Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier: sn7mXfimQuGV0v+GKyTDhc+CtFmfVse8DnZzxSgRTiw=
Subject key identifier: F4:AD:90:33:9F:82:BB:C9:AC:D8:8C:12:B7:DC:3A:AF:09:01:1D:1C
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial: 019CAE350E969A988B20CE081828D19C01FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number: 0606
Signing time: Mon 02 Mar 2026 11:00:38 +0000
Manifest this update: Mon 02 Mar 2026 11:00:38 +0000
Manifest next update: Tue 03 Mar 2026 11:00:38 +0000
Files and hashes: 1: BbSoHPZ6_5cJFXmdCfnvim5a3TI.roa (hash: McuildlUAIggMuk9JmdtRzn1hMk29EnAK+dUtR/t2JI=)
2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: gnBJkO5uRD50zk1oZnQW04lDNBvketmfScRcbKW+cv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:0e:96:9a:98:8b:20:ce:08:18:28:d1:9c:01:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Validity
Not Before: Mar 2 11:00:38 2026 GMT
Not After : Mar 3 11:00:38 2026 GMT
Subject: CN=f4ad90339f82bbc9acd88c12b7dc3aaf09011d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:d4:16:2c:99:7a:5a:84:79:c6:e2:af:12:
aa:ff:bc:07:8b:b7:8e:3a:4a:95:4b:43:67:8e:c9:
0f:38:8d:f0:76:6d:9f:00:f4:6c:15:5c:7e:f8:c1:
5b:ee:18:b3:ec:23:81:af:39:2d:8f:cf:cc:6a:c9:
4f:2a:d9:fc:5a:e5:87:b8:57:a9:e8:48:d1:b3:47:
20:f5:4d:fc:5e:36:a9:ee:83:07:23:d1:c1:34:bd:
3d:cd:30:6b:45:27:18:2a:a9:7d:89:0c:fa:63:c6:
8c:b2:c0:4e:71:03:2b:06:2f:c8:78:06:fe:ec:78:
99:0b:1d:82:a1:65:c2:56:ed:21:9f:1b:d2:20:95:
48:4d:de:44:b8:5b:32:31:36:57:18:ca:f6:34:34:
08:eb:af:63:e7:25:90:5a:7c:bd:18:7c:7e:ab:4e:
c1:8d:63:4c:c4:10:f2:5c:4b:f0:1f:50:76:dc:b2:
a1:f5:cf:56:7e:b1:0a:a3:bc:d2:ce:47:f7:53:1d:
cc:a3:95:0e:2b:1e:69:98:bb:31:e6:70:2d:fa:05:
a5:74:7b:b3:77:83:3c:b9:86:14:c3:39:13:1d:88:
68:c6:42:67:46:00:fa:ec:89:b6:e2:73:01:55:eb:
06:ed:59:c5:91:1a:44:dd:3d:6a:b2:14:8a:32:01:
0d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AD:90:33:9F:82:BB:C9:AC:D8:8C:12:B7:DC:3A:AF:09:01:1D:1C
X509v3 Authority Key Identifier:
keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:29:1c:3f:5b:bf:d4:7f:eb:7b:fd:b3:8b:62:be:b1:03:b3:
e3:82:b3:54:7e:a6:2f:6a:8f:fa:5e:3f:29:12:ec:8e:4c:16:
a5:cf:66:08:79:9b:da:27:9f:5b:8f:36:0e:a5:1c:0f:50:ff:
e6:25:f2:19:c1:f1:e5:dd:77:34:8e:91:ee:74:1c:c8:ae:70:
13:c7:0e:51:9e:c0:59:cf:49:01:7a:be:9c:96:5a:eb:7a:5d:
c7:64:e7:ec:c4:48:aa:7f:4d:03:d4:94:6b:ab:ae:4e:86:02:
30:00:15:15:d7:b5:ac:24:f2:c4:fe:8d:4a:f1:2a:55:c0:a9:
3f:dc:c6:ba:70:45:5f:aa:5e:28:01:e1:f0:cf:b2:ee:0a:b6:
0a:74:80:3e:6e:51:32:5e:ac:be:f5:b3:e7:fa:51:1c:d9:2a:
b2:1c:71:ad:99:1c:71:ed:24:db:bd:a4:61:36:2b:32:3c:1f:
ff:a3:65:5d:fe:89:d2:39:78:d7:80:a5:1c:a3:06:de:c3:ce:
ff:25:05:6f:31:af:b4:4e:f8:60:c9:ca:8d:9d:08:0e:99:8f:
2d:37:55:e9:2e:14:b6:30:bd:21:db:e9:d4:6a:34:70:55:41:
e8:ce:b1:b1:6c:af:c9:53:81:6a:80:2a:b7:00:b8:9a:5b:b3:
0d:fd:ab:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:14:47 2026 by rpki-client