Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
File: m1M3vRp8XunFenOwozxhIZzSqcs.mft (raw, json)
Hash identifier: YE6drneIsoKOjxgwRLgly13n/wnYfNYWvDiwTAyq3R0=
Subject key identifier: 00:12:02:20:0C:1E:D1:60:B0:AE:1A:85:7F:C2:16:5A:F1:DA:6D:E4
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Certificate issuer: /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial: 01A17CCEFDFA2433FBF14724ECBF34767EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
Manifest number: 1A59
Signing time: Tue 27 Oct 2026 10:01:42 +0000
Manifest this update: Tue 27 Oct 2026 10:01:42 +0000
Manifest next update: Wed 28 Oct 2026 10:01:42 +0000
Files and hashes: 1: cjkYRf3Yh9WpwKdD5YYzfaFNvWw.roa (hash: 3gq9vL58U08Go4S/2DXWUX5EoB3kYBslnaNgZp37wkE=)
2: m1M3vRp8XunFenOwozxhIZzSqcs.crl (hash: XL2IhqQJaT/NlkWyaRj92aTvV33aJH2QB00uFE3efrs=)
3: msBIl7hzmZuQkbrJ6sui74p1Pgg.roa (hash: 1/8Tc8pewIiwrYAG9YY8GUqoXDl/4u6a8D5S98uRMyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:fd:fa:24:33:fb:f1:47:24:ec:bf:34:76:7e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Validity
Not Before: Oct 27 10:01:42 2026 GMT
Not After : Oct 28 10:01:42 2026 GMT
Subject: CN=001202200c1ed160b0ae1a857fc2165af1da6de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:d7:09:43:41:c7:38:15:fa:f3:f5:9c:85:
a4:b0:50:0e:88:c1:05:25:6c:da:b8:12:11:5c:ee:
ec:ee:31:ff:33:71:b0:88:91:04:30:49:a2:37:2d:
01:e4:ae:79:d3:38:3b:ca:ed:50:49:2a:78:da:c2:
6f:81:a5:a8:5a:38:76:85:2e:78:d1:77:27:e7:00:
ae:b8:4e:96:80:73:e6:05:0c:cf:93:84:ef:61:95:
01:49:ca:a8:70:ae:b3:49:27:6f:91:7e:67:4d:17:
d4:8d:83:83:8d:7d:75:58:4e:c9:6a:58:28:4c:45:
ea:60:b3:ef:89:24:53:d7:a6:b5:c0:06:2b:48:a5:
b7:b7:2d:30:8a:3c:5f:78:59:48:c3:1e:bd:2f:2b:
89:39:e0:7c:40:95:14:02:64:38:ce:b8:78:5c:b2:
ba:42:94:37:3f:89:f1:2d:3c:22:53:0e:d0:f2:20:
8a:ad:24:ae:21:12:d7:ea:97:3e:2e:31:cb:a5:b6:
27:a2:23:ca:7b:46:3b:fa:9d:3b:dc:4c:4e:47:c6:
08:46:3a:69:3b:39:63:4d:d7:d3:05:66:ac:c0:36:
e5:72:44:83:a1:ad:13:a4:fb:ae:3d:e8:3b:35:4a:
07:4e:2c:31:6f:0b:dd:83:27:8c:25:1b:fe:f7:36:
f1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:12:02:20:0C:1E:D1:60:B0:AE:1A:85:7F:C2:16:5A:F1:DA:6D:E4
X509v3 Authority Key Identifier:
keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:99:e7:37:31:50:aa:97:22:50:2c:83:c5:a8:95:26:25:47:
90:ef:3e:f7:51:20:f5:7f:8e:a0:0b:f8:c5:78:52:5f:26:d6:
89:66:0c:fc:43:8a:02:d1:c0:e8:a4:5d:bb:47:71:00:d7:aa:
c6:9d:0a:a2:94:09:a4:95:80:61:6b:b6:2d:ae:51:c2:f2:8d:
c1:57:64:25:15:f7:4a:69:f2:3e:34:67:80:fb:b3:15:6f:74:
fa:1d:25:83:1b:e3:92:29:c5:8c:f1:4a:16:e3:f9:22:db:0a:
74:7e:c9:98:c7:40:17:d8:21:0a:f6:40:b7:4b:33:60:32:aa:
25:14:f0:74:2a:89:b0:59:f3:49:67:84:3e:c5:54:3d:af:ac:
5c:e3:2d:66:95:b9:dd:6c:f8:92:79:4d:3d:1e:ca:d0:49:e7:
94:98:6b:ae:6a:dc:a3:48:76:09:cb:1f:65:e9:80:42:23:28:
30:b3:d8:74:50:ec:b1:fd:44:94:3d:99:8f:cd:ec:18:f9:0b:
6d:7f:36:e9:a9:28:34:9b:c5:7b:27:bb:90:33:2e:d3:f7:3e:
3e:7b:61:9d:0f:91:c6:1b:da:c2:f8:3d:da:45:03:da:6c:5f:
63:8b:92:a4:f1:d3:f2:0b:ca:fc:d6:55:ce:d0:d9:f0:21:51:
9b:79:c9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:34:03 2026 by rpki-client