Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier: 8Lh72c8K4DNGWI9hrMlh3p7tpNO5kQ4vw/6NAoxjF5U=
Subject key identifier: D3:F6:7D:52:48:97:83:17:A1:05:F6:7E:CC:70:57:6F:E2:23:3C:5B
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial: 019CAC46AB11E0286A18E523378FFBBA3537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number: 0605
Signing time: Mon 02 Mar 2026 02:00:38 +0000
Manifest this update: Mon 02 Mar 2026 02:00:38 +0000
Manifest next update: Tue 03 Mar 2026 02:00:38 +0000
Files and hashes: 1: BbSoHPZ6_5cJFXmdCfnvim5a3TI.roa (hash: McuildlUAIggMuk9JmdtRzn1hMk29EnAK+dUtR/t2JI=)
2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: iKpsE+s6dob2w7kbA6ql2R9OyWFg/9+Ob8hIr1LPbUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ab:11:e0:28:6a:18:e5:23:37:8f:fb:ba:35:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Validity
Not Before: Mar 2 02:00:38 2026 GMT
Not After : Mar 3 02:00:38 2026 GMT
Subject: CN=d3f67d5248978317a105f67ecc70576fe2233c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:78:c9:15:ef:51:cc:63:0f:3d:d9:0c:a0:
d9:42:ab:7e:42:28:ec:cf:b9:9a:3c:98:7b:a8:9b:
a4:28:3e:62:a9:5c:ed:70:45:5d:b0:4b:21:1f:54:
f9:c1:4e:49:b3:1d:ad:65:e5:1d:19:b7:7d:dc:e6:
9b:97:39:78:38:3f:04:f3:5f:74:69:9b:f6:b9:02:
3c:35:0d:89:c0:f3:98:38:32:b8:76:a5:84:e5:86:
5b:b2:9e:e7:5a:1a:2f:81:f8:be:73:e2:51:4e:be:
2d:81:f9:00:b2:19:9e:80:74:14:20:bc:28:69:4d:
b6:76:48:7b:73:d8:9c:92:5d:11:a3:e6:c8:a3:f0:
75:0e:79:1f:aa:1c:ce:c0:34:28:01:5a:a0:28:7c:
73:fa:38:26:bb:ed:5b:fa:99:a7:43:90:07:e7:11:
aa:7e:e0:be:ea:34:f6:07:c7:ba:05:8c:03:03:d4:
fe:2b:e4:98:6e:9d:27:fc:1b:c7:3d:0c:d9:a5:01:
3e:95:97:81:71:ae:85:51:3a:9a:f2:27:83:7c:fa:
56:72:eb:14:ee:68:9e:d9:dd:b3:e5:07:bb:1f:90:
41:3b:b9:89:c4:51:64:f0:0b:1a:c5:ad:a3:b3:21:
49:8d:7d:fe:5e:63:df:26:4b:cd:da:1d:e5:dc:ed:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F6:7D:52:48:97:83:17:A1:05:F6:7E:CC:70:57:6F:E2:23:3C:5B
X509v3 Authority Key Identifier:
keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:29:5f:8f:8c:9b:bc:9c:4d:82:36:ce:5a:01:bd:46:b2:90:
08:8a:b5:57:c5:eb:47:f4:02:aa:36:32:46:b4:ba:76:39:98:
18:b5:4b:13:bb:13:b5:bb:d8:0c:ed:72:76:b8:c7:f4:b7:88:
3f:20:f9:d7:5b:bc:d3:e8:54:68:12:34:bf:90:67:f4:b6:ac:
7a:7b:94:84:c2:77:5c:01:7c:e9:70:72:37:32:b5:81:9c:30:
9c:e0:d7:d7:be:95:38:52:62:0e:ac:63:81:a7:e3:68:f2:df:
40:13:23:09:6e:00:f5:c7:d0:33:da:9b:05:91:ea:46:04:90:
17:3f:b9:e8:74:68:ad:9b:74:34:e5:de:4f:bd:cf:ed:39:0e:
11:78:57:ce:1e:50:97:52:f0:86:ff:f4:9b:1c:92:4e:df:e9:
f9:66:51:e5:d9:e7:d5:d9:d6:14:ad:c0:1e:3e:2d:df:48:21:
e2:6d:4f:4a:1e:73:15:6b:fa:9c:a8:99:ee:d8:10:c6:68:4b:
0e:5c:8a:44:e5:36:2f:81:c5:97:9b:f3:06:06:6c:51:04:a4:
9b:33:7f:26:18:68:ff:82:8e:67:2d:1a:bf:f4:08:c3:d1:49:
2a:90:0d:d9:fe:aa:74:61:a3:d3:53:7a:52:83:0b:b8:06:48:
5a:3c:83:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:49 2026 by rpki-client