Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: UGkCN2ObnTSyyo9T6gD9EINR5xtJ5hFOXmtuB8NhiZg=
Subject key identifier: AA:C1:DB:0C:AA:2C:CA:3B:90:9E:1A:85:0E:AF:E6:6A:2B:C8:EB:15
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 01A08BD5FA646319091CDEF0CD803E61D5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 1383
Signing time: Thu 10 Sep 2026 15:00:51 +0000
Manifest this update: Thu 10 Sep 2026 15:00:51 +0000
Manifest next update: Fri 11 Sep 2026 15:00:51 +0000
Files and hashes: 1: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (hash: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg=)
2: JhHZEdKJAkP34-ikWpJJrLVsEs4.roa (hash: KnIixUB21MIMX8vhmGnPkdfsgJQVtWJkg4ouIc7Q8O8=)
3: L6kvFhmw2HRimiOHYbmI9LP_LC8.roa (hash: bz6jH/jd8xJJNx0vVfwgOgrPiMsJ1ZK1zrtVm+WmTlk=)
4: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: dMEmKM8xtf9Cekzwb9Ct09fwwlbuNYMx62QeU4Y9X1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:fa:64:63:19:09:1c:de:f0:cd:80:3e:61:d5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Sep 10 15:00:51 2026 GMT
Not After : Sep 11 15:00:51 2026 GMT
Subject: CN=aac1db0caa2cca3b909e1a850eafe66a2bc8eb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:7c:95:f2:3e:66:41:26:78:63:c8:5e:07:
72:d6:bc:d0:06:11:c8:35:1b:11:c5:a1:ee:9b:02:
39:3c:e0:65:d3:0e:90:d5:67:a1:62:01:58:43:46:
26:8c:59:33:1e:ff:33:78:c5:2d:0b:41:38:80:e3:
c0:17:7a:2d:0b:26:82:52:b5:74:83:37:0f:02:53:
5f:55:e4:9e:18:f4:53:f8:be:2e:1f:d4:6a:a5:cb:
9a:84:3e:6a:6c:08:00:c9:1d:35:08:fb:62:39:12:
62:26:63:a4:b2:27:db:26:1d:6a:4d:14:a7:0d:76:
55:62:7c:30:99:68:9d:73:6a:ea:4e:bf:06:4a:be:
6c:d6:ce:56:78:5f:99:2d:4b:b6:c6:52:22:3c:d0:
18:92:ef:ce:d5:ea:63:df:b8:e9:c4:e8:82:9c:3d:
3f:41:c6:93:4d:ce:8f:5b:38:04:68:5f:1b:8d:af:
0f:1b:76:29:63:b5:24:34:6a:e6:cd:44:af:28:d8:
5e:e9:2c:77:24:0c:d3:e8:f2:6c:69:c7:34:35:db:
0a:6d:1a:04:9d:b0:2f:4f:3b:79:be:a7:a9:f9:2d:
d8:b4:f7:c1:36:df:8a:c8:19:96:f3:62:8a:f9:98:
3c:3d:9e:86:ca:d8:b8:bc:3d:f2:f1:2d:df:2f:b8:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C1:DB:0C:AA:2C:CA:3B:90:9E:1A:85:0E:AF:E6:6A:2B:C8:EB:15
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:67:82:be:7e:fc:05:76:b2:c9:f7:05:45:43:5e:c3:6c:46:
c9:c5:8c:23:b7:55:93:20:7f:f7:96:3d:1c:59:0a:97:16:0d:
ac:5c:39:bb:1c:20:48:3d:28:cc:d2:00:28:11:a5:48:7a:66:
19:98:5f:48:a9:82:06:78:f0:89:b6:68:62:cb:1c:11:c5:2c:
47:54:89:47:b5:e0:e4:c4:69:e1:28:12:98:ae:31:1b:9a:cd:
ca:01:5e:3b:76:70:10:f2:cc:6a:15:d1:3f:83:cf:f7:77:9b:
b3:34:da:d1:5d:73:6d:78:ec:c3:7f:27:17:55:62:40:2a:cc:
e8:9a:51:81:88:86:b7:c7:08:8b:98:ad:d1:f3:b4:1a:61:e7:
f9:fa:f3:9f:21:cc:27:b7:c8:7b:59:07:8f:a8:f8:31:02:99:
8d:58:32:d1:90:2a:2a:68:4d:ce:64:15:34:a5:38:cb:b9:fc:
77:c5:6b:f1:91:a9:37:c2:04:50:f5:30:91:a4:2b:0a:df:06:
13:6e:1c:40:d5:13:97:bf:ba:5f:89:1a:5b:0e:51:93:59:df:
ca:cc:8a:41:67:b6:8b:69:48:40:f2:9f:8b:7b:30:28:65:5e:
1a:af:fe:cc:80:1f:8b:ed:60:76:a7:3e:0e:5e:f2:c4:5a:db:
ec:99:4c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:55 2026 by rpki-client