Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier: YYtj3RAsUi+skk/fhQbu+OeZDZCRLiQnPfrcE4XDWAI=
Subject key identifier: E2:8B:C7:06:61:CF:29:0F:78:FB:9C:C1:73:B1:20:73:C0:35:BD:19
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial: 019D3940B2BA7FA6D3B309A3B13BD780951A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number: 064E
Signing time: Sun 29 Mar 2026 11:00:34 +0000
Manifest this update: Sun 29 Mar 2026 11:00:34 +0000
Manifest next update: Mon 30 Mar 2026 11:00:34 +0000
Files and hashes: 1: BbSoHPZ6_5cJFXmdCfnvim5a3TI.roa (hash: McuildlUAIggMuk9JmdtRzn1hMk29EnAK+dUtR/t2JI=)
2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: t8qISz6Rr7o06NvQ6Q0Tj5I8GC3WqGTcX3xysyF4Mv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b2:ba:7f:a6:d3:b3:09:a3:b1:3b:d7:80:95:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Validity
Not Before: Mar 29 11:00:34 2026 GMT
Not After : Mar 30 11:00:34 2026 GMT
Subject: CN=e28bc70661cf290f78fb9cc173b12073c035bd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5e:e7:63:ed:9e:6a:ad:cf:02:f5:6d:13:95:
5d:21:ae:a7:36:6c:28:dc:7f:ad:0b:43:ea:ce:f8:
e0:dd:42:c6:3c:be:e0:1f:cd:c0:88:6d:44:55:a7:
f6:23:47:97:5f:2b:84:fc:a5:d8:02:69:c0:bf:1d:
ef:a3:e0:2a:d6:73:57:6b:fb:93:21:0b:ef:af:30:
ec:57:2c:0d:74:d8:37:a1:99:75:65:58:3e:1c:88:
8e:3d:af:08:43:e5:a5:fc:33:45:3e:b6:cf:14:2f:
50:29:6c:71:aa:29:70:90:c9:34:ff:a1:0f:a1:71:
56:7c:13:aa:c3:79:4c:fd:d3:91:4e:6c:f3:2c:ed:
e7:10:58:37:fa:1d:00:0e:18:5a:39:85:a1:97:e0:
70:6e:21:88:69:0a:47:ff:cb:c1:79:8b:7c:f3:e1:
f9:48:5a:5c:2d:fd:3e:c1:cc:27:db:18:06:5c:5e:
48:32:ca:96:74:bb:5a:0a:f3:c9:af:52:e4:88:9e:
c1:8e:8f:54:ca:fc:bb:8a:44:ad:f9:8e:dd:cd:fe:
66:15:ee:e7:85:b4:7f:dd:c8:ab:6b:83:a1:34:90:
02:5f:63:81:1a:56:e2:db:db:f6:3e:02:23:7d:0a:
fb:a7:a5:1b:aa:99:fe:6c:dc:79:57:c2:05:64:ce:
59:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8B:C7:06:61:CF:29:0F:78:FB:9C:C1:73:B1:20:73:C0:35:BD:19
X509v3 Authority Key Identifier:
keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8c:36:07:0d:ac:56:f2:a9:30:0b:1a:e9:7b:2e:85:88:b0:
5b:a7:fc:f8:61:19:22:f3:de:40:ee:cd:56:40:b4:aa:4e:7c:
4c:80:25:5d:45:a1:ec:7e:d9:c1:f3:dc:81:c8:03:82:d6:dd:
e1:7d:31:ba:b0:33:5e:82:98:fb:ce:88:c8:bf:98:5f:e4:a5:
e7:9d:a4:67:27:0e:7b:fd:94:6c:e7:b9:ec:8b:95:38:2c:a9:
04:1c:f1:7a:68:48:0d:60:c1:68:cd:78:0b:e7:3e:3f:eb:20:
fa:55:66:05:90:60:7e:bc:a1:4b:15:13:89:3e:17:c8:b5:6a:
c1:27:00:2e:e8:3d:d7:5d:9e:a1:4c:2e:5e:71:a5:c5:61:2f:
46:c6:c3:33:59:d5:96:ef:ce:f0:da:93:ee:79:32:5c:e4:6a:
f5:28:30:17:29:db:e5:cc:5f:ed:da:93:ad:17:e9:6d:8a:54:
9d:22:ae:7e:86:53:e1:0d:36:52:0f:4a:37:60:7f:81:2f:35:
ee:b6:1e:6a:b4:db:93:b3:8e:a4:7c:09:47:d7:aa:51:aa:c3:
08:62:49:c4:10:13:6b:7b:63:10:a7:12:d7:b2:3f:3e:a8:14:
5b:a6:96:9a:87:c4:66:fa:21:45:63:52:30:0a:5f:c0:97:d8:
c5:72:fd:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QLK6f6bTswmjsTvXgJUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZDk4ODZlMmRiMjcwOWRiMjIzNjRlMzM0ZDM5ZTJlZTQ4
OGQzNmUwHhcNMjYwMzI5MTEwMDM0WhcNMjYwMzMwMTEwMDM0WjAzMTEwLwYDVQQD
EyhlMjhiYzcwNjYxY2YyOTBmNzhmYjljYzE3M2IxMjA3M2MwMzViZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l7nY+2eaq3PAvVtE5VdIa6nNmwo
3H+tC0Pqzvjg3ULGPL7gH83AiG1EVaf2I0eXXyuE/KXYAmnAvx3vo+Aq1nNXa/uT
IQvvrzDsVywNdNg3oZl1ZVg+HIiOPa8IQ+Wl/DNFPrbPFC9QKWxxqilwkMk0/6EP
oXFWfBOqw3lM/dORTmzzLO3nEFg3+h0ADhhaOYWhl+BwbiGIaQpH/8vBeYt88+H5
SFpcLf0+wcwn2xgGXF5IMsqWdLtaCvPJr1LkiJ7Bjo9Uyvy7ikSt+Y7dzf5mFe7n
hbR/3cira4OhNJACX2OBGlbi29v2PgIjfQr7p6Ubqpn+bNx5V8IFZM5ZAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKLxwZhzykPePucwXOxIHPANb0ZMB8GA1UdIwQY
MBaAFJ/ZiG4tsnCdsiNk4zTTni7kiNNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEt
ZWJhMGNkNTdjMDIwLzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEtZWJhMGNkNTdjMDIw
LzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIw2Bw2s
VvKpMAsa6XsuhYiwW6f8+GEZIvPeQO7NVkC0qk58TIAlXUWh7H7ZwfPcgcgDgtbd
4X0xurAzXoKY+86IyL+YX+Sl552kZycOe/2UbOe57IuVOCypBBzxemhIDWDBaM14
C+c+P+sg+lVmBZBgfryhSxUTiT4XyLVqwScALug9112eoUwuXnGlxWEvRsbDM1nV
lu/O8NqT7nkyXORq9SgwFynb5cxf7dqTrRfpbYpUnSKufoZT4Q02Ug9KN2B/gS81
7rYearTbk7OOpHwJR9eqUarDCGJJxBATa3tjEKcS17I/PqgUW6aWmofEZvohRWNS
MApfwJfYxXL9Uw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:50 2026 by rpki-client