Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
File: t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft (raw, json)
Hash identifier: iRSd++wuHZFMQ27ydB+eR8BLwdXYzOOpVBkPzZroqW0=
Subject key identifier: 4C:42:5D:2B:4B:81:00:B3:84:81:63:36:D1:B9:F8:3C:FB:F6:16:AE
Authority key identifier: B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
Certificate issuer: /CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Certificate serial: 019D3A1CC2F78BBD2647A15FE89389140F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
Manifest number: 0793
Signing time: Sun 29 Mar 2026 15:00:56 +0000
Manifest this update: Sun 29 Mar 2026 15:00:56 +0000
Manifest next update: Mon 30 Mar 2026 15:00:56 +0000
Files and hashes: 1: PZBnPdfbJCdgsdJ-b0ZM7yGRxxc.roa (hash: lKGeR/3YCO+JxIhtID6zbVNMC2uzyz/+F4TUSGRB+zg=)
2: t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl (hash: qD0W68nrQpU7IEf4IaNleo+pL50a73UhutUCbiLWycM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:c2:f7:8b:bd:26:47:a1:5f:e8:93:89:14:0f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Validity
Not Before: Mar 29 15:00:56 2026 GMT
Not After : Mar 30 15:00:56 2026 GMT
Subject: CN=4c425d2b4b8100b384816336d1b9f83cfbf616ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:53:22:4c:1f:31:10:fc:a1:17:a4:dc:ad:
e9:fa:f4:cb:e0:48:c3:3f:e0:dd:cc:10:5d:2d:fc:
a8:ab:48:77:06:5f:b3:71:4e:25:d7:f3:46:d1:e6:
2b:e7:19:17:ff:8b:bb:bb:bc:12:b8:d1:54:50:12:
93:59:2a:51:26:90:38:65:fe:91:1d:3e:1f:35:11:
1d:fa:fc:36:1b:cd:d0:c4:09:5f:a2:52:9b:8f:16:
6c:0b:b2:df:f9:ce:df:de:dc:b7:f6:64:c9:78:3e:
5c:e1:3e:bb:ed:60:51:e1:b9:fd:c4:e9:e3:f7:48:
25:8f:37:90:74:65:1d:69:75:10:83:4e:bd:a2:55:
ce:24:13:fb:aa:73:f9:1a:fb:ee:da:1a:8c:27:94:
3e:56:23:45:97:d4:2a:e7:51:b8:e7:77:e0:a0:86:
eb:98:96:6e:ae:88:d9:b8:31:dd:b2:28:d2:38:ff:
84:81:85:d8:ec:89:03:46:b4:e2:45:ea:05:aa:ac:
f3:31:c7:71:61:95:e4:1f:9d:e2:98:bc:9a:cd:07:
4e:63:3b:a1:83:f8:6c:0e:b8:c4:58:3f:fe:f2:21:
48:c5:88:ed:9f:fd:f6:ba:b2:22:9b:f3:2f:ef:04:
d2:93:93:9d:3d:68:4d:ed:a2:fa:8f:bc:d8:06:d5:
fa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:42:5D:2B:4B:81:00:B3:84:81:63:36:D1:B9:F8:3C:FB:F6:16:AE
X509v3 Authority Key Identifier:
keyid:B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e6:59:da:7b:4d:39:7c:3b:ef:5b:e1:e8:42:0f:55:6a:f2:
90:cc:eb:28:47:a4:73:06:44:60:e5:ce:9e:3d:0f:c1:71:89:
19:ed:d6:40:cd:91:08:1e:a7:50:01:ad:fd:a1:8c:25:80:7f:
10:03:d2:09:ef:2c:21:d9:59:c6:03:0c:d2:47:d3:3f:98:b9:
83:f9:ac:36:64:4c:36:dd:23:7d:46:bc:61:93:7c:dc:83:ce:
19:e7:24:e1:21:c3:9d:70:90:75:dc:c1:17:99:28:86:fc:cf:
20:18:8f:d0:74:94:f4:6e:db:b9:f2:70:75:e2:ca:ee:56:84:
60:58:4e:76:87:1b:e4:e3:e1:49:1c:e2:c5:fc:f2:b9:6e:bb:
b7:49:7f:67:06:c5:5f:fe:fe:50:96:84:de:cf:7e:2f:d8:5f:
37:49:bc:f5:65:af:22:2f:5a:2c:91:fd:29:89:8d:ba:72:1f:
a3:d8:ec:89:c6:7a:d2:6b:82:8d:65:8f:53:56:ca:4c:2a:7c:
02:18:8f:bf:63:cf:d2:71:27:97:f1:fa:01:04:4f:5f:65:a2:
7e:82:05:97:9d:42:33:5e:b3:fa:16:74:3f:3c:69:c5:f6:d4:
6b:2e:5b:fd:2e:99:f0:91:89:49:f7:b8:ba:46:7f:87:35:43:
ba:6d:c0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:45 2026 by rpki-client