Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
File: m1M3vRp8XunFenOwozxhIZzSqcs.mft (raw, json)
Hash identifier: 5PUEBsk7D1OCjt0glgD9XwYpqXEFGtXiSmNiUVVN4U4=
Subject key identifier: 02:39:12:3F:69:0D:B5:E3:A6:4C:CA:47:3E:F0:ED:29:5F:2A:BC:95
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Certificate issuer: /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial: 019CE4B564BD511052FDB78372DEFE751C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
Manifest number: 17F8
Signing time: Fri 13 Mar 2026 01:00:18 +0000
Manifest this update: Fri 13 Mar 2026 01:00:18 +0000
Manifest next update: Sat 14 Mar 2026 01:00:18 +0000
Files and hashes: 1: cjkYRf3Yh9WpwKdD5YYzfaFNvWw.roa (hash: 3gq9vL58U08Go4S/2DXWUX5EoB3kYBslnaNgZp37wkE=)
2: m1M3vRp8XunFenOwozxhIZzSqcs.crl (hash: 5TQiKFDoN7aSKr1W0zByNNJIdfojccor+SF8QWg2T0M=)
3: msBIl7hzmZuQkbrJ6sui74p1Pgg.roa (hash: 1/8Tc8pewIiwrYAG9YY8GUqoXDl/4u6a8D5S98uRMyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:64:bd:51:10:52:fd:b7:83:72:de:fe:75:1c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Validity
Not Before: Mar 13 01:00:18 2026 GMT
Not After : Mar 14 01:00:18 2026 GMT
Subject: CN=0239123f690db5e3a64cca473ef0ed295f2abc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5e:77:92:5d:4a:55:51:4e:dd:b3:39:2e:74:
77:dd:93:a4:8d:80:c8:47:9f:c2:7e:3a:85:6d:9d:
06:e7:6e:c8:e4:f6:30:c7:2c:9f:dc:fd:43:bd:29:
8a:74:64:09:c8:53:7f:85:7a:fa:85:d8:51:1d:45:
38:20:bb:73:ba:4d:00:ba:77:b6:07:2c:e3:77:14:
f0:e0:73:13:20:e6:1c:4f:e2:bf:b2:f4:9f:1d:cc:
96:52:f4:e9:e8:d2:ec:c2:f9:b9:0d:46:2f:54:65:
1e:7e:ef:a0:d3:49:af:9c:0f:32:6b:5a:72:ac:56:
5c:9b:3a:8e:47:a2:b7:03:2c:45:08:4f:e9:d1:7a:
aa:a8:11:9c:a4:f2:24:3a:20:7d:f8:56:e0:d5:f0:
21:3a:25:00:bd:cc:4a:b9:92:e7:b6:50:60:c7:f7:
83:a4:cc:88:c7:5e:a1:56:98:b6:a8:c1:cc:5f:d7:
0e:bc:7b:8e:a5:29:b2:eb:1f:40:52:b7:d7:6c:54:
7f:15:d7:0f:39:fb:d9:98:9a:52:00:df:7a:6c:ef:
3d:0b:79:a3:7f:74:f1:0e:99:c7:02:e9:e9:98:b3:
8e:73:57:03:a0:37:48:e2:b1:20:3d:45:3f:5e:8a:
0c:7f:f3:1f:82:bb:c2:5e:e3:e5:db:1c:d5:d3:49:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:39:12:3F:69:0D:B5:E3:A6:4C:CA:47:3E:F0:ED:29:5F:2A:BC:95
X509v3 Authority Key Identifier:
keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:db:57:44:29:57:5e:e5:eb:ed:8a:53:08:d8:c6:d3:0b:86:
dd:ee:7e:25:95:1f:57:1b:91:fc:74:a2:0b:22:bf:b3:00:7b:
10:27:a4:77:22:39:a5:92:5d:ae:65:86:13:92:54:00:e8:92:
96:9b:8c:03:e0:73:76:24:df:df:d4:b7:b7:ac:b2:2c:07:71:
dc:64:08:4d:4f:bb:c5:62:09:b8:9d:4e:ce:ef:9a:93:60:d1:
23:55:65:a8:f2:b3:62:1b:74:c0:57:cf:de:8e:15:cd:f2:26:
36:f5:a2:0c:15:7a:37:f8:6c:82:10:51:a3:dc:15:97:35:df:
63:e6:99:ef:fb:c8:eb:0c:62:db:c5:b2:9b:12:13:b9:1b:b7:
c8:bd:e2:66:85:14:53:00:f0:e9:ac:f1:84:88:17:9a:4d:d5:
05:15:2d:6c:b0:48:da:34:b6:34:d5:a7:e1:ca:0f:c6:e5:bc:
6e:dc:21:e2:14:e4:e6:35:08:89:14:8f:70:ac:b8:c5:c6:85:
97:72:d3:10:dd:5b:aa:4d:21:b8:bf:9b:be:21:9b:07:1d:35:
64:84:0d:06:00:44:eb:b5:6d:db:dc:d8:b4:a8:46:2e:19:00:
e2:ec:eb:f5:7f:2e:91:36:af:e3:5c:22:ca:a6:3d:16:18:62:
f0:99:e3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:53:23 2026 by rpki-client