Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
File: m3RNp58FMac61vS68IN-k-toAbE.mft (raw, json)
Hash identifier: sAnjkI2Ux8KpF13VRIat1mb5qXrXCuyNP5lcchsHc4s=
Subject key identifier: D8:E7:81:94:90:E7:6C:B7:6D:94:0B:76:D7:23:54:85:7B:56:7B:4B
Authority key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
Certificate issuer: /CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Certificate serial: 019DCF3E2482F8C6FD2373FA221FA1FF62DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
Manifest number: 01AF
Signing time: Mon 27 Apr 2026 14:00:49 +0000
Manifest this update: Mon 27 Apr 2026 14:00:49 +0000
Manifest next update: Tue 28 Apr 2026 14:00:49 +0000
Files and hashes: 1: RGb-rCoDknImAicpKoX_vtBq9Fs.roa (hash: UkIIBaoP+gfi07Ufjwc/M1TNIrnyxcH9oHFTQ2095Lc=)
2: bFYiDJKsGB0ZympkJZ5TjPDffcs.roa (hash: 0Z23FXjNdERF8k8I3emVp0R5JdsnHYRyYZTMKy2BSlY=)
3: m3RNp58FMac61vS68IN-k-toAbE.crl (hash: kZ4nF4/dh3hWw8GmFXeAZu98U5X7n9I+o8xQ8GyEZnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:24:82:f8:c6:fd:23:73:fa:22:1f:a1:ff:62:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Validity
Not Before: Apr 27 14:00:49 2026 GMT
Not After : Apr 28 14:00:49 2026 GMT
Subject: CN=d8e7819490e76cb76d940b76d72354857b567b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:37:93:05:d5:2a:ce:1f:ab:4d:5d:ec:34:
98:ab:f6:56:eb:52:20:41:24:50:8d:c4:14:76:fc:
f5:8d:fe:32:c8:ff:54:29:01:ed:af:42:1e:c4:52:
2a:75:c8:55:dc:9f:c7:5d:93:4b:e2:73:0b:f4:6c:
95:c5:b2:d0:e9:35:da:64:c0:eb:74:d2:73:3a:ea:
90:83:6f:b5:a5:3b:9a:c2:58:4a:aa:50:a5:9a:a6:
51:58:b4:4c:cc:8f:72:34:60:72:05:40:f2:79:10:
53:fc:a0:fb:c5:c2:84:21:50:90:d5:23:95:47:eb:
61:ee:33:00:5a:14:6f:5f:06:b7:bf:de:f3:89:ca:
e3:b4:02:df:e7:31:82:50:a2:89:17:97:26:47:10:
65:9b:c8:2e:dc:b8:aa:3f:08:10:4e:85:bf:97:d5:
4a:ef:a0:e1:23:10:26:4d:c9:66:a1:db:8b:a1:09:
04:07:fc:04:5c:e4:c9:2a:46:49:13:98:3e:92:f7:
00:2a:b4:e8:4b:d0:03:5b:b6:18:ce:47:45:83:f7:
70:d8:d5:a9:fa:a2:14:14:49:be:ab:59:4c:68:e3:
e8:28:06:78:ae:f6:a4:15:a6:c8:2d:41:68:5f:e6:
cc:21:c3:21:cc:04:31:98:f9:c8:37:aa:15:8e:c2:
50:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E7:81:94:90:E7:6C:B7:6D:94:0B:76:D7:23:54:85:7B:56:7B:4B
X509v3 Authority Key Identifier:
keyid:9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:43:d3:2c:31:cf:f1:c0:42:1f:1c:6b:36:da:26:4b:9d:24:
7f:cc:48:eb:21:fa:b1:8a:3e:67:3f:6c:6d:9c:9b:eb:f9:b1:
49:b0:1f:6e:63:51:87:0d:52:b6:00:33:a1:0a:45:1d:09:53:
ab:2a:a6:64:e5:39:68:e3:76:10:30:93:d2:5a:d1:a8:38:0f:
26:97:9c:28:ed:91:26:52:2d:7d:c1:1e:d6:df:9d:2b:47:92:
12:43:9e:9d:67:75:60:c9:6e:ce:a4:8b:45:82:f6:92:f3:63:
89:60:9b:d2:59:6d:6d:56:32:f0:22:8d:15:a1:0a:a9:72:08:
d7:72:cf:ea:d5:64:4d:15:65:88:70:3f:0c:e2:8d:93:d7:1b:
51:3c:ed:fe:50:4f:a8:e5:4b:bb:ca:14:3d:49:e6:6c:7e:01:
fe:3c:c0:fa:b1:92:8c:92:01:90:c7:3c:29:14:e0:e4:c8:fc:
5c:ce:73:13:f1:53:9a:c9:58:5d:f8:ea:0d:82:7b:ab:8e:67:
07:91:b0:5d:d1:ff:ff:47:09:57:b3:2d:84:de:b3:3e:58:b0:
84:98:92:04:c4:88:b1:ac:02:44:fa:7c:8e:08:b8:98:1a:1a:
b8:38:8f:e0:c9:6b:f8:b2:73:c4:bc:94:53:1a:3b:c1:6a:e1:
64:f0:de:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:51:31 2026 by rpki-client