Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
File: m3RNp58FMac61vS68IN-k-toAbE.mft (raw, json)
Hash identifier: TosKhwRb5fRbcy4DgSttJv/Zl/c7yFjfedDL7BaCEts=
Subject key identifier: 89:7E:E7:54:44:77:F1:CB:CC:79:D5:BC:AD:1D:A8:DE:43:91:5D:2F
Authority key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
Certificate issuer: /CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Certificate serial: 019CDBE91BA95DA8785288E4BC6F3C17EC25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
Manifest number: 0131
Signing time: Wed 11 Mar 2026 08:00:13 +0000
Manifest this update: Wed 11 Mar 2026 08:00:13 +0000
Manifest next update: Thu 12 Mar 2026 08:00:13 +0000
Files and hashes: 1: RGb-rCoDknImAicpKoX_vtBq9Fs.roa (hash: UkIIBaoP+gfi07Ufjwc/M1TNIrnyxcH9oHFTQ2095Lc=)
2: bFYiDJKsGB0ZympkJZ5TjPDffcs.roa (hash: 0Z23FXjNdERF8k8I3emVp0R5JdsnHYRyYZTMKy2BSlY=)
3: m3RNp58FMac61vS68IN-k-toAbE.crl (hash: C9NrOiEa2uVo6EI94KsS6EtnXTfn3ipYYjnKn0FJn5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:e9:1b:a9:5d:a8:78:52:88:e4:bc:6f:3c:17:ec:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Validity
Not Before: Mar 11 08:00:13 2026 GMT
Not After : Mar 12 08:00:13 2026 GMT
Subject: CN=897ee7544477f1cbcc79d5bcad1da8de43915d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:bc:27:3b:3f:97:83:46:8f:a3:5f:92:68:
2b:1d:19:f3:39:7e:39:0e:26:e3:ec:e4:63:a6:50:
fd:5d:87:5f:f1:df:be:d5:45:a3:f4:df:a8:86:66:
36:8c:1d:f2:dc:ed:77:55:9c:e0:38:2b:c1:e6:23:
9d:40:65:fb:ad:ad:d8:a8:1e:e6:8f:e7:ed:e0:a4:
06:39:74:b1:cf:34:e5:51:9d:4f:53:b3:f9:61:12:
60:dd:25:8f:e4:a2:7b:f9:01:86:a3:fa:a8:69:1a:
34:6d:05:07:c8:bc:ae:16:bd:65:11:a9:e2:96:1e:
3a:c7:95:a1:73:f9:fe:0e:e9:c0:05:54:ae:ec:d1:
c8:b4:5e:36:4b:99:f8:ba:f7:7d:3f:50:27:fe:7b:
56:48:9f:5b:dd:c5:6a:21:e0:a6:28:58:fb:23:16:
f6:48:52:08:60:80:bb:ca:8c:48:f9:b2:d5:ab:8c:
85:58:69:30:b6:b9:d1:c2:fb:30:96:69:cc:fd:5e:
29:33:ee:66:c2:5d:04:69:0a:99:39:be:c2:67:ba:
7c:a0:dd:b7:47:eb:59:4d:6a:c6:2d:26:6e:b2:d7:
d5:25:b0:38:2e:60:d1:30:e8:27:67:1e:24:ed:f1:
09:72:50:a9:19:96:d4:dd:98:48:af:b4:e8:9a:31:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7E:E7:54:44:77:F1:CB:CC:79:D5:BC:AD:1D:A8:DE:43:91:5D:2F
X509v3 Authority Key Identifier:
keyid:9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a9:7a:d8:a9:b1:17:1c:26:fd:62:bb:33:f8:5f:f4:06:bf:
04:9f:fc:fb:54:df:e7:2b:65:93:a7:9f:e0:01:46:b5:96:b2:
e9:12:f5:e7:3b:cd:bb:a4:2b:2e:ef:87:35:06:97:df:e0:e7:
c5:c7:ab:1a:be:c9:92:34:54:e8:60:b4:9d:04:ea:4f:c2:90:
c7:bb:a8:ee:d8:35:66:e4:3d:b8:e3:30:66:a7:02:2f:fb:09:
38:4a:ca:9c:8b:14:27:cb:7d:fe:9a:0e:6d:2c:67:f0:14:de:
3f:41:53:ac:3e:a1:23:91:49:bb:44:2d:f7:45:93:73:65:29:
b5:f1:33:db:3a:d1:40:6f:18:2d:22:88:38:a9:0c:8b:0b:40:
21:96:25:47:d5:33:9f:31:78:7c:c7:b1:57:08:cd:1e:7d:b1:
f0:fd:5f:00:7e:6a:a3:8d:ad:68:52:df:a5:1e:7b:0a:fe:5a:
5c:3f:79:59:80:61:28:c4:7d:e3:38:3d:23:24:37:c0:cf:50:
82:89:26:c0:14:c4:05:2d:e8:a9:f3:eb:42:27:ad:23:bf:e3:
bd:93:57:76:b0:a4:87:1b:ce:19:4a:9d:78:0d:c1:fc:bd:eb:
c0:0b:08:bc:57:b6:38:a1:01:2c:1e:17:84:b1:06:aa:84:85:
33:f6:45:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 11:17:49 2026 by rpki-client