Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: Q7LJvygMEEUEFhA+KdlCBf7aOFfQcJrLKftvH3oB6uQ=
Subject key identifier: AD:A6:E0:C1:2A:E8:91:BA:66:77:2B:F4:CC:37:19:AB:7C:4A:3A:1D
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 01A17B4D6DD07B5534401E86FF110DAAA89B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 13FF
Signing time: Tue 27 Oct 2026 03:00:34 +0000
Manifest this update: Tue 27 Oct 2026 03:00:34 +0000
Manifest next update: Wed 28 Oct 2026 03:00:34 +0000
Files and hashes: 1: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (hash: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg=)
2: JhHZEdKJAkP34-ikWpJJrLVsEs4.roa (hash: KnIixUB21MIMX8vhmGnPkdfsgJQVtWJkg4ouIc7Q8O8=)
3: L6kvFhmw2HRimiOHYbmI9LP_LC8.roa (hash: bz6jH/jd8xJJNx0vVfwgOgrPiMsJ1ZK1zrtVm+WmTlk=)
4: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: enmDgQlcTaL6J7twxiw6NL+SdsY92S62ohJYFGXKfjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:6d:d0:7b:55:34:40:1e:86:ff:11:0d:aa:a8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Oct 27 03:00:34 2026 GMT
Not After : Oct 28 03:00:34 2026 GMT
Subject: CN=ada6e0c12ae891ba66772bf4cc3719ab7c4a3a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:d6:41:97:af:72:88:62:e1:de:74:23:81:
78:4b:a1:70:16:cf:82:bf:65:61:8a:a7:6e:0a:f5:
0a:8c:8d:e9:50:0f:a3:e8:21:30:57:9a:9e:83:75:
da:8b:84:75:70:ef:b0:40:c9:7c:41:34:a2:c7:68:
48:79:db:f8:65:a6:37:7d:ae:19:ad:9d:f4:96:9b:
7d:20:25:c2:4c:3a:96:74:e7:05:9c:b4:cb:a0:8d:
36:ab:da:16:e4:0a:27:b9:61:68:54:a9:7e:06:df:
74:92:32:3d:b4:d0:4e:38:d8:b2:1d:56:ac:77:e0:
54:ed:c5:15:ec:5b:99:30:19:be:d2:86:b5:65:d4:
d4:a2:10:ad:a9:6b:8d:29:35:15:89:f3:e8:f2:9d:
1d:64:23:b2:ab:4a:0f:e5:f7:6e:32:1a:09:ff:eb:
32:8b:3f:08:a1:49:ea:b0:59:ce:29:68:de:dd:d3:
23:9b:a5:33:45:47:f0:98:87:4a:f7:bd:ff:02:64:
73:95:1b:1c:51:e8:b9:78:c9:bb:d0:a1:b3:61:3d:
ef:94:d9:0c:94:49:85:d4:9f:7e:f7:f5:2c:41:3e:
91:15:44:45:82:92:3a:2a:c2:a3:c4:8f:97:8f:d1:
7e:01:ad:7f:c8:4b:45:6f:02:e1:14:34:16:31:3f:
a4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A6:E0:C1:2A:E8:91:BA:66:77:2B:F4:CC:37:19:AB:7C:4A:3A:1D
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:80:98:7c:40:b5:0a:e3:cb:2f:03:29:9c:93:f2:e5:a0:a9:
25:ed:c1:84:e4:25:34:4c:b6:d8:ce:b2:7f:1b:cf:4f:dc:a1:
04:73:eb:34:c1:8f:48:bd:ce:8f:ac:38:4c:fc:67:e0:cb:d8:
01:db:34:5d:ec:67:43:40:49:85:07:bd:3b:0c:76:a6:48:02:
c7:87:0f:9a:f9:91:c3:cc:c0:2d:2d:f3:c1:47:41:be:86:99:
18:32:5a:92:d2:11:a5:9b:a3:56:91:00:f3:71:58:f1:3c:4e:
68:1d:f1:36:64:fe:92:5d:c0:23:b9:18:06:24:6c:37:a8:06:
18:67:f5:86:0a:15:d1:5c:74:42:f4:a8:2b:cb:0d:69:9f:2f:
93:be:a2:eb:71:6a:23:e3:87:94:d4:12:07:67:2b:28:b0:52:
a3:fd:f3:87:08:f3:41:35:71:38:1f:bc:1c:fe:ff:2e:40:46:
c9:33:e8:f9:9a:55:83:e7:ec:7a:2d:f8:b7:bd:09:59:24:39:
51:81:af:64:5f:4b:e4:99:8e:56:97:d9:f7:6a:65:48:0c:67:
fb:22:fb:f9:79:a4:a8:56:07:5c:be:e9:d5:1c:13:d0:10:d8:
49:f5:2c:37:43:1b:16:e6:3c:15:84:c4:08:15:fa:17:e4:56:
11:04:59:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7TW3Qe1U0QB6G/xENqqibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjMzZDRmM2FjMGE4ODc4NDBhMjg0Y2RjMWFiZWI3ZGQ2
NDJmMDEwHhcNMjYxMDI3MDMwMDM0WhcNMjYxMDI4MDMwMDM0WjAzMTEwLwYDVQQD
EyhhZGE2ZTBjMTJhZTg5MWJhNjY3NzJiZjRjYzM3MTlhYjdjNGEzYTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC/WQZevcohi4d50I4F4S6FwFs+C
v2VhiqduCvUKjI3pUA+j6CEwV5qeg3Xai4R1cO+wQMl8QTSix2hIedv4ZaY3fa4Z
rZ30lpt9ICXCTDqWdOcFnLTLoI02q9oW5AonuWFoVKl+Bt90kjI9tNBOONiyHVas
d+BU7cUV7FuZMBm+0oa1ZdTUohCtqWuNKTUVifPo8p0dZCOyq0oP5fduMhoJ/+sy
iz8IoUnqsFnOKWje3dMjm6UzRUfwmIdK973/AmRzlRscUei5eMm70KGzYT3vlNkM
lEmF1J9+9/UsQT6RFURFgpI6KsKjxI+Xj9F+Aa1/yEtFbwLhFDQWMT+kKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2m4MEq6JG6Zncr9Mw3Gat8SjodMB8GA1UdIwQY
MBaAFJ/zPU86wKiHhAooTNwavrfdZC8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQt
MzA3MjUwM2Q4NjA3LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQtMzA3MjUwM2Q4NjA3
LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoCYfEC1
CuPLLwMpnJPy5aCpJe3BhOQlNEy22M6yfxvPT9yhBHPrNMGPSL3Oj6w4TPxn4MvY
Ads0XexnQ0BJhQe9Owx2pkgCx4cPmvmRw8zALS3zwUdBvoaZGDJaktIRpZujVpEA
83FY8TxOaB3xNmT+kl3AI7kYBiRsN6gGGGf1hgoV0Vx0QvSoK8sNaZ8vk76i63Fq
I+OHlNQSB2crKLBSo/3zhwjzQTVxOB+8HP7/LkBGyTPo+ZpVg+fsei34t70JWSQ5
UYGvZF9L5JmOVpfZ92plSAxn+yL7+XmkqFYHXL7p1RwT0BDYSfUsN0MbFuY8FYTE
CBX6F+RWEQRZ+A==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:36:23 2026 by rpki-client