Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: 16SLBr2EK+NzgcIpVNDfIYHpzV+CuyuS7y3cbZtzLLU=
Subject key identifier: 5D:67:BE:09:A0:05:92:40:8B:56:1B:3E:EA:D4:FC:A2:42:C5:B1:B2
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 019DD0BE95A1DA00812447058CCC421A27D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 1219
Signing time: Mon 27 Apr 2026 21:00:44 +0000
Manifest this update: Mon 27 Apr 2026 21:00:44 +0000
Manifest next update: Tue 28 Apr 2026 21:00:44 +0000
Files and hashes: 1: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (hash: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg=)
2: JhHZEdKJAkP34-ikWpJJrLVsEs4.roa (hash: KnIixUB21MIMX8vhmGnPkdfsgJQVtWJkg4ouIc7Q8O8=)
3: L6kvFhmw2HRimiOHYbmI9LP_LC8.roa (hash: bz6jH/jd8xJJNx0vVfwgOgrPiMsJ1ZK1zrtVm+WmTlk=)
4: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: pEwgzbxhL5q7MXtqilHWDcEKsUg/a/gLZlsx18SqlnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:be:95:a1:da:00:81:24:47:05:8c:cc:42:1a:27:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Apr 27 21:00:44 2026 GMT
Not After : Apr 28 21:00:44 2026 GMT
Subject: CN=5d67be09a00592408b561b3eead4fca242c5b1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:cb:8d:c3:08:39:5c:f7:a9:e3:36:a8:de:
6f:8f:16:64:e1:cc:e9:ff:c6:a1:df:9d:d7:12:ed:
b5:cd:c5:12:0a:23:fa:38:75:3f:b3:94:21:eb:c9:
3b:25:c3:4d:c5:8c:c7:10:21:6b:0f:ce:a1:cd:77:
a3:bd:28:30:74:d0:0d:53:41:40:9b:2a:94:de:06:
5a:d3:25:d4:01:7a:8d:1d:aa:54:ba:9c:16:e2:53:
2a:54:4e:7e:bf:1c:c9:c9:25:a8:3f:6c:4f:79:fd:
03:b6:58:91:3e:e6:20:e7:11:ff:4a:45:2c:e3:04:
6a:28:88:c2:ba:37:a0:66:12:b9:38:20:d8:7e:5a:
05:12:d4:e7:6c:a1:8c:f4:2a:31:c9:c2:ee:b9:0f:
76:8a:0f:94:74:8d:b1:c7:06:31:51:79:da:21:fb:
ab:5d:77:65:1b:5a:47:75:84:31:89:48:9a:aa:ca:
f1:c7:cf:05:e7:4b:98:83:7f:fd:a4:42:2f:97:1a:
6c:41:ba:c2:ea:ba:53:a2:b5:42:ac:85:d1:ec:c4:
14:f8:44:01:26:d8:66:93:de:11:fe:d0:1e:ed:5c:
63:64:db:d2:c0:60:16:9c:7a:30:3c:89:59:7a:a0:
20:a9:c7:f2:9b:0c:3e:af:09:41:d0:d2:06:f5:a3:
bb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:67:BE:09:A0:05:92:40:8B:56:1B:3E:EA:D4:FC:A2:42:C5:B1:B2
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:78:bf:d8:b8:85:6b:b1:e8:e6:ee:d0:c2:c6:2f:69:41:d9:
c8:b6:91:ac:0f:e7:f5:a5:73:81:b0:13:4b:6e:e5:e9:f3:27:
ee:08:57:c9:d9:b3:a6:6c:1c:be:18:28:47:a2:9e:b7:31:09:
04:8b:e4:d6:1c:1d:fd:ba:8e:4e:d5:bb:59:22:52:af:19:35:
fe:d2:63:db:92:f1:3f:08:d5:36:17:69:eb:98:3f:a7:2f:85:
84:e3:b1:85:0a:c6:49:f5:c9:11:70:26:d7:d6:69:e6:84:84:
a7:0d:ed:d4:6c:df:5f:77:48:d0:db:76:3a:df:be:7a:d1:3b:
44:18:b1:c4:54:88:dc:97:bc:eb:7d:3e:6c:6a:b7:dd:34:ca:
2b:5c:bb:5e:99:02:b6:2c:b5:f5:9c:d0:2d:f2:87:51:45:ae:
a1:11:cf:cc:34:44:ad:9f:a6:4c:8f:01:e1:82:2c:47:a9:ab:
24:35:a0:46:18:8a:74:5c:fb:14:77:bf:47:72:57:aa:83:da:
a7:2e:6d:36:5f:e7:1f:0e:64:c3:a1:94:83:97:cd:32:21:01:
be:b8:c6:3f:38:35:4e:59:8c:a7:9d:82:0c:1c:33:6a:c2:a6:
be:99:c9:d6:3e:9e:d6:44:91:f1:f8:6c:ed:32:55:9e:3c:65:
39:8c:11:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:31:43 2026 by rpki-client