Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
File: m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json)
Hash identifier: Wgeq+2AAeDMW9iKjBMMgRXfGt4xt4hGZycD4wRSTUQ4=
Subject key identifier: 33:3F:8A:A1:C0:86:0E:9B:9B:E9:19:6B:22:3E:8F:D5:DF:2D:54:52
Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Certificate serial: 019CAD22E41006CBD83F1D476ED23582D77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
Manifest number: 15EE
Signing time: Mon 02 Mar 2026 06:01:10 +0000
Manifest this update: Mon 02 Mar 2026 06:01:10 +0000
Manifest next update: Tue 03 Mar 2026 06:01:10 +0000
Files and hashes: 1: Fv879_Am10jrA5ouJAPoLdH70T0.roa (hash: KPAB1vwqjlRwv1SDULu1bkWVJKlKimcArRb9moMnmKg=)
2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: v/rJlgIl9G1Oug91gC1kTrVdfdmo/U/JAJAOnlo+liA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:e4:10:06:cb:d8:3f:1d:47:6e:d2:35:82:d7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Validity
Not Before: Mar 2 06:01:10 2026 GMT
Not After : Mar 3 06:01:10 2026 GMT
Subject: CN=333f8aa1c0860e9b9be9196b223e8fd5df2d5452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:53:cc:32:2c:40:88:26:b7:7e:d3:4d:85:e7:
02:ed:d5:1a:7e:8f:a5:cb:01:d1:4c:b8:32:53:fa:
47:1f:0e:f1:47:d5:62:eb:32:50:c4:1a:a1:5e:41:
2a:3a:2a:0a:fd:1b:84:e0:66:cd:42:ac:91:e7:32:
f4:bd:ef:18:aa:2d:6f:04:b8:44:e0:7a:ed:a1:fb:
6f:8f:4a:62:3b:2d:3e:52:fd:f6:c3:93:03:c5:8d:
d2:01:dc:74:44:ba:b5:ab:a0:d5:5b:5a:bf:03:fb:
de:d9:67:ef:45:56:93:b0:03:b0:d8:4d:7c:d2:55:
4d:64:71:4b:f3:10:cb:ac:6d:e7:b4:05:99:d7:fb:
66:dd:ae:74:95:f8:99:2c:e2:a6:5e:9f:99:52:38:
65:6e:c5:5e:f8:7a:89:6f:bd:70:3e:b0:da:e3:ac:
41:47:8e:8e:67:06:59:02:60:e0:21:5a:f7:42:fb:
e6:2e:6b:03:8c:af:a3:6b:85:e0:92:1c:99:53:a3:
62:16:f1:2f:98:9d:1f:4d:f3:48:f7:b1:43:8b:92:
a4:77:4e:3e:60:8a:6c:d9:11:a1:01:f2:5b:d7:eb:
34:a8:f9:90:40:57:63:e8:be:a0:a0:f7:4f:0a:a8:
2d:cd:59:81:9d:0d:9c:77:48:35:37:6b:dd:fa:f2:
2c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3F:8A:A1:C0:86:0E:9B:9B:E9:19:6B:22:3E:8F:D5:DF:2D:54:52
X509v3 Authority Key Identifier:
keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e7:19:d4:d2:a7:07:be:61:db:a2:f1:6c:04:ef:38:1d:4c:
05:04:80:20:42:35:6d:18:29:63:ed:16:79:ff:c9:88:72:9d:
7b:f9:21:d7:b6:7d:d0:a8:4b:aa:73:6c:08:db:b9:fa:04:44:
c4:b9:0e:b9:79:09:93:5a:7d:c6:1f:58:23:c7:e3:aa:a7:a0:
a2:93:43:f8:0f:24:a7:bf:61:fc:45:23:fe:18:a0:f9:d6:92:
7d:a9:5a:41:1d:49:c0:80:bf:29:0e:92:ce:48:60:65:73:87:
6f:c8:a7:e5:d8:e7:0f:1f:ca:09:fb:1e:25:4c:e2:69:a3:18:
38:ca:93:c9:bf:4c:58:06:d6:23:7d:9a:fe:be:1d:14:50:b1:
65:d1:0d:65:c9:c1:e9:ad:10:b0:23:c9:80:3e:e8:3b:ea:22:
3a:95:02:d2:20:c6:78:0c:d2:d4:80:90:ea:3f:f0:bb:d5:25:
7a:a1:af:ce:ac:b7:3f:aa:b0:6f:ce:45:c3:08:b8:57:39:93:
47:ad:a2:fc:e2:2a:0c:ac:dc:5d:1a:93:d0:62:56:4f:77:59:
b4:55:75:3c:41:af:5b:66:87:3d:e5:34:82:ac:ff:3c:c9:97:
e3:b2:4a:c0:a5:22:4a:b8:dd:68:3e:f3:12:c6:e3:a6:6f:18:
a8:41:20:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:33:29 2026 by rpki-client