Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier: vErFU3hGX+RhognMcwm3Bjjetsu4GkaOQ8d5af9ILPY=
Subject key identifier: CB:8B:E6:C0:89:8C:FF:70:97:B1:37:40:58:8C:6D:99:9F:E9:99:B7
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 01A15A795C8785427B708AE7002B7680B44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number: 1A19
Signing time: Tue 20 Oct 2026 18:01:05 +0000
Manifest this update: Tue 20 Oct 2026 18:01:05 +0000
Manifest next update: Wed 21 Oct 2026 18:01:05 +0000
Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: FEpKw38aQmkeRhtk5gi08PlSGun0Pw/OxT8UTTcHu/A=)
2: oY8wzqxSZtFw6pVYs4NFV60daUg.roa (hash: DFgw9sxWQdsrNBj4RrkibFIZhSj9mHDN7Zn+MkePlLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:79:5c:87:85:42:7b:70:8a:e7:00:2b:76:80:b4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: Oct 20 18:01:05 2026 GMT
Not After : Oct 21 18:01:05 2026 GMT
Subject: CN=cb8be6c0898cff7097b13740588c6d999fe999b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:72:ef:f2:8c:3f:e0:34:0f:b6:3f:4f:6d:01:
3c:49:64:b9:f2:df:f7:44:f9:8c:05:d0:ce:25:81:
e9:98:a6:e8:77:81:39:5d:fa:88:05:65:78:a2:c2:
59:79:5e:f1:76:3c:72:b4:3b:14:14:fe:12:68:fc:
0d:a8:f8:97:a7:78:53:ba:56:14:a0:4b:5a:63:a8:
2f:13:40:db:40:c2:54:d5:4a:01:03:b7:94:5e:88:
a0:9b:60:19:3c:08:83:e4:64:e1:06:da:7e:92:7d:
8c:cc:e9:09:68:7f:b7:4d:7b:32:c1:b6:b1:9f:74:
f7:ca:3a:49:23:4f:91:15:60:62:f5:35:a4:28:29:
5a:67:0f:44:4c:90:7d:e1:31:96:06:30:3a:23:16:
b1:1c:be:ed:c0:3d:1a:6a:7d:df:66:f3:d9:2d:1f:
d4:0f:99:f2:91:8a:2a:00:71:98:e3:97:08:33:17:
76:37:78:8f:62:7a:e9:0f:9f:4f:87:27:a7:59:74:
24:bf:e2:96:46:fc:d4:a7:a5:c2:f5:1d:df:40:82:
1a:8b:5a:3b:c1:f9:6d:f4:42:5e:bb:6b:b8:85:1f:
3e:5e:3b:d0:e0:aa:c9:b1:7d:bf:cb:28:59:78:3a:
65:8e:11:5b:cc:2d:e6:57:26:43:1f:6a:00:d0:7c:
a6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8B:E6:C0:89:8C:FF:70:97:B1:37:40:58:8C:6D:99:9F:E9:99:B7
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bc:41:ec:81:c4:c2:c9:9a:d4:1c:e7:cf:dd:14:23:51:17:
a4:ff:ac:1e:2f:99:6e:3e:91:74:6f:61:14:ab:0e:bc:eb:e8:
90:43:96:15:aa:4c:a0:46:d5:e0:2b:6b:4a:60:69:dd:2e:7f:
94:22:54:22:b3:84:b5:c6:5e:69:bd:fb:d4:ba:dc:39:f0:59:
e0:1c:41:ed:dd:39:01:12:0a:c0:a9:d4:af:f9:14:76:27:42:
09:07:33:e2:51:d2:60:fd:15:af:ed:f9:92:9f:ca:01:50:8d:
89:57:e9:b1:cd:cf:db:6c:e8:fa:d0:93:1a:af:31:d6:9c:14:
e7:8a:a2:1f:d7:26:dd:36:4b:4b:02:7a:ce:94:9a:17:16:e7:
04:61:1e:c5:d1:3c:39:35:8c:fc:46:a1:ed:7c:e3:09:cd:85:
3c:4a:1c:d1:e2:8b:d6:4a:32:0f:00:b8:68:70:d6:16:66:8a:
11:ce:e6:c1:ea:57:1b:78:d5:e7:7d:a7:1b:bf:6b:19:4d:c4:
b8:fe:1e:0d:85:bd:2b:2e:53:b2:b5:21:9d:55:13:d1:1d:84:
65:21:a8:ce:e1:e9:5c:79:c2:0e:60:c6:a8:70:71:85:b9:26:
28:4c:f4:52:02:f6:82:7b:b5:13:f0:3a:a9:3e:6e:9a:c9:8a:
6a:e4:b0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:39:59 2026 by rpki-client