Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
File: m9_8i9uESXC44oubS-bywG39eYU.mft (raw, json)
Hash identifier: vNJC+z43E/yghIhfm6gZxdgGuKcpyrhhT0vYaCbIlk8=
Subject key identifier: 1D:D3:56:2B:60:50:1F:0B:E5:A5:27:88:DF:1E:09:07:3C:AC:D9:8B
Authority key identifier: 9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
Certificate issuer: /CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Certificate serial: 019CAAC70F71C12C38D0766015F8FC9933DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
Manifest number: 1621
Signing time: Sun 01 Mar 2026 19:01:38 +0000
Manifest this update: Sun 01 Mar 2026 19:01:38 +0000
Manifest next update: Mon 02 Mar 2026 19:01:38 +0000
Files and hashes: 1: EnLcppgM0qNoUcRBoYxYh6maukU.roa (hash: Hpf2B2TmnwiylcYCMr2VVCuhMpJu2BxnFwq/SGF1Ly4=)
2: m9_8i9uESXC44oubS-bywG39eYU.crl (hash: z/6RWeThG0UCnPzhjmwTsrHRSMoyfu8zaodq7qENcEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:0f:71:c1:2c:38:d0:76:60:15:f8:fc:99:33:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Validity
Not Before: Mar 1 19:01:38 2026 GMT
Not After : Mar 2 19:01:38 2026 GMT
Subject: CN=1dd3562b60501f0be5a52788df1e09073cacd98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:32:71:f4:7e:56:66:5c:f1:b1:ab:73:3e:
7a:37:a2:03:32:9f:6d:49:87:b6:e6:bd:01:43:a0:
4a:e5:71:07:50:ec:96:9e:99:fc:cd:ea:4a:54:b6:
5e:3a:cc:72:5c:c6:dd:78:37:4b:19:a6:2c:7e:b4:
09:50:b8:e1:04:20:8c:51:f5:51:de:28:51:fe:74:
9c:8c:95:a1:ad:0e:3c:8f:37:15:f1:73:84:50:e3:
14:99:64:62:8b:e1:fa:5b:51:91:45:d7:13:88:9c:
72:23:46:f2:24:6a:82:e2:e6:21:ad:fb:4d:83:35:
f9:44:a5:ee:d8:21:24:4c:e2:d3:0e:6e:3b:3d:18:
d9:51:8b:ef:f1:4c:64:6e:0e:2e:ee:2a:27:82:50:
17:54:a8:5e:30:41:4c:58:8d:06:6d:f9:d5:c8:fe:
05:62:d4:5b:87:ad:5e:ea:c9:18:e6:bc:fe:65:48:
0e:26:ad:7f:d4:7e:82:8a:c9:3a:86:67:9b:de:82:
ed:06:8e:d2:ec:31:60:b0:e5:12:59:3b:d6:1d:97:
ee:26:0f:35:b6:cc:88:b8:5e:4d:7b:16:fc:a3:a3:
96:36:e5:91:4c:76:65:f4:9e:b5:ed:ea:6b:03:07:
f2:67:c4:8b:a6:2a:fb:ad:ae:4e:a9:c3:98:5b:a1:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D3:56:2B:60:50:1F:0B:E5:A5:27:88:DF:1E:09:07:3C:AC:D9:8B
X509v3 Authority Key Identifier:
keyid:9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:55:4c:2b:77:3d:2a:15:77:a1:48:b8:8a:01:1d:3d:66:6d:
d2:54:65:7f:27:77:a5:b7:78:56:2b:62:0f:c2:7a:22:7e:85:
ac:08:3d:0d:eb:6c:e6:14:3b:c0:f7:7b:d7:5d:8f:51:8e:77:
0d:dc:d7:ee:e0:87:c3:43:34:dd:38:08:da:03:53:e6:a2:9c:
2b:e1:e7:56:50:c6:99:13:12:11:24:6d:90:ba:21:9f:ad:1f:
50:f1:4b:f8:5f:b5:9b:ba:a0:a6:52:97:1a:c5:fa:41:67:08:
fc:27:69:97:4e:0e:32:e9:2d:4c:9f:ac:8a:1c:36:eb:71:dc:
d8:a9:d0:94:31:f8:5f:c3:2c:8f:91:e3:4d:57:c1:8c:42:0c:
f7:bc:63:59:9c:92:87:44:a5:d1:e0:a5:2d:25:97:10:30:22:
e9:d6:c2:ef:0a:c3:71:9b:70:76:33:f3:1b:21:7b:f7:b0:72:
04:e5:bc:70:1b:57:d9:65:36:3e:bc:5c:8d:61:a5:9f:4a:07:
ab:a6:b8:3a:0f:5f:02:97:ea:f5:2b:11:da:9a:4f:c1:56:d6:
d8:47:5e:b7:7e:bb:93:20:6b:28:e1:8c:bc:c5:d4:84:8e:51:
80:a5:6f:9d:12:e4:b0:c6:75:b6:de:37:91:c8:e3:01:38:6f:
73:c7:13:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:36 2026 by rpki-client