Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
File: m9upUpCphaaXdj0wq0L5w3hAeLI.mft (raw, json)
Hash identifier: RxfeHVs7McmnqdnGhSEeDBFcyQDolNGXYXoD7bOyNV4=
Subject key identifier: C8:95:1D:11:36:49:AD:4C:BD:BF:41:5E:05:2D:7A:EB:28:40:FF:3C
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial: 019D371C065560AB38968573CFD1B486A332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
Manifest number: 0F0A
Signing time: Sun 29 Mar 2026 01:01:16 +0000
Manifest this update: Sun 29 Mar 2026 01:01:16 +0000
Manifest next update: Mon 30 Mar 2026 01:01:16 +0000
Files and hashes: 1: BcEnhr3TM-NXG8Q4ay62cxztpy4.roa (hash: pqYAoj6DHioE/63Z2p/ewbVxl274tw4E0vVzLjsfmyg=)
2: DCrG4g3sJo2PisD_hc4NckgDZw8.roa (hash: FifxalB73pfyrHIphM4RguBQlmOIeI0ZS9qLf/+J8cI=)
3: m9upUpCphaaXdj0wq0L5w3hAeLI.crl (hash: JV0BboKQHRCtBe0mr30qK45JlWqKbZvTNfZ71Q+Gb4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1c:06:55:60:ab:38:96:85:73:cf:d1:b4:86:a3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
Validity
Not Before: Mar 29 01:01:16 2026 GMT
Not After : Mar 30 01:01:16 2026 GMT
Subject: CN=c8951d113649ad4cbdbf415e052d7aeb2840ff3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:de:e1:44:c0:31:b2:f4:41:43:4d:ee:e9:
03:31:97:9c:31:0e:32:95:e8:71:f5:0a:73:ec:46:
00:9f:9c:04:ff:72:b0:c0:cf:fa:2d:a7:eb:95:29:
b0:bd:ac:bd:32:18:f6:c1:b4:78:f7:46:82:4d:ae:
c6:9d:44:0e:2e:23:3d:e9:be:49:50:12:5a:f5:36:
9a:9b:d0:a0:a9:f8:5f:66:fa:57:91:03:b6:47:2b:
6c:75:f9:59:08:31:76:03:19:8b:22:10:dc:99:08:
1c:89:e6:c8:db:01:c4:00:4a:86:14:4a:06:03:3c:
3b:ff:e5:98:b1:ea:1a:72:ab:10:19:bc:5d:35:2b:
19:fe:b2:71:5b:17:f0:5b:d2:fe:23:96:a4:19:38:
27:3e:79:10:a7:b5:1d:fb:84:03:8a:44:54:d5:88:
d6:c4:f4:19:aa:73:e8:4b:2e:6c:1b:6a:f9:73:ec:
05:99:19:cc:c0:0b:9f:5e:91:c1:95:aa:8e:00:c4:
0c:ab:aa:50:13:22:cf:04:0a:a2:cf:cb:10:7c:8d:
65:ae:38:5b:21:5e:94:05:8a:3d:57:a5:15:08:35:
d7:8f:dd:d4:99:0a:65:2d:24:25:7b:ed:72:04:4d:
4d:32:67:bd:9b:34:e6:18:9e:eb:e4:c1:4c:be:98:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:95:1D:11:36:49:AD:4C:BD:BF:41:5E:05:2D:7A:EB:28:40:FF:3C
X509v3 Authority Key Identifier:
keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4f:df:21:ea:2a:78:63:22:3f:fd:ea:9a:1e:9b:2b:f3:5d:
29:9d:28:d1:10:46:10:aa:53:c0:37:90:3d:58:57:ea:d4:b7:
99:44:48:54:2a:20:27:44:3f:01:2b:66:2f:eb:f0:60:eb:b7:
b3:16:4a:62:6f:92:39:6b:33:20:4a:be:2d:cc:90:d6:2a:aa:
62:7d:e5:3e:c9:95:96:78:4b:5c:0f:78:80:ab:fa:5d:2b:da:
6f:89:0d:40:2b:ca:71:75:50:83:f5:12:e5:b0:91:62:3f:2b:
a8:1a:e8:7f:b0:9a:80:2c:89:89:2e:11:e4:9b:9b:01:eb:a3:
ee:fe:9b:f2:28:f1:91:43:66:b6:53:5a:7c:a6:d4:8d:43:3a:
c3:41:a4:31:fa:6c:ff:fc:56:a2:d3:37:36:58:07:34:71:2a:
84:cf:ca:3a:af:88:82:b1:fb:68:e0:67:a6:15:dc:e2:33:8b:
a2:7b:93:f4:87:0b:29:6e:68:25:07:c4:78:2e:88:17:98:43:
44:66:13:3f:ca:be:2d:fb:c0:32:97:4a:d2:19:e9:27:ee:51:
03:fc:84:ac:8c:e1:b7:06:0c:8e:f5:62:38:50:f3:6a:21:71:
71:45:49:ba:f2:7d:2c:50:7b:16:56:3a:f9:c9:77:59:fb:ec:
10:85:8b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:25 2026 by rpki-client