Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier: d/Grq0T9r6qoMJLzdmSwe2fKKUpZtg99J+0m15tTJK8=
Subject key identifier: 2B:C8:C5:04:4F:4F:75:CC:14:A8:6E:6D:52:17:42:05:7E:5F:3D:46
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 019CAD22FA6DD8F9490C28286EEF4C291306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number: 17AD
Signing time: Mon 02 Mar 2026 06:01:16 +0000
Manifest this update: Mon 02 Mar 2026 06:01:16 +0000
Manifest next update: Tue 03 Mar 2026 06:01:16 +0000
Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: w8P+llUZ2UARjXxhV1lzgLxZj8IscAkaUg87tb40oB0=)
2: oY8wzqxSZtFw6pVYs4NFV60daUg.roa (hash: DFgw9sxWQdsrNBj4RrkibFIZhSj9mHDN7Zn+MkePlLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:fa:6d:d8:f9:49:0c:28:28:6e:ef:4c:29:13:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: Mar 2 06:01:16 2026 GMT
Not After : Mar 3 06:01:16 2026 GMT
Subject: CN=2bc8c5044f4f75cc14a86e6d521742057e5f3d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:1f:ed:e0:4a:bf:e9:fe:b2:d8:2c:d3:69:
a1:b4:fb:19:7c:fa:a3:2c:a4:0a:94:04:4f:62:d2:
f3:ce:05:5c:e4:47:52:26:62:dd:f7:92:8e:6a:af:
03:1b:db:05:a2:67:cb:68:72:60:78:c1:8b:29:a9:
65:45:98:35:7b:9a:55:87:ca:4a:db:4d:d8:5b:4f:
c0:4b:c7:8d:82:70:83:7b:d9:63:2e:a9:8e:a9:95:
5c:29:0c:58:bf:2e:99:12:e2:e9:70:99:06:da:63:
c6:3a:d3:26:f4:2f:1f:91:c2:f5:6b:63:7d:0f:8b:
c6:51:da:9a:24:fd:23:4d:d8:13:18:51:0f:b1:22:
15:51:8f:2a:8e:93:ce:03:bd:52:de:0e:0f:1d:c0:
fb:68:f1:03:f4:21:27:bb:31:e1:f8:35:0b:2e:4b:
35:59:3a:91:74:16:83:ae:23:00:4a:08:32:52:de:
93:4f:14:64:22:89:68:43:7b:2a:d1:86:e4:01:9d:
f2:ee:f2:33:1a:17:95:1a:e3:07:7e:6d:34:33:35:
1e:6f:80:5e:cf:81:d5:65:db:6e:d1:0b:f7:b3:de:
48:03:fd:df:8f:83:5b:c1:f9:9e:00:8c:f2:a8:d9:
51:95:7b:42:c0:d5:b2:b6:4d:9c:70:2f:f5:df:97:
8f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C8:C5:04:4F:4F:75:CC:14:A8:6E:6D:52:17:42:05:7E:5F:3D:46
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7e:f1:92:6d:5b:a1:4d:10:9a:1f:4b:59:3e:20:19:d1:12:
04:21:87:9b:24:00:8f:93:2b:2b:33:da:1e:38:12:80:91:5c:
cf:bb:77:61:53:1a:42:82:69:bd:2a:28:72:ea:14:63:45:cc:
84:65:7e:75:3f:3e:08:ed:72:b9:70:e3:b4:fe:e7:5b:04:8f:
a6:e6:9d:43:0d:34:27:f8:4c:c5:16:5e:24:48:23:9a:b8:16:
cb:64:cf:bf:d3:b9:54:dd:71:4b:4b:eb:f2:f2:54:ee:fa:31:
e8:4e:40:c6:12:b3:fe:71:2b:d6:c0:a7:a8:74:85:a5:99:62:
8a:04:63:a7:08:a4:c2:38:63:56:c4:14:f5:d7:79:49:f3:30:
a8:0e:14:fc:4e:85:91:a6:0e:4c:e9:52:9c:5b:1c:75:cc:42:
fa:8b:54:3b:cc:44:50:19:ef:41:f4:11:ae:5c:67:60:0c:5a:
0e:43:cf:0c:29:ab:8e:88:aa:f8:7b:4d:5b:6b:d6:dc:b0:30:
c3:32:85:3b:74:5b:5c:ab:d8:29:2b:80:a5:0c:af:42:61:9e:
91:5e:ae:b3:47:8f:53:73:b9:05:ec:ce:59:a0:61:cd:30:78:
70:a9:e9:a8:ec:21:f6:8b:b5:c0:db:1f:6a:7d:c4:77:c4:90:
4f:8e:08:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:23 2026 by rpki-client