Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier: 3IETthjwJRJIQJkMMq92OSnVhOB1Lx0zzyPm2YC03aw=
Subject key identifier: D1:99:92:91:A2:07:20:DD:07:F1:9B:70:72:B1:4B:30:2D:0C:DA:4B
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial: 01A16156CB8D60ECADE45B14653E300AE7CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number: 0875
Signing time: Thu 22 Oct 2026 02:00:40 +0000
Manifest this update: Thu 22 Oct 2026 02:00:40 +0000
Manifest next update: Fri 23 Oct 2026 02:00:40 +0000
Files and hashes: 1: BbSoHPZ6_5cJFXmdCfnvim5a3TI.roa (hash: McuildlUAIggMuk9JmdtRzn1hMk29EnAK+dUtR/t2JI=)
2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: QVxizCO0yrkO/OvjGuRCQ+QZCK1toxIub4wqpPJwFPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:56:cb:8d:60:ec:ad:e4:5b:14:65:3e:30:0a:e7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Validity
Not Before: Oct 22 02:00:40 2026 GMT
Not After : Oct 23 02:00:40 2026 GMT
Subject: CN=d1999291a20720dd07f19b7072b14b302d0cda4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:1b:a1:4e:df:5e:b3:7d:b9:75:d4:d6:2b:
67:5f:64:cb:e6:aa:d0:20:44:47:c3:cd:40:e9:b3:
b7:f5:57:68:a1:19:7b:43:98:a0:bc:8c:35:37:6f:
bd:59:52:8f:d2:63:c7:c1:a3:bc:cb:5c:93:06:d5:
73:c2:70:30:19:1a:db:8c:54:b2:2d:7b:90:f9:e8:
65:ca:21:89:ce:99:72:7b:3a:94:9e:16:18:b3:8b:
d8:2f:06:e6:c0:b5:ff:a8:25:1f:09:e5:68:00:0d:
03:3c:4a:de:24:26:22:41:f3:49:9c:d6:b7:66:2d:
3d:d2:12:b3:9e:cb:ac:1b:a8:84:c9:72:2f:c6:ff:
27:de:10:0a:9c:3b:ff:70:21:64:aa:c3:97:ac:0e:
a3:d7:a4:43:bb:59:59:f1:57:67:c5:a6:fd:15:c0:
d4:28:01:bf:14:7b:a0:d4:25:49:6b:6d:12:f5:44:
30:e7:a2:39:7e:69:ec:5e:10:d5:b6:6e:18:7c:75:
a4:fc:c8:ea:e5:ff:d6:4c:02:1f:c0:26:40:02:88:
cb:df:59:d7:55:3c:88:fc:74:ef:c7:96:08:bf:0f:
11:f6:87:97:2a:8c:4c:5b:76:22:c7:51:b5:fc:24:
3e:ca:c0:40:6d:47:b8:58:dd:16:a9:92:a1:89:f4:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:99:92:91:A2:07:20:DD:07:F1:9B:70:72:B1:4B:30:2D:0C:DA:4B
X509v3 Authority Key Identifier:
keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:90:a5:fa:f4:e9:13:f1:97:21:31:d2:8c:17:fd:0d:aa:20:
5d:7d:54:56:f2:6f:2a:9a:b6:63:49:69:04:a2:61:42:fa:11:
29:3c:1e:a9:32:b8:a4:6a:a0:8c:fe:9e:9c:37:8a:f6:3d:4d:
6c:9e:ec:7c:68:54:19:a0:91:07:b7:fc:13:ca:37:7f:0f:9a:
72:55:be:42:31:33:17:1c:0e:d1:c1:4c:ef:3d:43:75:a3:4d:
01:6d:98:b9:45:c1:30:2c:5a:a1:3c:09:b6:95:83:53:49:02:
e6:45:24:a4:39:c0:eb:05:ea:06:0a:c5:8d:5b:c1:91:75:07:
06:eb:50:27:b1:0f:72:d5:41:18:a6:eb:a9:57:52:c7:6f:63:
3e:ae:07:e1:fe:82:5e:bf:10:44:9e:00:da:b2:b1:07:83:5b:
e2:4d:ef:a8:b0:15:5d:0f:85:4a:e6:20:ca:bd:30:e2:00:c1:
08:58:a9:e9:85:ef:7e:8d:e6:48:ef:53:4c:49:6e:b4:51:bc:
fc:26:15:7b:b9:4e:9f:d5:e3:86:89:9a:18:27:dd:15:5d:53:
7c:82:8d:a9:53:1b:a1:c0:16:01:fb:37:1b:09:87:21:80:31:
ce:52:23:b2:6f:4c:f3:f0:30:66:b9:fb:c7:5d:f5:fb:ae:fe:
3e:78:46:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 08:20:50 2026 by rpki-client