Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
File: m1M3vRp8XunFenOwozxhIZzSqcs.mft (raw, json)
Hash identifier: qSgwCEJ27onxwnwKAJdClB7FSVw6Em3/LIQNaHJdqs0=
Subject key identifier: A9:5D:5B:1E:E8:15:72:28:F0:5E:D8:58:55:5C:FB:B7:06:4A:31:E2
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Certificate issuer: /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial: 01A0BF8C2E962DC794795C15B903B71604D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
Manifest number: 19F7
Signing time: Sun 20 Sep 2026 16:00:30 +0000
Manifest this update: Sun 20 Sep 2026 16:00:30 +0000
Manifest next update: Mon 21 Sep 2026 16:00:30 +0000
Files and hashes: 1: cjkYRf3Yh9WpwKdD5YYzfaFNvWw.roa (hash: 3gq9vL58U08Go4S/2DXWUX5EoB3kYBslnaNgZp37wkE=)
2: m1M3vRp8XunFenOwozxhIZzSqcs.crl (hash: NmyIVZPcfG9Ytq9agnkOMDCdgJY0P1PPgROE2W3a9/U=)
3: msBIl7hzmZuQkbrJ6sui74p1Pgg.roa (hash: 1/8Tc8pewIiwrYAG9YY8GUqoXDl/4u6a8D5S98uRMyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8c:2e:96:2d:c7:94:79:5c:15:b9:03:b7:16:04:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Validity
Not Before: Sep 20 16:00:30 2026 GMT
Not After : Sep 21 16:00:30 2026 GMT
Subject: CN=a95d5b1ee8157228f05ed858555cfbb7064a31e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:31:1c:85:8b:b2:2c:ad:01:00:82:6d:87:
94:36:71:d8:be:16:97:da:7e:ff:1f:42:f0:e1:46:
58:d0:29:e1:0e:c7:ae:d2:33:8f:e0:ba:7e:be:f7:
2d:fc:01:2f:f0:f6:9c:7d:63:6c:5a:b7:ae:e1:5d:
4e:24:c3:64:38:ba:4c:16:25:5c:85:15:1d:b6:eb:
99:57:de:bd:3e:e8:92:69:3b:ca:58:af:73:11:ef:
35:6b:eb:c0:ee:89:f1:c5:9c:59:ed:97:36:1f:41:
90:b6:0f:f1:4c:f4:ca:cb:ac:29:c6:25:4d:33:b9:
6d:53:35:0e:d3:18:03:1d:9b:85:0c:d7:71:93:57:
14:75:08:a1:30:8a:38:6a:d9:7e:c6:9a:89:fe:90:
84:3c:e8:85:88:75:fa:ab:ed:07:8b:e0:f8:52:88:
37:18:24:de:2d:1e:95:a0:db:43:0b:43:f1:f3:04:
f5:6f:ec:10:c2:48:f9:7f:f5:53:05:80:11:66:86:
67:7a:4b:f1:d3:48:48:47:0f:0f:78:27:75:39:ea:
3f:aa:e1:3d:55:98:6b:6b:ee:a1:11:fc:c5:65:0a:
34:2f:9a:d0:9a:95:8e:20:ba:40:16:0b:17:20:7a:
b1:83:e8:7c:1f:e4:65:c0:80:57:e9:97:47:cf:ff:
d6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5D:5B:1E:E8:15:72:28:F0:5E:D8:58:55:5C:FB:B7:06:4A:31:E2
X509v3 Authority Key Identifier:
keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b4:b1:5b:26:49:51:6b:1a:c9:ae:d6:37:c0:7c:bb:5c:b1:
87:93:80:dd:6d:7c:d6:ce:9c:ee:9e:5e:db:08:c8:bb:35:c0:
5b:11:23:ac:60:d7:5c:85:af:6f:e7:44:97:ca:92:43:3c:45:
ec:30:b2:2d:0f:21:cd:8e:f9:2a:b8:c4:3f:97:38:c9:6d:38:
05:97:c0:8a:7c:77:ef:8a:68:7b:76:48:71:be:bd:d4:50:65:
69:d3:35:a2:2e:2d:89:3b:8b:7d:4e:1a:36:ea:43:7d:cb:38:
64:96:37:5f:fa:3b:bf:06:0a:33:4b:81:04:74:31:d2:3b:e7:
f7:8e:ed:d1:d0:57:49:6b:c4:19:05:3a:56:dc:a5:4e:b3:27:
b9:c8:90:6a:0e:f3:6b:f9:70:7a:0c:32:fe:8b:ac:97:b6:db:
50:9b:15:d1:29:6b:09:6c:e2:ce:a4:78:90:56:d1:39:39:6d:
8f:10:aa:07:d4:7a:6f:f8:b8:0c:0c:1a:0b:f3:a5:ed:04:82:
82:86:18:a3:4e:91:3e:47:f3:54:ff:59:53:ec:71:c7:f4:d5:
8e:c6:7c:ca:01:f1:74:9f:9c:64:61:61:95:4d:4e:a5:fa:86:
01:e9:0c:6e:3b:d9:e6:12:f5:6e:95:ab:bb:76:34:26:12:63:
7d:d5:13:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:54:18 2026 by rpki-client