Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier: +oRIZtHAOgC9TUkqA2loL/TQQvm4Zh/RpTZ6SMPbCsk=
Subject key identifier: 03:DB:F3:AF:2B:1B:21:C3:FE:42:94:99:DA:AF:47:D5:4F:13:5D:62
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 019D3A1C2F7D1BFB7282AC96788B4ED04B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number: 17F6
Signing time: Sun 29 Mar 2026 15:00:18 +0000
Manifest this update: Sun 29 Mar 2026 15:00:18 +0000
Manifest next update: Mon 30 Mar 2026 15:00:18 +0000
Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: IM+Fcdum+4aLCCQ5m8ONWMDQKaO0/qsXIpxSbRFub9M=)
2: oY8wzqxSZtFw6pVYs4NFV60daUg.roa (hash: DFgw9sxWQdsrNBj4RrkibFIZhSj9mHDN7Zn+MkePlLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:2f:7d:1b:fb:72:82:ac:96:78:8b:4e:d0:4b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: Mar 29 15:00:18 2026 GMT
Not After : Mar 30 15:00:18 2026 GMT
Subject: CN=03dbf3af2b1b21c3fe429499daaf47d54f135d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f8:7b:41:5d:2a:8e:37:e0:01:d6:a3:c6:d8:
8b:c6:18:3c:94:13:ab:a9:55:bb:ce:f7:5e:f9:65:
10:d2:75:fa:25:ed:e2:b4:cc:b8:fd:88:b8:4e:2c:
eb:ab:5e:c4:2a:09:52:c0:63:2e:9d:5e:7b:c8:3b:
71:b7:82:6e:64:9d:25:54:98:1b:eb:55:0d:8f:ea:
e3:3f:7f:14:81:bb:2a:b2:d2:2f:7c:f6:6d:6b:21:
6c:44:18:50:7e:ae:07:62:8e:87:db:b4:4a:44:ce:
0b:df:c3:3e:87:44:fa:74:4a:72:b7:98:ea:c4:23:
33:99:8e:72:21:aa:21:e4:fb:e6:f8:c3:f2:bf:92:
41:b4:bc:93:c5:62:8d:38:76:45:df:df:0f:26:95:
d0:fc:d3:59:ad:9b:77:01:1e:40:02:4d:42:64:06:
db:2a:59:5f:c9:ed:e9:f1:bc:a0:fc:1a:1f:20:3a:
51:59:3e:7f:20:8d:88:11:f0:e0:88:b8:bb:7b:be:
38:b5:14:40:6a:65:dd:ca:e6:27:c2:a5:25:dc:35:
bd:32:d7:d2:98:b8:b6:98:d3:d5:cf:fc:e5:27:54:
6c:c5:cb:51:e5:5b:f6:0e:64:a4:d9:b5:77:78:1a:
67:5c:6a:59:fe:2f:20:1f:77:0c:46:19:0e:dd:e6:
86:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DB:F3:AF:2B:1B:21:C3:FE:42:94:99:DA:AF:47:D5:4F:13:5D:62
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4d:7f:00:e1:77:97:8c:bb:68:d6:6d:6f:a9:d5:c2:eb:3e:
35:97:32:0c:52:5a:29:32:c5:2a:a2:a8:47:f8:2f:90:5b:74:
23:2e:98:a8:c7:21:3a:9c:3d:13:50:95:e3:97:42:20:df:4d:
a5:e3:c5:3c:a2:2e:22:54:94:2b:89:31:cc:bd:01:d8:f0:66:
1a:83:4c:5b:46:02:ac:7d:bb:3a:79:04:82:ec:bc:30:27:b9:
90:55:27:aa:6a:d6:74:b1:1b:96:03:2a:cd:f8:f0:04:76:11:
53:4f:0c:76:a7:55:98:1a:e6:b3:4b:c6:c6:79:14:6c:b8:9f:
1b:c6:48:fb:f5:03:fd:b1:e5:0a:bc:06:06:da:d4:19:bf:f7:
0c:02:3f:f7:bb:37:20:16:9b:b3:0c:ab:cc:97:03:4b:f7:fd:
d2:63:bc:db:42:93:4c:d7:5f:21:d4:6d:fc:3d:2a:57:63:e3:
4c:51:52:cc:32:fa:ef:9c:23:f8:5d:e7:c7:15:b1:ea:21:41:
9a:89:f1:07:7a:6b:3f:78:c3:c0:cc:e8:2c:a0:2f:8c:78:5b:
ce:77:74:92:da:86:dd:e2:66:1a:0f:b9:94:b3:02:79:17:d5:
25:fe:c7:bb:9c:64:85:5e:a6:aa:3b:c0:63:49:fb:50:1e:32:
7c:45:ad:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:43 2026 by rpki-client