Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/048ce0-dbdc-4831-9af3-12b239972a2a/1/m-v9nqS68ECBnAz9fLNwdIkcNik.mft
File: m-v9nqS68ECBnAz9fLNwdIkcNik.mft (raw, json)
Hash identifier: AOdKw3AgepDSYEx5jF+HxLPE2NCNm/MCAUPt46k9pUM=
Subject key identifier: D9:FF:19:60:98:D6:7B:64:C0:6B:5A:79:DB:CC:F1:DE:3D:A9:8D:25
Authority key identifier: 9B:EB:FD:9E:A4:BA:F0:40:81:9C:0C:FD:7C:B3:70:74:89:1C:36:29
Certificate issuer: /CN=9bebfd9ea4baf040819c0cfd7cb37074891c3629
Certificate serial: 019D3909DFE357C68AD440617B718B85F268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-v9nqS68ECBnAz9fLNwdIkcNik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/048ce0-dbdc-4831-9af3-12b239972a2a/1/m-v9nqS68ECBnAz9fLNwdIkcNik.mft
Manifest number: 2C
Signing time: Sun 29 Mar 2026 10:00:41 +0000
Manifest this update: Sun 29 Mar 2026 10:00:41 +0000
Manifest next update: Mon 30 Mar 2026 10:00:41 +0000
Files and hashes: 1: m-v9nqS68ECBnAz9fLNwdIkcNik.crl (hash: EYyQECzNs0IVb3Gio45AV/3zy9LxcoPVy4LXV5zOY+E=)
2: vRygvOqNhI2wTpuqzdq5oBhm_zo.roa (hash: XbSnGt0avPcDQ8m+LfCZlA/QR8KLg0tsMoJgvEji9Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/048ce0-dbdc-4831-9af3-12b239972a2a/1/m-v9nqS68ECBnAz9fLNwdIkcNik.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/048ce0-dbdc-4831-9af3-12b239972a2a/1/m-v9nqS68ECBnAz9fLNwdIkcNik.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-v9nqS68ECBnAz9fLNwdIkcNik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:df:e3:57:c6:8a:d4:40:61:7b:71:8b:85:f2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bebfd9ea4baf040819c0cfd7cb37074891c3629
Validity
Not Before: Mar 29 10:00:41 2026 GMT
Not After : Mar 30 10:00:41 2026 GMT
Subject: CN=d9ff196098d67b64c06b5a79dbccf1de3da98d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:a0:1e:b6:95:53:7a:48:7d:bd:d2:82:41:
91:f8:65:ab:aa:46:00:dd:bc:81:cc:28:82:d6:45:
3b:48:27:36:5d:51:e9:61:0c:f0:8a:d3:bb:4c:2a:
64:ca:f0:4e:ad:1c:22:c7:b7:58:e5:3e:61:9b:5d:
b4:78:70:ed:39:bd:b2:92:e7:c2:9b:3d:d0:de:07:
eb:eb:88:b0:8a:e4:b4:22:59:1f:2d:f8:3d:63:fd:
d9:49:64:af:47:3f:9e:4b:04:f1:43:16:18:5b:f7:
c8:89:6c:22:0b:fb:92:8a:cc:4d:de:b2:c7:d2:3a:
20:04:d3:ca:77:3c:63:da:6e:31:d2:2b:33:d5:c9:
d3:d3:18:a1:ea:b0:33:b5:6f:a5:46:ae:a4:11:9f:
49:1d:6d:45:62:af:32:83:50:0d:ce:ab:ef:93:ce:
1b:dc:0a:1a:01:a5:c9:96:78:35:f8:02:64:f1:51:
b2:e6:c2:1a:a4:12:16:3f:fa:44:52:9e:aa:ed:93:
ba:cb:92:c2:c1:0f:ad:cb:6b:3c:7b:f6:0b:9a:4a:
30:ef:dd:73:b8:99:3f:43:aa:81:6d:f1:9f:3a:da:
b7:3c:4a:6d:b9:85:f1:5b:52:d9:a6:37:95:68:8a:
5d:bc:2e:2a:eb:7d:18:78:8c:f2:21:f2:05:fe:da:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FF:19:60:98:D6:7B:64:C0:6B:5A:79:DB:CC:F1:DE:3D:A9:8D:25
X509v3 Authority Key Identifier:
keyid:9B:EB:FD:9E:A4:BA:F0:40:81:9C:0C:FD:7C:B3:70:74:89:1C:36:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-v9nqS68ECBnAz9fLNwdIkcNik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/048ce0-dbdc-4831-9af3-12b239972a2a/1/m-v9nqS68ECBnAz9fLNwdIkcNik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/048ce0-dbdc-4831-9af3-12b239972a2a/1/m-v9nqS68ECBnAz9fLNwdIkcNik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f3:fc:fd:62:9b:ba:74:ab:58:22:89:8b:f5:7d:16:f2:10:
8f:1b:07:b0:88:d4:3d:5a:fc:ea:3b:9b:fc:ca:52:fb:4c:b8:
e4:9f:08:18:f3:21:6f:4c:17:94:55:26:7e:1f:7c:90:88:75:
74:88:71:a9:d6:80:16:11:22:aa:43:39:4c:48:6f:d8:b4:a6:
20:d2:b2:1d:65:7d:6e:f0:2e:65:b4:8a:b6:43:b0:99:63:cf:
81:7d:aa:7a:21:b0:f2:a5:09:66:0e:34:ef:ea:46:0a:cf:40:
a3:82:28:0b:91:3b:7a:a2:4b:b1:ff:32:75:0b:62:d6:70:4d:
1f:43:ff:46:24:59:8c:15:bc:7c:b5:b1:1e:73:54:2f:3b:82:
68:69:f3:ec:24:3e:78:3d:b0:15:96:46:f9:7b:8d:b7:30:d4:
7a:d8:f6:ae:3f:6e:01:56:bb:15:99:b3:64:6e:93:95:c7:a9:
2e:b2:85:31:6e:19:aa:89:82:c9:87:57:7c:09:e1:c0:81:da:
3b:49:9a:e2:ad:e1:0d:8b:f9:ba:6b:be:2d:6b:a1:2e:ed:e9:
21:30:71:2c:23:1c:e6:f7:9d:b1:48:11:8d:24:2d:1c:68:ba:
cb:ee:2a:08:59:55:9a:53:68:80:3c:ef:16:ab:90:de:95:14:
2a:52:2a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:40 2026 by rpki-client