:fa:2b:
00:ce:5b:59:d1:92:d3:33:c4:f9:c0:49:b8:b3:c7:4b:25:fd:
da:0e:86:40:07:02:2a:a8:f8:39:b4:dc:44:7b:60:d0:5a:c7:
62:ba:d4:af:42:12:33:9a:ef:d7:08:8d:0a:75:c2:2a:2f:a6:
01:8b:57:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:28:22 2026 by rpki-client