Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: Id/6RmS8UU4u1WiL2JLJc0c1LEFrosq0Ht7eEmPp57Q=
Subject key identifier: B9:FB:4C:78:E3:BC:A1:5A:D5:73:98:4F:B2:DB:E1:A1:5F:57:EE:B3
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 019CAD2301795CD88C46E1D3863E996805E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 1182
Signing time: Mon 02 Mar 2026 06:01:18 +0000
Manifest this update: Mon 02 Mar 2026 06:01:18 +0000
Manifest next update: Tue 03 Mar 2026 06:01:18 +0000
Files and hashes: 1: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (hash: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg=)
2: JhHZEdKJAkP34-ikWpJJrLVsEs4.roa (hash: KnIixUB21MIMX8vhmGnPkdfsgJQVtWJkg4ouIc7Q8O8=)
3: L6kvFhmw2HRimiOHYbmI9LP_LC8.roa (hash: bz6jH/jd8xJJNx0vVfwgOgrPiMsJ1ZK1zrtVm+WmTlk=)
4: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: 0QTQ2vyYsWZmjFMrn7yclwOilH7hKMvN5BlZXg3jSRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:01:79:5c:d8:8c:46:e1:d3:86:3e:99:68:05:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Mar 2 06:01:18 2026 GMT
Not After : Mar 3 06:01:18 2026 GMT
Subject: CN=b9fb4c78e3bca15ad573984fb2dbe1a15f57eeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:2b:8a:50:6f:fc:6c:50:d2:33:41:c5:63:
eb:b6:8c:08:b4:3d:25:e5:7d:34:85:53:a0:bd:08:
ac:22:50:4f:92:43:c7:0e:78:c9:c4:b6:f9:e6:7e:
39:2d:b7:6a:69:dd:20:83:58:49:50:80:7c:5c:d4:
36:3c:d3:3d:5b:49:a4:9a:7a:43:5c:f1:b9:09:3c:
7d:d8:09:dd:20:1c:28:a6:04:30:18:5f:77:7b:b9:
2e:cc:b6:49:80:d8:dc:70:8e:50:b9:dd:06:ac:95:
64:55:7e:e2:9a:0a:8c:69:7a:e9:6f:47:20:50:68:
a9:b4:93:12:a7:58:13:31:dc:61:af:fc:79:61:3d:
df:09:33:a6:92:23:76:8e:89:cb:d9:30:eb:91:75:
3e:8f:2f:4b:3a:e7:c3:6f:69:ef:e5:5d:95:38:50:
d3:41:33:63:5b:e8:aa:1a:69:e3:bf:3a:85:8c:f5:
df:ca:36:bb:b4:03:c8:a5:19:cb:35:12:56:2c:83:
02:7f:f6:67:97:96:5a:c8:11:ef:55:23:c6:47:1f:
3d:ab:3e:da:6f:30:71:9e:53:b6:13:19:bf:bf:82:
c9:26:25:46:33:f6:15:3b:e7:97:e7:ca:ca:7a:a0:
b6:52:4a:e7:74:2a:26:98:3b:53:98:34:ed:c8:4c:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FB:4C:78:E3:BC:A1:5A:D5:73:98:4F:B2:DB:E1:A1:5F:57:EE:B3
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d1:f5:78:f4:02:38:1b:76:c1:59:91:44:78:c0:84:48:2a:
c4:b5:dc:83:6e:c2:91:63:8f:81:73:9f:ce:40:14:83:7e:b1:
01:99:7c:06:fc:85:66:cb:64:e2:d6:d5:b1:67:ee:69:3c:ca:
86:75:ce:d5:0d:cc:30:a2:a5:cd:04:ea:af:7d:b2:fb:1d:43:
bf:13:06:da:2e:5d:b3:7b:6f:97:82:ef:e5:a8:2b:30:db:ce:
15:65:0d:f1:df:6c:9d:c3:85:ce:ca:43:ca:e4:f1:52:cf:31:
44:8d:60:30:8f:e2:f0:2e:b2:81:f3:69:de:be:25:16:31:62:
ad:23:05:98:a9:d2:fe:aa:9c:75:b0:83:83:a7:2f:28:2b:de:
28:ba:03:84:e1:6e:ab:b7:ac:c9:0d:33:86:3d:6d:cd:a4:3f:
ed:10:3d:ca:4d:c6:2f:d8:67:d1:e5:01:16:90:73:8d:20:63:
66:4e:38:b6:f4:19:e7:af:c6:b1:47:24:b3:fc:ff:80:84:01:
ea:41:65:c5:09:9f:c0:cc:8a:7c:49:f4:35:d9:38:e4:b5:24:
84:bb:e2:58:4e:ce:6c:e4:30:9c:c9:c9:98:ed:db:42:69:87:
3f:ea:90:8a:0d:0a:fa:45:37:af:b5:d6:a9:9b:65:28:af:b3:
42:f6:11:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIwF5XNiMRuHThj6ZaAXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjMzZDRmM2FjMGE4ODc4NDBhMjg0Y2RjMWFiZWI3ZGQ2
NDJmMDEwHhcNMjYwMzAyMDYwMTE4WhcNMjYwMzAzMDYwMTE4WjAzMTEwLwYDVQQD
EyhiOWZiNGM3OGUzYmNhMTVhZDU3Mzk4NGZiMmRiZTFhMTVmNTdlZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQIrilBv/GxQ0jNBxWPrtowItD0l
5X00hVOgvQisIlBPkkPHDnjJxLb55n45Lbdqad0gg1hJUIB8XNQ2PNM9W0mkmnpD
XPG5CTx92AndIBwopgQwGF93e7kuzLZJgNjccI5Qud0GrJVkVX7imgqMaXrpb0cg
UGiptJMSp1gTMdxhr/x5YT3fCTOmkiN2jonL2TDrkXU+jy9LOufDb2nv5V2VOFDT
QTNjW+iqGmnjvzqFjPXfyja7tAPIpRnLNRJWLIMCf/Znl5ZayBHvVSPGRx89qz7a
bzBxnlO2Exm/v4LJJiVGM/YVO+eX58rKeqC2UkrndCommDtTmDTtyEyKWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn7THjjvKFa1XOYT7Lb4aFfV+6zMB8GA1UdIwQY
MBaAFJ/zPU86wKiHhAooTNwavrfdZC8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQt
MzA3MjUwM2Q4NjA3LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQtMzA3MjUwM2Q4NjA3
LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftH1ePQC
OBt2wVmRRHjAhEgqxLXcg27CkWOPgXOfzkAUg36xAZl8BvyFZstk4tbVsWfuaTzK
hnXO1Q3MMKKlzQTqr32y+x1DvxMG2i5ds3tvl4Lv5agrMNvOFWUN8d9sncOFzspD
yuTxUs8xRI1gMI/i8C6ygfNp3r4lFjFirSMFmKnS/qqcdbCDg6cvKCveKLoDhOFu
q7esyQ0zhj1tzaQ/7RA9yk3GL9hn0eUBFpBzjSBjZk44tvQZ56/GsUcks/z/gIQB
6kFlxQmfwMyKfEn0Ndk45LUkhLviWE7ObOQwnMnJmO3bQmmHP+qQig0K+kU3r7XW
qZtlKK+zQvYRIw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:24 2026 by rpki-client