Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: aQUaGBn07w2IqcbVXRrBIYIghwmTEZ8fGYyntNP0AyM=
Subject key identifier: 8D:FB:46:CC:14:65:87:74:76:7E:51:C7:81:0C:DD:D7:34:F1:6F:60
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 01A0BE0C06CC2673EEB0C59624E13D5687D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 139D
Signing time: Sun 20 Sep 2026 09:00:54 +0000
Manifest this update: Sun 20 Sep 2026 09:00:54 +0000
Manifest next update: Mon 21 Sep 2026 09:00:54 +0000
Files and hashes: 1: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (hash: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg=)
2: JhHZEdKJAkP34-ikWpJJrLVsEs4.roa (hash: KnIixUB21MIMX8vhmGnPkdfsgJQVtWJkg4ouIc7Q8O8=)
3: L6kvFhmw2HRimiOHYbmI9LP_LC8.roa (hash: bz6jH/jd8xJJNx0vVfwgOgrPiMsJ1ZK1zrtVm+WmTlk=)
4: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: e/877x1EgyjoaKu1oMpmEPzMvYnMf+no6aByEG6A8Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0c:06:cc:26:73:ee:b0:c5:96:24:e1:3d:56:87:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Sep 20 09:00:54 2026 GMT
Not After : Sep 21 09:00:54 2026 GMT
Subject: CN=8dfb46cc14658774767e51c7810cddd734f16f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a5:d3:75:d8:2e:de:b1:a8:70:ed:e8:b7:e3:
e4:2e:0c:27:f8:e8:45:4e:61:f6:1f:f7:54:56:a6:
ef:34:ae:b6:f1:b2:ca:b8:21:f5:0b:9b:13:dc:2c:
61:a2:05:e6:cb:54:7e:99:0a:6c:60:dc:91:2e:31:
ac:ca:f9:ae:c8:65:5e:c0:f9:8f:c8:94:7b:e4:fb:
b1:72:fc:02:b4:35:f9:50:81:5b:13:f3:ca:43:21:
cb:a5:47:79:e5:96:a5:43:5c:ee:43:cb:12:bc:f3:
19:67:50:2b:1b:c3:fd:40:c9:bd:bf:cf:87:c5:fc:
bd:59:cb:38:12:5c:f4:9b:fd:71:b0:7c:8c:b9:98:
63:3b:1c:b4:af:f1:b9:4f:e9:38:22:90:ed:01:ab:
60:df:fb:df:e0:92:6d:78:34:7b:44:b8:5f:61:35:
ce:33:65:8a:21:e4:55:7e:11:88:57:16:91:df:f4:
2e:d4:1e:52:01:6a:4c:af:16:d1:61:e6:e1:ba:ab:
7a:74:d6:e2:b5:89:88:1b:42:6e:47:e3:bb:d7:6a:
e6:ce:89:42:58:7a:b6:a9:44:5c:58:4e:0b:86:1f:
0d:5c:93:4c:9c:a6:c3:7e:55:07:10:55:60:4b:de:
e7:0a:fc:d8:4b:7b:db:c6:51:05:73:eb:aa:15:ca:
fd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FB:46:CC:14:65:87:74:76:7E:51:C7:81:0C:DD:D7:34:F1:6F:60
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:67:71:6e:14:71:9e:54:de:aa:74:93:5c:ad:c6:28:f9:49:
32:81:fe:dc:fc:a0:a4:f8:16:32:a3:43:77:4a:9b:5a:92:02:
c3:07:a2:af:70:5c:79:d8:0c:08:d0:0d:95:c9:70:d6:81:9c:
68:fc:11:7b:19:fd:40:5f:a9:9a:80:44:a1:bb:e0:79:48:12:
35:2a:c7:29:56:59:8d:4f:05:ba:2d:59:2c:51:aa:89:45:fb:
e8:cc:b4:6c:67:44:66:0b:92:11:f9:43:97:59:3f:8a:60:2f:
64:bf:7e:3d:4d:2e:86:17:9f:39:37:bf:66:fe:92:03:3d:6d:
a7:89:58:f3:8b:21:8f:49:e3:0a:00:cb:cb:90:5f:db:2b:28:
e8:c0:c3:39:ec:ef:35:d1:1c:04:38:c9:31:c1:b1:1c:1d:74:
38:92:ee:99:cf:3c:b0:fe:fb:b6:bd:1e:1c:92:27:94:27:91:
7d:60:d6:c1:77:71:6a:d0:86:48:ca:be:8c:0c:fe:1a:18:b1:
ae:ed:13:00:b8:d9:1e:1e:ed:49:dc:bb:85:56:6a:42:39:d0:
58:e7:59:85:ab:66:7d:c3:72:10:fe:a1:3e:54:a7:10:2f:64:
35:b7:61:af:70:4d:7f:88:e2:89:a3:eb:0c:69:a1:0e:a7:5e:
7f:ff:59:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+DAbMJnPusMWWJOE9VofQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjMzZDRmM2FjMGE4ODc4NDBhMjg0Y2RjMWFiZWI3ZGQ2
NDJmMDEwHhcNMjYwOTIwMDkwMDU0WhcNMjYwOTIxMDkwMDU0WjAzMTEwLwYDVQQD
Eyg4ZGZiNDZjYzE0NjU4Nzc0NzY3ZTUxYzc4MTBjZGRkNzM0ZjE2ZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aXTddgu3rGocO3ot+PkLgwn+OhF
TmH2H/dUVqbvNK628bLKuCH1C5sT3CxhogXmy1R+mQpsYNyRLjGsyvmuyGVewPmP
yJR75PuxcvwCtDX5UIFbE/PKQyHLpUd55ZalQ1zuQ8sSvPMZZ1ArG8P9QMm9v8+H
xfy9Wcs4Elz0m/1xsHyMuZhjOxy0r/G5T+k4IpDtAatg3/vf4JJteDR7RLhfYTXO
M2WKIeRVfhGIVxaR3/Qu1B5SAWpMrxbRYebhuqt6dNbitYmIG0JuR+O712rmzolC
WHq2qURcWE4Lhh8NXJNMnKbDflUHEFVgS97nCvzYS3vbxlEFc+uqFcr96wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI37RswUZYd0dn5Rx4EM3dc08W9gMB8GA1UdIwQY
MBaAFJ/zPU86wKiHhAooTNwavrfdZC8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQt
MzA3MjUwM2Q4NjA3LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQtMzA3MjUwM2Q4NjA3
LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmdxbhRx
nlTeqnSTXK3GKPlJMoH+3PygpPgWMqNDd0qbWpICwweir3BcedgMCNANlclw1oGc
aPwRexn9QF+pmoBEobvgeUgSNSrHKVZZjU8Fui1ZLFGqiUX76My0bGdEZguSEflD
l1k/imAvZL9+PU0uhhefOTe/Zv6SAz1tp4lY84shj0njCgDLy5Bf2yso6MDDOezv
NdEcBDjJMcGxHB10OJLumc88sP77tr0eHJInlCeRfWDWwXdxatCGSMq+jAz+Ghix
ru0TALjZHh7tSdy7hVZqQjnQWOdZhatmfcNyEP6hPlSnEC9kNbdhr3BNf4jiiaPr
DGmhDqdef/9Z/g==
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:19:19 2026 by rpki-client