Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json)
Hash identifier: D8aaCK3IatKbrLdMFj8odmeVCD5jH3/UBhP+PVZU9oc=
Subject key identifier: 64:8C:1C:90:99:07:85:E1:D0:82:D3:57:18:41:42:07:4D:1D:49:C5
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 019CAB343D428BA03CD62FBD767C64C0E702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
Manifest number: 0F1A
Signing time: Sun 01 Mar 2026 21:00:53 +0000
Manifest this update: Sun 01 Mar 2026 21:00:53 +0000
Manifest next update: Mon 02 Mar 2026 21:00:53 +0000
Files and hashes: 1: Qqa4Xw7uDETbeUhxEJYV1RcGxGI.roa (hash: jln1MbdeKaOyBgT7+wfLZLWLANQbRohXKREO1JAvQQU=)
2: j6yoIF9AWUp9UFDKXH65rXLEiss.roa (hash: YAXw+V8+kO2QpRAGh9PLZOBVimIgU4loSZgv6+jbYAg=)
3: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: Z/f8nURScibd89YJYin3pDxYgxeVNVIXAdtm/RdEycQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3d:42:8b:a0:3c:d6:2f:bd:76:7c:64:c0:e7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Mar 1 21:00:53 2026 GMT
Not After : Mar 2 21:00:53 2026 GMT
Subject: CN=648c1c90990785e1d082d357184142074d1d49c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:64:4d:fd:0c:7b:dc:33:2c:7e:34:e2:bd:
35:6b:4d:dd:3f:f7:11:60:27:c3:71:87:f4:63:eb:
f0:f5:4a:b4:90:cc:b9:47:d0:6a:37:65:b2:94:5b:
34:5d:1a:81:77:4e:c9:5f:73:5b:81:1a:bd:a6:1c:
4a:62:f7:c0:6d:00:47:39:c2:44:36:9e:55:5f:78:
96:c2:84:df:54:23:2d:38:44:42:3f:8d:3d:1f:42:
e0:3c:14:90:92:29:13:0c:3a:02:01:0a:99:b4:47:
36:00:8b:a5:b0:08:eb:ff:21:e9:46:58:6f:6a:94:
b0:4f:a5:8d:ad:86:32:68:c2:d8:7a:0d:e1:8a:2a:
4c:fa:58:ef:5d:50:e3:28:a2:28:36:bf:71:78:28:
14:a0:00:a6:24:19:4a:17:07:31:81:b2:5b:e9:87:
35:22:5f:7e:88:ba:51:9a:10:5f:bb:8e:7c:1e:06:
49:bb:31:1f:5d:9f:7e:ad:63:39:14:d3:dc:3d:ef:
b8:cd:ae:e7:b9:44:6f:d5:78:47:a5:bb:3f:4c:cf:
b0:00:22:e6:fd:4f:3d:3e:90:c3:e9:4c:23:92:15:
70:93:98:92:6f:3b:9d:f4:d7:8e:2a:2c:d7:65:25:
a6:db:e2:2e:a2:8c:6f:4c:e4:bd:0d:56:38:74:be:
39:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8C:1C:90:99:07:85:E1:D0:82:D3:57:18:41:42:07:4D:1D:49:C5
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fb:31:3c:e1:19:c1:a4:c0:8f:a8:c3:54:b7:45:02:da:77:
16:1b:99:8c:6b:55:ae:da:ef:c2:39:e6:3e:b0:8d:7a:67:c8:
03:e6:1a:60:23:0f:69:61:27:32:67:cc:12:f6:e6:14:6f:22:
90:3c:4b:c3:3a:7c:11:98:59:c6:8b:45:ae:ec:e4:64:a5:e5:
b1:f3:ec:33:b6:dc:45:17:e0:2f:03:b0:93:c5:6a:30:74:4c:
89:0c:2b:15:93:a2:5d:17:a2:14:59:e3:49:36:02:1c:d2:fc:
5b:7e:e6:6a:a2:f0:57:ec:b1:d8:7c:82:79:8e:1d:77:ab:cc:
f3:01:2a:5d:8b:b9:99:9a:8c:9f:95:91:5c:9d:dd:4e:5b:dc:
c0:4d:a6:cb:c4:cc:b5:13:5c:f3:09:84:35:57:8b:a5:37:bf:
01:e4:b8:bf:98:7a:25:79:05:16:af:bf:5c:03:a5:4e:b8:68:
1f:82:41:57:9e:23:3f:6d:20:be:c3:f8:9f:37:2b:5e:54:63:
45:c2:4d:79:5d:1c:04:c3:b9:ec:54:da:ee:a5:2b:39:b3:48:
d6:16:51:6b:d8:20:13:ee:a6:4e:8e:42:5c:e7:6b:86:34:9a:
b0:9a:39:8e:ac:c5:7a:cd:20:c7:51:dd:9b:1a:23:0c:69:49:
cb:a4:02:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:23 2026 by rpki-client