Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.mft
File: n6smdTuJXn8_2bhglc4E7j4TLMk.mft (raw, json)
Hash identifier: gjBzPaWW/1dPYQRQyGoEbN5RPCAc1g+lxn3ZUhrKVZc=
Subject key identifier: 14:14:1D:35:8F:0E:9A:E9:8A:07:10:D3:06:24:C8:0D:69:51:9B:C3
Authority key identifier: 9F:AB:26:75:3B:89:5E:7F:3F:D9:B8:60:95:CE:04:EE:3E:13:2C:C9
Certificate issuer: /CN=9fab26753b895e7f3fd9b86095ce04ee3e132cc9
Certificate serial: 019CC75085CB0E9299883418AF3D82C81D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6smdTuJXn8_2bhglc4E7j4TLMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.mft
Manifest number: 0140
Signing time: Sat 07 Mar 2026 08:01:08 +0000
Manifest this update: Sat 07 Mar 2026 08:01:08 +0000
Manifest next update: Sun 08 Mar 2026 08:01:08 +0000
Files and hashes: 1: VRtorJZHOLzlaL68HjLyyfhrnjM.roa (hash: 0WG5QGGc5ZdP1oBMABkKf9EHRt8+XEO8wLQn99x+rtA=)
2: n6smdTuJXn8_2bhglc4E7j4TLMk.crl (hash: fvd0WhX5zKLGcpnid7l1NtFq1JbdUR1ZX1AEPm621X8=)
3: nvBQcelYduDd4tm56B5pe90gDS8.roa (hash: 9vccNXYdmTE6+uGQ5rqwpKVFpAfbWEPJIhtoTGi6STQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6smdTuJXn8_2bhglc4E7j4TLMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:50:85:cb:0e:92:99:88:34:18:af:3d:82:c8:1d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fab26753b895e7f3fd9b86095ce04ee3e132cc9
Validity
Not Before: Mar 7 08:01:08 2026 GMT
Not After : Mar 8 08:01:08 2026 GMT
Subject: CN=14141d358f0e9ae98a0710d30624c80d69519bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:a8:da:92:16:9a:cb:4b:5e:e0:7e:52:04:
23:a9:37:10:3b:b4:63:2f:25:60:2d:86:9e:b9:f9:
59:98:2d:de:bf:6f:be:c4:b9:d6:6e:61:ba:cb:ed:
da:88:be:79:c5:f4:6b:48:6a:8a:d1:8f:fc:61:d7:
fd:39:66:97:74:e3:d8:ae:8a:6d:0d:76:ba:44:2b:
23:bf:21:1c:8e:62:3e:19:f5:9e:ae:2d:63:f4:0f:
a8:11:12:d8:8b:f9:59:34:b4:c5:75:ba:6e:b1:00:
11:af:36:ca:8a:7a:75:63:0b:d1:2d:51:50:df:93:
8c:d6:13:1c:08:01:3a:b5:8d:9f:9b:69:04:e4:4a:
b7:0f:ab:b3:00:7c:45:7f:55:ea:d1:77:63:29:df:
a6:65:e9:c4:1e:5a:3c:05:67:f6:36:19:9a:72:bc:
72:36:6c:39:22:99:d7:5b:f2:c5:37:11:b0:fa:d5:
9b:db:2a:b5:39:c1:a8:6d:bd:b4:b0:66:76:0f:4b:
2f:f1:8b:32:dd:d5:e0:10:f3:7e:03:79:d4:0b:64:
25:71:1a:0c:78:43:08:84:18:ea:b1:96:8d:00:d2:
17:75:50:ac:a1:ba:67:67:21:8d:c8:55:ce:48:c4:
13:ed:9c:8d:eb:c2:64:06:1b:dd:a9:0d:8d:89:ff:
0b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:14:1D:35:8F:0E:9A:E9:8A:07:10:D3:06:24:C8:0D:69:51:9B:C3
X509v3 Authority Key Identifier:
keyid:9F:AB:26:75:3B:89:5E:7F:3F:D9:B8:60:95:CE:04:EE:3E:13:2C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6smdTuJXn8_2bhglc4E7j4TLMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:33:0e:c9:ba:e9:e8:1f:27:95:93:32:6e:be:20:ae:b3:02:
9e:9a:9b:07:d1:42:21:25:bd:ba:b2:ab:07:1f:47:17:e7:a6:
69:6f:09:92:52:44:46:bb:e0:bc:3a:f0:52:e6:c3:13:29:73:
29:66:2d:bf:0d:df:f5:19:3e:04:d8:fb:b7:e2:c1:21:7d:4c:
3e:be:ae:5e:ac:32:e2:72:92:64:c2:48:fc:5a:f6:f8:8d:0c:
99:6e:97:67:2d:49:97:4b:fa:5a:2b:65:54:c0:26:8a:9d:bf:
4b:46:ab:20:e7:00:68:ac:b4:f5:72:52:d7:3f:42:0e:e3:11:
ce:01:23:e9:d8:cd:0d:43:64:05:c0:31:44:68:7d:e4:dd:67:
d8:6c:d7:4c:45:6d:ad:38:c9:7a:fa:0b:58:0e:ad:18:dc:ec:
c1:f5:da:08:a7:b1:f1:83:e5:1f:78:39:88:f1:da:5d:54:d8:
56:82:32:ef:59:86:65:9a:98:1d:14:2f:f8:a7:5f:5f:24:b6:
5f:5a:69:8b:17:26:db:39:67:89:72:1b:4c:d8:6a:35:ca:48:
ef:38:f6:74:3d:66:74:ae:dc:4e:3e:0c:21:4c:55:01:18:8e:
ec:25:9d:6f:4c:5d:f4:80:ab:4b:8c:c9:b7:10:7a:28:83:d2:
87:d1:93:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 15:55:23 2026 by rpki-client