Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
File: m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json)
Hash identifier: q+G05I/B+Dsm+05NoWytT1EI2xzOCPw92fXcryCtWN4=
Subject key identifier: B0:AD:75:E9:C7:01:E8:C7:26:05:16:6C:04:A1:36:8F:88:49:A0:0E
Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Certificate serial: 019D382E9CEA4C2E0D752F3DE6C8E1D28AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
Manifest number: 1636
Signing time: Sun 29 Mar 2026 06:01:11 +0000
Manifest this update: Sun 29 Mar 2026 06:01:11 +0000
Manifest next update: Mon 30 Mar 2026 06:01:11 +0000
Files and hashes: 1: Fv879_Am10jrA5ouJAPoLdH70T0.roa (hash: KPAB1vwqjlRwv1SDULu1bkWVJKlKimcArRb9moMnmKg=)
2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: eAooF7CEGektd140vozgjvyed4BVaFsfrq+M8YWDW10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9c:ea:4c:2e:0d:75:2f:3d:e6:c8:e1:d2:8a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Validity
Not Before: Mar 29 06:01:11 2026 GMT
Not After : Mar 30 06:01:11 2026 GMT
Subject: CN=b0ad75e9c701e8c72605166c04a1368f8849a00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:68:42:79:90:49:f5:ac:33:b2:a0:99:61:
ed:eb:a7:fe:d2:bf:23:cb:5c:67:d8:44:e5:b2:58:
8c:fa:a9:95:51:40:b2:e6:af:8c:63:e5:d0:ba:63:
93:68:57:db:27:3d:a5:68:d4:cc:e1:64:60:1d:84:
8b:ed:43:55:f3:cb:bf:44:e3:5d:a6:8b:ac:44:0c:
dd:40:e4:0e:0f:3b:0c:13:ef:f5:74:fe:89:cd:a4:
7b:e7:de:a3:6b:77:38:67:0a:49:26:e4:7a:12:c4:
e0:d3:bd:9b:1e:80:a7:6b:62:6f:3c:14:2c:5d:41:
fa:5a:64:3c:10:30:f6:06:0f:a1:43:94:d7:00:1f:
30:0b:d6:10:5d:d1:0b:02:de:1c:df:2e:d3:d2:6d:
bc:c9:15:d3:12:9f:90:6a:fc:d8:fb:e9:6e:f3:71:
da:f3:87:3d:b5:b3:18:ad:fa:e6:bf:06:00:94:f1:
d1:d2:22:6a:9b:d0:85:59:f5:45:64:e4:63:da:20:
1c:49:16:a5:6b:e8:94:81:d2:e2:11:4b:a1:20:c7:
9b:e0:6a:a7:33:39:75:bc:e9:2e:8f:3b:44:8f:cf:
b0:6d:a4:dc:3e:a8:c7:64:f6:5a:b6:69:64:14:95:
1e:4b:ef:9a:77:30:21:0f:aa:6e:bf:66:3f:3a:db:
66:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AD:75:E9:C7:01:E8:C7:26:05:16:6C:04:A1:36:8F:88:49:A0:0E
X509v3 Authority Key Identifier:
keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:57:38:4f:96:38:50:32:a7:03:86:08:02:54:b6:82:5a:16:
85:b5:05:51:61:75:37:28:e4:96:d2:fa:3a:2a:29:f7:6a:f3:
07:27:41:55:cd:26:d5:4e:40:bc:89:75:a6:b4:b0:af:b3:10:
a7:86:3d:ae:d0:59:be:67:6d:5c:51:1c:32:70:10:6a:d4:ba:
5e:6f:27:6b:f7:90:1b:eb:5c:ea:d2:0b:ff:72:cb:2c:b3:41:
e7:72:49:6c:45:fa:9b:80:d4:35:79:5d:5b:f4:a4:ff:f0:c1:
4a:01:36:c7:73:f2:d0:22:5f:29:f3:d7:6b:04:54:8e:2e:d1:
b0:1c:13:02:d0:31:fc:44:be:2d:6c:2c:f0:a5:d0:f3:21:fa:
91:57:74:7f:c7:11:49:ca:94:b0:3e:c9:15:6e:5a:54:a2:cc:
b7:60:68:f8:0c:1c:7c:0a:34:45:f1:58:48:f0:c7:ee:9f:3c:
a5:6d:9f:eb:07:70:42:33:39:a6:ea:72:ff:28:51:24:9f:eb:
67:46:7c:7a:a2:18:f4:19:93:02:37:22:9b:ba:25:af:a5:6b:
24:fb:fd:16:34:e9:fb:17:20:4d:b3:9f:fe:c0:36:c4:9a:60:
cb:d0:7a:36:e7:74:83:7e:15:70:37:97:cc:89:ac:12:8b:71:
91:1f:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:03 2026 by rpki-client