Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: MR2/enoQZyMXyANd50eAVepIzkxYK4tblOr/ypWYDqM=
Subject key identifier: D8:D1:6D:AB:C6:D5:89:34:74:52:B3:98:86:BF:13:BB:B9:FF:89:75
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 019EC0365FA6FC34C3EE685CA1F30EF843EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 1295
Signing time: Sat 13 Jun 2026 09:00:49 +0000
Manifest this update: Sat 13 Jun 2026 09:00:49 +0000
Manifest next update: Sun 14 Jun 2026 09:00:49 +0000
Files and hashes: 1: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (hash: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg=)
2: JhHZEdKJAkP34-ikWpJJrLVsEs4.roa (hash: KnIixUB21MIMX8vhmGnPkdfsgJQVtWJkg4ouIc7Q8O8=)
3: L6kvFhmw2HRimiOHYbmI9LP_LC8.roa (hash: bz6jH/jd8xJJNx0vVfwgOgrPiMsJ1ZK1zrtVm+WmTlk=)
4: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: Z1gs8gFMnPh4/0kp6/RjF7I/o0vnpf55YfipCn+rNdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:5f:a6:fc:34:c3:ee:68:5c:a1:f3:0e:f8:43:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Jun 13 09:00:49 2026 GMT
Not After : Jun 14 09:00:49 2026 GMT
Subject: CN=d8d16dabc6d589347452b39886bf13bbb9ff8975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:26:3f:00:63:11:48:45:ed:a9:83:76:65:7a:
9e:5b:b4:f8:d6:3e:f7:44:6b:a9:aa:2a:8f:a9:a8:
7e:9f:a6:ab:8d:49:43:3c:29:a2:21:f2:da:f0:5b:
33:84:7f:ea:53:0c:5a:22:16:9f:f0:f8:3b:17:e4:
6c:df:7e:c4:91:cc:9d:47:c3:0a:e3:c2:40:95:5e:
a0:47:de:bc:bb:af:bd:b5:be:42:d4:98:1a:07:e7:
50:fa:8e:0b:04:5f:cc:22:3f:1c:7f:f2:e5:25:99:
c8:dd:ac:2f:e1:07:40:ee:75:89:b6:e5:d3:89:ab:
4e:59:e0:21:77:4a:97:f5:d1:48:5e:7a:b2:ee:8c:
5b:bf:d8:6a:59:48:1c:e7:ca:d5:b1:31:5a:52:eb:
46:e1:fb:e4:aa:c3:9a:ca:3a:c0:85:3c:9a:d6:31:
c1:cb:ac:c9:5b:86:09:e1:64:c2:c7:75:68:a9:5b:
9e:f8:cd:c9:a8:47:74:1b:05:6c:de:65:c0:6b:a4:
2d:19:db:9e:71:67:39:6a:de:66:4d:1e:79:22:60:
a4:59:34:5a:c3:2a:b9:ba:fb:1f:eb:9e:a5:4d:cc:
33:44:aa:52:d1:1b:10:0d:cc:7b:c0:ed:6d:1b:45:
86:25:c0:91:3e:10:13:c1:c3:73:73:43:a1:49:89:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D1:6D:AB:C6:D5:89:34:74:52:B3:98:86:BF:13:BB:B9:FF:89:75
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:42:6c:d8:03:2c:64:30:df:f3:d0:d4:4b:95:2d:6b:22:ba:
d8:9c:62:af:32:eb:ee:24:b7:5a:9b:1f:63:7d:5a:42:50:47:
21:b8:e8:d2:55:48:37:a6:84:d7:e3:48:a3:14:37:12:df:b3:
5d:fb:7f:d6:2a:d8:37:40:92:cf:81:61:94:18:06:0b:5e:d3:
dc:a0:7a:96:2d:67:4a:e9:01:70:a1:5c:d6:f4:04:7b:48:e9:
3d:f6:08:b1:48:6b:9f:f4:e6:b4:10:8c:18:d3:5a:4f:88:d3:
5b:d2:1d:5d:f1:60:d0:d0:a7:b5:25:b0:0a:7b:f0:7b:c2:48:
e8:b6:d8:13:76:9e:2b:95:1e:41:65:45:58:71:2c:75:c6:03:
e9:90:c4:45:a8:09:47:0a:68:71:0f:2a:be:ea:bf:89:f0:ba:
33:b4:e3:ad:38:ea:c2:8b:b0:0d:53:56:ef:da:9d:93:04:b4:
e0:62:e2:97:2f:de:5e:ed:57:13:ba:50:9c:68:d0:c0:12:6f:
a3:b0:bb:b9:16:03:35:84:b5:52:9f:6f:79:f4:0e:56:e8:77:
42:7e:e9:62:33:bd:f1:34:58:94:ef:3e:52:5c:a2:c3:a2:58:
48:c0:d6:ce:06:ac:b5:e8:e6:a7:16:90:e7:e0:7a:3c:ed:04:
e0:74:2b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:19:24 2026 by rpki-client