Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: wlT+5IKhXs1gALMYyWv3BCNkWmTR0B/Ed4NXTsjSTuY=
Subject key identifier: 1B:F5:EF:A0:09:5F:CE:D0:9B:90:D3:08:2F:2A:63:E3:CD:C1:C3:4D
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 019FA9E27CFE30CA6BFEEE24D0C773389F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 130E
Signing time: Tue 28 Jul 2026 18:00:20 +0000
Manifest this update: Tue 28 Jul 2026 18:00:20 +0000
Manifest next update: Wed 29 Jul 2026 18:00:20 +0000
Files and hashes: 1: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (hash: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg=)
2: JhHZEdKJAkP34-ikWpJJrLVsEs4.roa (hash: KnIixUB21MIMX8vhmGnPkdfsgJQVtWJkg4ouIc7Q8O8=)
3: L6kvFhmw2HRimiOHYbmI9LP_LC8.roa (hash: bz6jH/jd8xJJNx0vVfwgOgrPiMsJ1ZK1zrtVm+WmTlk=)
4: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: rhWYauAQrnzmcQo32JXE2MZFINw1m2m/oDEhM1EdHmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:7c:fe:30:ca:6b:fe:ee:24:d0:c7:73:38:9f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Jul 28 18:00:20 2026 GMT
Not After : Jul 29 18:00:20 2026 GMT
Subject: CN=1bf5efa0095fced09b90d3082f2a63e3cdc1c34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:73:37:72:4e:3d:7b:d0:cf:55:2b:4b:84:
b9:7d:5b:5f:8b:57:23:fc:fb:6b:92:33:ab:99:18:
6b:9f:93:23:79:23:ab:bb:8b:10:12:36:87:15:bc:
05:4f:9d:0e:c0:49:b8:ce:22:33:ff:ec:7d:4f:b1:
d8:4b:85:76:6d:53:c6:b3:87:fd:8b:96:b2:0b:e6:
7d:2b:e1:ca:e7:10:5b:1d:32:5c:23:bf:33:0e:0b:
2e:5f:79:2e:e2:81:20:1d:3a:96:27:35:5d:94:8d:
87:35:d1:cb:c6:44:b9:aa:72:4f:a2:9a:17:b3:64:
0a:d0:07:4e:f7:66:17:33:fd:b9:ea:f4:32:93:fc:
5d:15:cd:d3:82:07:30:1e:37:6a:4c:31:44:3f:d9:
fe:46:dd:e4:88:2c:0f:6c:da:ae:23:50:a6:d2:38:
dc:29:16:18:76:58:e9:e1:eb:e0:47:36:6a:74:db:
cf:1f:bd:dc:a6:c4:72:eb:22:27:30:8e:5d:3e:9b:
e5:20:4c:31:66:d3:6f:01:b2:3d:2d:bf:69:47:44:
ac:23:1c:05:b7:c5:1c:bb:2f:c5:01:6b:22:15:17:
d7:58:d0:38:13:3b:1c:1e:bc:07:5b:06:50:02:e7:
a1:d0:13:1b:dd:5e:21:5c:e6:c3:54:98:0d:f6:0a:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F5:EF:A0:09:5F:CE:D0:9B:90:D3:08:2F:2A:63:E3:CD:C1:C3:4D
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:24:32:2a:2d:b4:a6:20:80:d5:92:54:97:c9:90:5d:cb:33:
88:60:9d:01:6b:98:e4:b4:92:6f:c3:9c:44:f7:db:56:09:95:
f8:6b:43:be:3b:2d:26:93:3c:93:b3:d8:04:a1:41:93:63:5c:
15:e4:dc:35:ae:8d:57:9b:16:0c:af:16:fa:b7:74:4d:4d:db:
3d:cd:25:51:76:52:88:05:48:cb:b8:21:4c:be:16:91:1e:43:
d2:1d:fb:47:89:92:69:35:82:af:42:cd:98:52:2d:a1:e5:de:
c7:c6:a6:18:ee:65:d8:17:eb:31:cb:28:82:56:81:14:0e:1f:
01:c1:2f:8a:a7:da:91:1d:24:44:31:31:fc:00:7d:95:04:c7:
5f:71:f0:fa:4a:3f:f8:48:b3:6c:94:e7:2d:fb:01:26:10:42:
b2:9e:a2:ef:84:db:b6:cd:4a:e5:2c:b6:e4:59:38:03:22:d2:
0f:50:8d:f9:91:61:f6:14:51:8f:77:ba:86:0a:06:c8:92:65:
9d:7e:20:54:96:2e:9a:56:94:f6:d7:6a:e0:b3:9d:4f:b4:eb:
4a:e5:b2:79:a1:2a:bc:80:9b:69:35:9f:73:42:d7:f6:45:80:
73:3b:5e:7e:d4:35:e6:81:d6:bb:92:d5:2e:53:15:fb:f7:01:
fd:01:16:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:57 2026 by rpki-client