Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
File: m9_8i9uESXC44oubS-bywG39eYU.mft (raw, json)
Hash identifier: y8fjcgwrRSGCCJJCVMF9TX5SQUayo8YbCkamKRfjpdE=
Subject key identifier: 0B:6B:8C:BE:E4:03:F4:74:89:5B:75:43:02:5C:31:D8:C8:E8:7D:F7
Authority key identifier: 9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
Certificate issuer: /CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Certificate serial: 019D37C096626444EAC5EAF1F6FED17A1A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
Manifest number: 166A
Signing time: Sun 29 Mar 2026 04:01:01 +0000
Manifest this update: Sun 29 Mar 2026 04:01:01 +0000
Manifest next update: Mon 30 Mar 2026 04:01:01 +0000
Files and hashes: 1: EnLcppgM0qNoUcRBoYxYh6maukU.roa (hash: Hpf2B2TmnwiylcYCMr2VVCuhMpJu2BxnFwq/SGF1Ly4=)
2: m9_8i9uESXC44oubS-bywG39eYU.crl (hash: GK+PjdC8eLBqQbA0f7Ra6TrabsNSK4WTziCIE1yPY5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:96:62:64:44:ea:c5:ea:f1:f6:fe:d1:7a:1a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Validity
Not Before: Mar 29 04:01:01 2026 GMT
Not After : Mar 30 04:01:01 2026 GMT
Subject: CN=0b6b8cbee403f474895b7543025c31d8c8e87df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:86:30:11:d1:c6:21:34:91:65:8f:1c:ec:
ff:83:64:cc:c9:06:e7:d6:b1:17:f5:63:72:9c:35:
ee:e3:d6:71:d2:5a:90:f3:01:bd:09:d0:58:67:fe:
74:70:ca:6d:20:05:9f:ac:1e:d7:bd:48:9f:f2:3e:
93:f5:c5:2c:bc:19:8a:c5:3c:f1:7f:fc:dd:dc:e0:
61:4b:06:92:21:2f:16:fd:1a:e8:96:70:a6:4e:c7:
31:b2:22:8d:9b:1f:50:21:5f:d6:ec:53:66:ce:be:
11:81:fe:95:fc:0e:02:4e:0a:a5:11:7c:bf:8a:04:
49:50:b0:93:e4:85:29:c4:20:dc:6a:c7:bc:12:bb:
c0:8e:40:90:83:85:7f:af:e7:9e:5d:21:6a:7d:d6:
fe:3c:d5:cf:ba:11:e8:79:74:c0:10:75:9d:3b:1c:
29:bd:93:68:9a:17:13:20:cd:86:5d:ba:85:9a:b3:
a9:07:d2:86:4f:6d:df:5a:81:00:06:80:47:ae:9f:
d3:6e:d4:ab:59:eb:4e:cc:8c:f7:49:d2:18:09:70:
ee:3f:0d:47:93:a8:65:8e:fd:20:a4:13:b5:ca:d6:
4b:0e:f9:39:0d:63:e8:8a:50:0d:3c:92:27:61:2b:
41:86:2a:58:6a:36:13:4a:d0:55:0f:83:42:fb:a7:
c3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6B:8C:BE:E4:03:F4:74:89:5B:75:43:02:5C:31:D8:C8:E8:7D:F7
X509v3 Authority Key Identifier:
keyid:9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5c:15:37:ab:53:84:08:1a:f5:e7:10:84:45:d6:76:c3:eb:
bd:19:f5:83:0e:49:b0:8b:a9:e4:40:b4:9b:ba:cc:28:29:89:
0d:f7:7d:d2:0d:1f:68:2d:cd:84:67:c7:a1:bd:82:53:ed:58:
91:7b:65:be:dc:e7:57:1c:ba:81:df:c2:47:ff:e1:05:27:5b:
ab:55:e0:d9:40:26:c8:83:29:12:80:69:6c:4e:de:39:66:1a:
e9:3c:2d:b2:a4:c8:f3:5b:db:f9:1e:f5:de:25:b6:f5:a7:39:
16:21:3b:9b:62:b2:ae:7e:35:f2:4a:6e:9e:7c:da:87:20:4b:
ea:98:98:a8:f6:16:c5:3b:bc:4c:0d:a8:7d:7a:ff:db:5f:30:
ad:fb:0a:46:eb:d9:96:02:24:bc:57:cc:3b:77:0f:8b:75:53:
b1:e5:54:b1:d8:2c:96:7e:e0:68:86:23:d4:38:e7:03:3b:86:
3c:29:c4:61:1e:1b:7e:94:ca:d2:cd:ff:73:8f:16:be:3b:59:
86:2f:49:f9:25:34:5b:4a:db:0e:84:08:9b:ba:3e:26:7d:10:
54:8b:ad:fc:a5:70:4b:ab:78:42:39:bc:51:1d:d0:16:dd:08:
b6:d1:bf:9b:60:f5:2b:47:16:5f:5f:97:3d:04:a5:4f:94:39:
b6:a3:43:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:12 2026 by rpki-client