Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
File: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft (raw, json)
Hash identifier: NmfLMFCt6X+JO9Y7V8aziyiGKOTeSprvew68el2TGsc=
Subject key identifier: 1B:2E:A5:A4:B3:39:79:9A:C1:C3:E3:C4:8D:25:75:B4:84:69:80:02
Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
Certificate issuer: /CN=9ff3396374cbf5d767125f02dcf0f97296323092
Certificate serial: 01A13591156F77134F7AD1CBD1A6C229ED5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
Manifest number: 1AA5
Signing time: Tue 13 Oct 2026 14:01:02 +0000
Manifest this update: Tue 13 Oct 2026 14:01:02 +0000
Manifest next update: Wed 14 Oct 2026 14:01:02 +0000
Files and hashes: 1: fCweoVy2pE-RI3KiJqu_U9vP31o.roa (hash: Izz1/Qkh1zmgocHLfNEMhHk5Leqh7AEpEEvpIvvT/eA=)
2: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl (hash: DqYpzaVW4dbIB/Xxijnp57S+cwcjHIU4Nu3AY+U3SaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:91:15:6f:77:13:4f:7a:d1:cb:d1:a6:c2:29:ed:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092
Validity
Not Before: Oct 13 14:01:02 2026 GMT
Not After : Oct 14 14:01:02 2026 GMT
Subject: CN=1b2ea5a4b339799ac1c3e3c48d2575b484698002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:ee:3b:e5:56:cd:f0:50:15:b0:61:7c:53:
42:63:7e:6e:49:60:6f:71:b3:ff:47:4c:3d:5d:9b:
4e:60:5a:55:48:8f:49:ca:f1:c1:16:fc:57:de:1b:
e7:cf:59:bc:b7:98:0e:41:0f:ae:9d:f1:27:27:48:
4b:3a:dc:c9:37:20:ec:70:f9:51:30:d6:c2:4e:87:
a9:b4:a2:aa:36:33:51:bf:e0:64:50:e8:b3:74:4c:
5f:ff:ba:a3:e5:de:84:43:69:ef:96:d6:81:28:47:
66:86:01:1d:2c:fc:dc:f1:ae:50:4a:98:30:ba:80:
9e:c4:6c:92:01:31:48:1f:22:c0:1c:a0:8e:25:51:
cd:bd:92:5c:07:37:62:46:3a:b5:2d:a4:e2:04:97:
22:61:ac:a3:91:fa:a9:b0:3c:fc:45:bd:f4:d3:47:
5d:67:c4:9d:a5:1f:97:05:25:39:a3:57:9c:9b:27:
62:6a:00:f1:e8:8b:5f:df:70:44:a6:ec:9f:b0:b4:
3d:70:51:85:76:fc:5c:ed:bf:cc:05:6b:d7:7a:23:
f9:64:cf:56:25:9c:c1:c8:dc:da:70:35:bc:b8:f9:
79:16:00:f0:ed:da:cb:90:ec:d4:4a:3f:30:bf:06:
fe:3c:e6:36:80:17:b0:be:9b:c0:b8:34:dd:f4:60:
71:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2E:A5:A4:B3:39:79:9A:C1:C3:E3:C4:8D:25:75:B4:84:69:80:02
X509v3 Authority Key Identifier:
keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:42:7a:d2:23:4a:50:58:8f:d3:aa:07:9a:90:68:ed:b6:a5:
fb:25:a6:b1:eb:1d:a4:3e:54:f6:70:f1:a8:1c:54:0f:71:72:
d7:c0:37:6a:56:a1:d7:03:9b:e7:11:fc:01:44:43:a9:51:62:
ab:b5:76:88:95:c6:ed:ca:b6:95:d9:9b:cb:0e:9e:07:04:aa:
7e:e7:21:1e:61:81:8b:32:b8:70:9d:97:95:f8:85:5c:c3:8f:
ec:be:ae:5c:fb:fa:a1:a0:e8:34:bd:ac:86:c6:bf:6d:5e:3b:
3b:f0:52:67:5d:9b:a6:85:a8:a0:65:a7:98:99:d7:d5:b9:88:
14:b7:32:73:be:99:36:08:ed:a1:95:3a:1e:4e:16:4f:5a:1b:
db:b2:4f:75:64:0e:1e:6b:4f:4b:63:fa:70:fd:63:90:b6:e4:
4c:cb:45:27:24:13:6b:04:5e:96:4a:3b:80:a0:f2:c0:3d:0f:
2a:dd:57:50:9e:ad:e2:ae:58:32:45:b1:fa:f8:d4:df:78:f3:
8c:be:e6:25:45:4e:90:6c:fa:fd:29:8b:5a:aa:43:fe:fd:41:
ad:3b:ac:2d:f8:86:fa:77:ab:81:e8:d3:53:99:8d:4d:bf:6f:
10:60:89:eb:6a:5a:8b:f0:b8:f4:ba:e6:0a:c8:ac:ac:9e:6f:
12:9f:bc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:25:57 2026 by rpki-client