Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
File: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft (raw, json)
Hash identifier: 0coAwp1pVTuuGI97TGyhExAhjrmidEIs5+Xl3pOUVIo=
Subject key identifier: 25:43:88:64:8F:65:FB:3C:6E:9F:47:D0:26:5C:E2:C0:DB:00:91:05
Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
Certificate issuer: /CN=9ff3396374cbf5d767125f02dcf0f97296323092
Certificate serial: 01A0F5D73E448EA83F62D1E74AB0F3188819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
Manifest number: 1A84
Signing time: Thu 01 Oct 2026 05:01:58 +0000
Manifest this update: Thu 01 Oct 2026 05:01:58 +0000
Manifest next update: Fri 02 Oct 2026 05:01:58 +0000
Files and hashes: 1: fCweoVy2pE-RI3KiJqu_U9vP31o.roa (hash: Izz1/Qkh1zmgocHLfNEMhHk5Leqh7AEpEEvpIvvT/eA=)
2: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl (hash: hE8ey8xmlWGGt/D03aVcYEsDXnMWY+Obg33IFhVkzr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:d7:3e:44:8e:a8:3f:62:d1:e7:4a:b0:f3:18:88:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092
Validity
Not Before: Oct 1 05:01:58 2026 GMT
Not After : Oct 2 05:01:58 2026 GMT
Subject: CN=254388648f65fb3c6e9f47d0265ce2c0db009105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:23:87:c9:8a:ab:b1:04:ae:24:b3:b1:b5:a0:
63:14:ae:2e:db:fe:bb:e2:31:17:d0:4c:59:6d:9a:
5f:8a:a5:3d:20:cc:88:21:a3:af:2d:71:11:21:f6:
d8:a0:9a:3a:f0:b6:89:4a:6e:c6:77:0e:78:b7:7c:
57:ee:03:5b:28:e3:10:e4:99:d5:ff:e5:fd:1b:2e:
42:26:7b:33:b4:ab:8f:2f:11:f1:05:b3:3f:be:5e:
5f:d2:cf:ba:d8:9a:b1:2b:30:49:e8:ed:f8:6e:db:
07:31:ed:26:7f:75:b8:82:e4:f1:e6:7d:fe:6b:b9:
c1:e6:7b:41:81:6d:ca:c3:d6:c5:cf:91:5f:41:aa:
57:73:05:eb:04:7e:97:50:fc:d4:f3:79:8d:7e:61:
e1:fb:dc:97:17:4a:d3:90:de:06:0e:ed:53:8c:5c:
16:ad:e0:ef:d4:e1:d2:e1:3d:22:77:6f:a4:53:24:
f1:37:e2:54:a1:e3:9b:c4:36:cf:df:2a:e1:73:48:
95:db:df:69:34:12:86:c3:d5:11:af:ab:19:b0:e1:
1d:aa:36:37:ad:14:d6:e9:15:4e:cd:92:a9:7c:3c:
ab:2f:a8:1a:c6:11:1e:98:68:39:86:db:35:d8:39:
d0:22:09:c7:fb:8c:a9:31:ce:73:9a:6b:77:13:05:
88:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:43:88:64:8F:65:FB:3C:6E:9F:47:D0:26:5C:E2:C0:DB:00:91:05
X509v3 Authority Key Identifier:
keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cc:67:5c:be:d2:f6:e6:e7:46:2c:d7:65:2d:4e:b0:2d:25:
40:41:dc:77:e4:a8:a8:8e:f6:59:34:69:3b:ee:d0:cf:8e:20:
33:3a:41:45:d2:d0:b3:2f:08:17:37:9f:3c:5a:de:08:f6:ca:
8a:61:79:0f:40:27:6b:ba:2c:01:0f:43:47:ef:ac:b3:41:73:
d1:27:5c:5d:5b:0c:49:88:c8:3b:18:80:41:fb:c4:67:2d:5c:
c6:1f:1a:fb:6d:e4:52:d0:85:0f:24:5c:d4:83:76:2b:de:6d:
c8:d1:fd:1b:26:46:a1:1f:7a:a3:fb:eb:c2:27:69:ca:ec:c8:
09:46:3f:59:c8:a4:18:a7:5d:60:5d:a3:8d:2f:d5:11:30:a4:
0a:63:ed:b9:e0:a9:bc:6c:9d:86:48:7f:b9:a4:50:e9:2d:8d:
33:9d:95:95:a0:3d:48:86:78:db:e7:44:16:66:cd:60:89:cb:
85:4c:f7:7c:f6:ae:79:9d:b8:28:08:90:4b:c1:96:1d:38:05:
4c:21:48:aa:08:e7:7f:8d:3d:12:a3:5c:1f:1c:f7:f0:cc:fa:
51:27:d1:bd:d0:13:b2:1c:48:b8:91:b7:1d:05:a9:32:41:50:
ed:9c:10:b8:de:06:de:90:c4:03:5d:71:2e:e9:2f:1f:89:68:
71:a0:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 16:59:27 2026 by rpki-client