Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
File: n2m9-bvSpFl-Js4gv-E4YkytM9w.mft (raw, json)
Hash identifier: teDhBtN+r8vuZ7jzF+kuLXzjFerYOwYtLroAlXX+VJ8=
Subject key identifier: 7D:D8:40:26:F7:D9:C1:2A:8D:77:7A:5A:FA:50:D5:83:E8:07:E2:F2
Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
Certificate issuer: /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Certificate serial: 019DDA66E836A9D1A6261529BC96F136A97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
Manifest number: 18EC
Signing time: Wed 29 Apr 2026 18:01:10 +0000
Manifest this update: Wed 29 Apr 2026 18:01:10 +0000
Manifest next update: Thu 30 Apr 2026 18:01:10 +0000
Files and hashes: 1: _oRX04Ccp7g8yn6Qn7PqMMD7qgg.roa (hash: y56xKKuiofP4Wvb2d2PYOPDkpzXNerKcJtIazDABM0Y=)
2: cQX5eN2lbhVeUxzV1wzLUCHBV1E.roa (hash: ngo5lXOLVy6FLpzOmrGOPzq70ozWmBI0PvKNWkY2CdE=)
3: n2m9-bvSpFl-Js4gv-E4YkytM9w.crl (hash: fE03jOQ6AuTGDcqsETGaXngMqIEBngEUSUcB3SwoMNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 16:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:66:e8:36:a9:d1:a6:26:15:29:bc:96:f1:36:a9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Validity
Not Before: Apr 29 18:01:10 2026 GMT
Not After : Apr 30 18:01:10 2026 GMT
Subject: CN=7dd84026f7d9c12a8d777a5afa50d583e807e2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:16:31:31:77:16:b7:e0:ae:d2:18:0d:d8:
eb:ca:6c:d3:00:4c:dd:77:2f:5c:ef:ca:80:df:7b:
c7:64:04:96:42:8a:af:13:65:d5:8a:60:e8:fd:d7:
7d:6c:fa:9f:b9:6d:84:d6:59:da:ca:4a:f0:4b:9f:
d0:a0:a4:3b:0b:82:dd:43:ec:0e:89:3c:7b:29:06:
bc:a3:d9:c5:dd:dc:83:44:6c:ac:37:18:37:da:d8:
ac:a1:88:3d:31:10:65:cf:b5:22:b4:a3:38:18:71:
45:b6:ec:40:55:1b:5f:d2:82:42:19:fe:c8:e2:58:
a6:53:09:5d:e0:14:21:f4:69:5b:8a:75:28:ab:ff:
97:54:55:38:27:cc:a3:f6:48:1c:34:41:b4:2c:1b:
ca:ea:a8:92:1a:12:f8:9d:13:e8:eb:47:22:6d:c2:
47:43:35:43:93:4d:bb:b6:7e:b2:03:9b:0d:eb:0b:
02:f7:55:5d:37:b5:ec:9f:cd:60:e7:1a:2d:24:b9:
a4:8c:55:2f:18:3c:3b:5b:2a:9d:e4:44:9a:b0:79:
5f:2c:61:07:90:0c:65:95:cf:72:39:ed:4d:b2:4a:
f5:9f:4d:49:16:06:97:ef:e3:cf:81:76:68:3a:76:
3a:03:1f:9c:49:89:9f:15:3a:b4:71:d5:89:ed:86:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D8:40:26:F7:D9:C1:2A:8D:77:7A:5A:FA:50:D5:83:E8:07:E2:F2
X509v3 Authority Key Identifier:
keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:25:3f:82:9d:8b:8c:09:72:2a:e0:3c:7d:6e:73:18:c9:b4:
45:cb:b6:c6:cc:bc:d9:43:d5:80:83:15:7e:c4:12:8e:a7:07:
e3:8d:e7:dd:0d:ca:77:ae:ac:9b:f2:39:76:d7:99:8f:c0:cf:
04:6e:b1:53:95:1a:1e:fa:62:59:b5:c3:87:b3:29:85:b9:52:
18:11:63:2e:43:29:7e:1f:04:6a:a9:b2:fd:17:74:06:34:82:
c2:11:52:9a:98:f0:58:fe:6f:a2:5c:e3:7f:26:36:fb:fd:5b:
f7:f6:ef:a1:10:42:ff:a7:07:30:dd:17:e6:60:12:3f:16:76:
7e:f5:6d:33:a7:c6:7e:9e:23:cf:65:8d:20:fa:9e:7a:1f:70:
27:b6:6e:5f:dd:11:eb:be:30:45:dd:a0:be:86:53:52:cb:59:
8c:40:56:01:33:39:43:9a:34:2d:b3:5b:af:27:c0:d5:c4:f6:
f8:9d:9a:b0:33:e9:ed:5e:96:4c:8f:23:6b:d4:7d:95:09:65:
02:9e:60:1d:3d:ba:3f:23:74:d0:0d:07:5f:b0:47:c4:ed:4e:
86:32:30:92:af:8f:7b:f7:d7:1b:98:80:60:66:d4:16:5a:d1:
d7:6a:41:4f:85:86:5f:1d:14:58:ba:86:86:f6:4c:e0:33:f3:
74:24:00:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 00:15:14 2026 by rpki-client