Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
File: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft (raw, json)
Hash identifier: oKT6GuoPt6v7LAfPflGdru1m8tDo6FTxiXqQG/MSO4g=
Subject key identifier: A0:43:39:CB:EF:40:A3:80:93:83:6F:04:0A:5D:D7:59:11:34:E9:EE
Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
Certificate issuer: /CN=9ff3396374cbf5d767125f02dcf0f97296323092
Certificate serial: 019D37F76FA7177ED18040506DEFCCC3168F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 05:00:55 +0000
Manifest this update: Sun 29 Mar 2026 05:00:55 +0000
Manifest next update: Mon 30 Mar 2026 05:00:55 +0000
Files and hashes: 1: fCweoVy2pE-RI3KiJqu_U9vP31o.roa (hash: Izz1/Qkh1zmgocHLfNEMhHk5Leqh7AEpEEvpIvvT/eA=)
2: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl (hash: Z5Glxqq7Um0oiKadtMIhuD+yn2+0OtvCg/BfW04R2CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6f:a7:17:7e:d1:80:40:50:6d:ef:cc:c3:16:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092
Validity
Not Before: Mar 29 05:00:55 2026 GMT
Not After : Mar 30 05:00:55 2026 GMT
Subject: CN=a04339cbef40a38093836f040a5dd7591134e9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:8f:4a:e7:e6:d4:ed:88:17:62:b4:97:4e:
16:00:95:92:05:84:c5:f6:3b:b3:76:8a:94:77:ac:
cc:59:e6:2d:7b:1d:fd:a0:8a:18:71:09:0f:dd:f1:
e0:26:86:f0:71:18:fb:d5:e6:b3:25:35:27:06:49:
e4:42:47:66:ef:a5:ab:da:ac:a6:f2:fc:61:67:53:
5d:76:dd:e7:3f:56:66:cc:ea:c8:c8:28:97:cd:69:
de:af:09:5f:40:1a:4d:9c:0d:c2:97:d5:18:95:a7:
ad:36:d5:de:d7:e0:e9:32:c2:9f:44:d7:38:ea:44:
9b:db:34:7f:66:32:cb:cd:4d:47:04:7b:ac:f6:c9:
73:ca:84:6e:bf:9c:37:49:72:5f:de:88:22:e6:6f:
98:7a:fb:2a:4d:3c:13:5e:a1:48:c0:8e:c9:c4:41:
e6:55:4b:f5:30:68:fa:08:68:45:2f:40:77:35:86:
f3:7a:72:9d:4b:70:04:2d:d5:86:bf:b3:d5:5c:11:
69:4e:07:74:a2:07:fc:7c:fa:bb:b1:ba:58:cd:3f:
17:9a:e4:65:86:5b:61:89:93:1b:d3:47:20:e1:51:
82:f8:fe:4f:59:b2:37:1d:18:ff:f9:94:9a:27:4b:
b9:2e:82:23:df:5c:fe:b0:84:f2:c3:8e:bd:6d:3e:
3b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:43:39:CB:EF:40:A3:80:93:83:6F:04:0A:5D:D7:59:11:34:E9:EE
X509v3 Authority Key Identifier:
keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:81:d6:fb:ff:96:bc:ec:0d:a3:42:47:ca:4c:64:8b:14:26:
d2:9e:71:29:ca:d4:3f:f3:75:f5:e8:96:b1:f4:b2:45:07:4d:
06:2c:bf:f7:be:aa:5b:20:10:81:a9:66:f5:ff:04:bb:28:5c:
fb:77:e9:b7:1a:84:18:74:64:a2:b1:19:25:10:27:f5:4a:5a:
e9:b9:80:1f:e5:0b:a7:a9:01:cb:27:58:c6:89:5e:b8:f2:71:
f3:56:58:0f:db:e2:7f:55:76:9f:a9:60:d8:5e:fb:ab:98:bc:
a9:37:49:ac:b8:9a:1a:a1:c0:e8:f5:e9:d6:aa:c5:33:2a:a8:
57:b0:06:d3:ed:c8:c9:dc:ea:c7:76:7f:e1:32:63:05:2a:3e:
86:f2:9c:83:27:77:e0:97:77:50:f2:c2:64:24:ac:57:1e:cc:
fa:5c:41:ca:33:b8:d0:df:bf:28:12:e1:68:85:02:41:41:94:
5d:f3:f4:70:99:03:2d:22:a5:2c:19:c5:de:c3:36:87:8b:23:
0f:89:e1:e6:94:a0:fe:1e:2d:77:94:82:6b:b5:ec:0d:cd:68:
d7:e1:bc:8d:ab:1f:1f:89:26:f0:61:9d:6a:df:86:04:2f:4f:
3e:29:9b:0c:08:f2:cf:83:f4:db:3a:a9:ef:8e:3e:17:76:23:
28:e9:92:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0392+nF37RgEBQbe/MwxaPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjMzOTYzNzRjYmY1ZDc2NzEyNWYwMmRjZjBmOTcyOTYz
MjMwOTIwHhcNMjYwMzI5MDUwMDU1WhcNMjYwMzMwMDUwMDU1WjAzMTEwLwYDVQQD
EyhhMDQzMzljYmVmNDBhMzgwOTM4MzZmMDQwYTVkZDc1OTExMzRlOWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxiPSufm1O2IF2K0l04WAJWSBYTF
9juzdoqUd6zMWeYtex39oIoYcQkP3fHgJobwcRj71eazJTUnBknkQkdm76Wr2qym
8vxhZ1Nddt3nP1ZmzOrIyCiXzWnerwlfQBpNnA3Cl9UYlaetNtXe1+DpMsKfRNc4
6kSb2zR/ZjLLzU1HBHus9slzyoRuv5w3SXJf3ogi5m+YevsqTTwTXqFIwI7JxEHm
VUv1MGj6CGhFL0B3NYbzenKdS3AELdWGv7PVXBFpTgd0ogf8fPq7sbpYzT8XmuRl
hlthiZMb00cg4VGC+P5PWbI3HRj/+ZSaJ0u5LoIj31z+sITyw469bT474QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBDOcvvQKOAk4NvBApd11kRNOnuMB8GA1UdIwQY
MBaAFJ/zOWN0y/XXZxJfAtzw+XKWMjCSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zMTYwMjAtOWZjNS00YjdjLWFlNDEt
ZTk1NTQ0ODNmZmE3LzEvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zMTYwMjAtOWZjNS00YjdjLWFlNDEtZTk1NTQ0ODNmZmE3
LzEvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4HW+/+W
vOwNo0JHykxkixQm0p5xKcrUP/N19eiWsfSyRQdNBiy/976qWyAQgalm9f8Euyhc
+3fptxqEGHRkorEZJRAn9Upa6bmAH+ULp6kByydYxoleuPJx81ZYD9vif1V2n6lg
2F77q5i8qTdJrLiaGqHA6PXp1qrFMyqoV7AG0+3Iydzqx3Z/4TJjBSo+hvKcgyd3
4Jd3UPLCZCSsVx7M+lxByjO40N+/KBLhaIUCQUGUXfP0cJkDLSKlLBnF3sM2h4sj
D4nh5pSg/h4td5SCa7XsDc1o1+G8jasfH4km8GGdat+GBC9PPimbDAjyz4P02zqp
744+F3YjKOmSAA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:23 2026 by rpki-client