Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
File: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft (raw, json)
Hash identifier: iNhladQfq8iD94jk3ERwX+0qTZRw1I9elV0H5+tL9hc=
Subject key identifier: 2B:B4:23:5D:0D:51:4C:0F:B2:61:41:8B:D5:23:80:18:C1:96:66:B6
Authority key identifier: 9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
Certificate issuer: /CN=9b792de70f33b82882542bef23b18da97538ca04
Certificate serial: 019D389C05669E117D69C7F4A67FD017442D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
Manifest number: 1695
Signing time: Sun 29 Mar 2026 08:00:42 +0000
Manifest this update: Sun 29 Mar 2026 08:00:42 +0000
Manifest next update: Mon 30 Mar 2026 08:00:42 +0000
Files and hashes: 1: G2OQOrRbStQFRQnBFH5JsZK3fzk.roa (hash: J+Ruik9jZ8APiFx+KnGjdD7/sHBg8DbjFfn6BOTSsX4=)
2: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl (hash: +biZtxxp7QrMZzsFeGGM3gsm2cCf/O+LQYnBC+ywnCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:05:66:9e:11:7d:69:c7:f4:a6:7f:d0:17:44:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b792de70f33b82882542bef23b18da97538ca04
Validity
Not Before: Mar 29 08:00:42 2026 GMT
Not After : Mar 30 08:00:42 2026 GMT
Subject: CN=2bb4235d0d514c0fb261418bd5238018c19666b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:b7:49:f0:b4:20:62:58:6c:1e:73:b6:e6:
a5:12:bf:41:9e:69:54:5d:c4:3c:2c:51:cd:37:66:
2e:be:b1:1f:cd:11:ad:ba:5b:34:43:1e:f2:00:d3:
2b:c3:f8:f7:98:50:09:34:2d:4e:d3:8e:2e:eb:d4:
a6:68:74:86:72:2e:d4:56:75:b3:df:f5:58:ad:2f:
0e:4e:4b:ab:7e:05:9e:dd:0a:32:c8:36:4d:c3:45:
a5:e4:19:4f:8b:f4:de:73:e2:17:3d:b4:da:f0:b7:
fe:8f:42:7e:f9:fa:e9:bb:d2:1e:b3:95:4b:b3:13:
aa:f0:8a:31:4e:f7:8c:04:85:ba:e9:72:9d:90:c1:
48:e0:df:21:56:20:36:83:b6:a4:d1:08:82:df:4a:
06:3b:94:9e:d2:cb:0f:fe:da:9f:35:3d:7f:df:c2:
27:8c:20:45:45:06:a7:de:d0:06:df:da:a8:cb:32:
10:06:a6:ff:94:7c:e2:49:f9:a6:d4:8e:73:01:64:
68:53:b9:fd:78:c1:6e:0e:d7:3e:e1:e2:d1:9e:1b:
b6:36:c1:26:af:61:10:27:ba:d0:02:82:78:df:05:
9e:82:87:be:73:a3:83:ba:f1:78:17:d5:f4:ba:aa:
86:0c:83:ee:84:49:6d:97:41:c5:97:69:68:c2:35:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B4:23:5D:0D:51:4C:0F:B2:61:41:8B:D5:23:80:18:C1:96:66:B6
X509v3 Authority Key Identifier:
keyid:9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:14:7d:55:be:1e:1a:8b:d1:03:6b:20:0a:7b:1e:7f:c0:1a:
b6:f5:5b:5e:64:4b:ef:0d:30:5e:d2:6a:ee:25:ee:10:07:09:
21:75:65:1c:ce:75:4e:b1:2d:b9:c7:db:e4:05:d4:5d:f7:c6:
ab:69:64:b6:c1:69:32:4c:66:10:22:00:63:49:9f:1d:bc:63:
75:64:73:05:39:f6:fa:32:6f:89:c6:dc:65:c4:27:42:cd:cb:
77:2a:e8:36:bb:3e:4c:37:db:87:5e:52:3b:57:7a:a4:d5:fb:
fa:de:70:8e:6d:87:ba:6f:1b:d2:b5:c0:9c:14:1b:b7:d5:29:
c7:7d:30:b2:5f:b9:71:3e:db:71:30:ff:0c:40:68:9b:07:f8:
a5:1f:90:e8:c0:9d:d6:5c:67:4f:30:5b:46:86:9d:93:2f:57:
a8:82:9b:3e:f8:89:66:ae:be:1e:87:78:2e:a4:72:5b:6f:5a:
b7:37:56:26:d2:6c:bf:96:7c:0f:fc:90:7f:c3:00:86:1d:bd:
1b:0d:9a:20:ff:d4:f2:c8:ba:6a:7b:65:f5:71:13:bb:c8:3e:
38:05:43:2e:63:16:44:0d:1b:22:6a:81:6e:b6:0d:0b:e2:cb:
9c:cc:24:c8:76:91:61:52:ad:78:78:cb:20:48:da:bc:d0:ee:
e7:a4:85:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:52 2026 by rpki-client