Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: xjJeth0c56Js4R4RDuEBHcFdMwX358/smIIZVtf9D+k=
Subject key identifier: 52:5B:3D:28:D6:F8:64:C3:31:4A:31:8C:CA:F9:E9:9C:64:E2:84:29
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 01A1AB95006071639608513BAC3AC6A2AF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 1418
Signing time: Thu 05 Nov 2026 12:00:31 +0000
Manifest this update: Thu 05 Nov 2026 12:00:31 +0000
Manifest next update: Fri 06 Nov 2026 12:00:31 +0000
Files and hashes: 1: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (hash: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg=)
2: JhHZEdKJAkP34-ikWpJJrLVsEs4.roa (hash: KnIixUB21MIMX8vhmGnPkdfsgJQVtWJkg4ouIc7Q8O8=)
3: L6kvFhmw2HRimiOHYbmI9LP_LC8.roa (hash: bz6jH/jd8xJJNx0vVfwgOgrPiMsJ1ZK1zrtVm+WmTlk=)
4: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: zOPwa77hmxwbJUV5a8hgC8TcQdPssfMpb/cHGycqmsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:95:00:60:71:63:96:08:51:3b:ac:3a:c6:a2:af:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Nov 5 12:00:31 2026 GMT
Not After : Nov 6 12:00:31 2026 GMT
Subject: CN=525b3d28d6f864c3314a318ccaf9e99c64e28429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:fc:ed:6c:34:23:b6:f1:4a:cb:2b:a8:c5:
e1:21:90:04:af:2d:80:c4:a5:9e:b2:fc:1f:7a:87:
7e:f1:c6:c3:57:bc:59:a1:2c:25:12:28:dc:e8:7e:
4c:00:d2:6b:fa:08:46:6a:c5:aa:7b:3c:2a:1b:b3:
93:a9:b2:6e:74:fd:6c:32:bb:20:95:50:9e:cb:de:
4e:ec:58:46:85:42:09:4a:f6:49:a5:b2:f4:10:9c:
6c:e2:cf:aa:bf:4e:18:90:f1:8e:c5:a7:02:42:3e:
58:19:d7:c3:b6:e5:ab:9f:db:15:b6:5e:52:7d:53:
d5:7a:b8:03:86:e5:25:11:cd:09:74:7e:ee:51:1c:
e9:3f:1b:e8:ec:14:b9:60:d9:bc:d5:e2:a6:5b:a0:
f3:42:0e:5d:10:ef:4e:36:26:d6:59:78:f4:56:fb:
4c:7e:c4:89:98:a7:42:3c:7c:ca:70:32:31:a1:36:
45:e7:3a:9a:a8:f1:ff:9f:99:7c:0c:3c:06:06:3a:
e9:69:41:d9:12:8e:3f:5a:73:ba:c1:c1:3b:c4:66:
07:b8:56:cd:5d:e9:24:58:f1:72:28:88:a7:a4:96:
71:51:46:2f:84:a3:95:f5:33:8e:0c:62:33:13:4a:
80:60:79:54:7a:b8:e6:12:11:1c:48:67:dd:3c:d5:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5B:3D:28:D6:F8:64:C3:31:4A:31:8C:CA:F9:E9:9C:64:E2:84:29
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:eb:fe:a6:39:ff:8a:54:07:a4:58:80:9f:fa:91:c1:65:a6:
4e:fd:87:e4:66:01:8e:37:30:b3:a5:ac:42:3f:87:40:a8:4b:
e5:38:08:d4:b0:4c:5e:d7:0b:e6:82:df:db:32:b5:0a:51:17:
72:41:19:d2:96:c0:39:c3:b1:1d:89:72:c1:6b:58:08:7b:d3:
9a:24:52:ad:62:93:01:68:2f:cb:9d:62:82:73:69:80:1d:45:
09:ab:94:8b:a7:59:af:ba:5d:14:79:35:31:dd:08:e2:ad:4a:
65:74:4f:2f:51:2a:9f:bd:39:fb:10:59:7d:ff:9d:b3:5d:9a:
c1:3c:75:5e:0a:22:d2:1f:9a:4d:42:57:c0:b7:a5:f5:54:d6:
e6:fd:67:87:d8:25:e0:af:04:cd:a9:d3:fe:f3:0c:d9:05:49:
a7:e5:b6:a5:eb:d9:31:04:bb:bc:55:50:6d:0e:84:4f:80:6a:
3e:30:13:1a:66:32:c9:44:88:25:ff:c4:64:11:46:a0:bc:90:
7f:9f:b8:2f:9d:ac:da:3e:82:09:40:c9:cc:38:07:26:2f:09:
e6:89:e4:85:ac:0b:ae:31:98:77:bc:46:69:90:06:80:62:1d:
46:65:cb:35:31:a3:88:53:46:10:19:3d:3f:f6:c8:9a:f7:be:
89:5d:df:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:47:40 2026 by rpki-client