Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
File: m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json)
Hash identifier: ekD2TdwGQuYDSB8bQqdzTlh+MkUNiVBqb4KSJs7RgsE=
Subject key identifier: 18:8E:B0:56:FE:42:37:24:DA:21:89:06:7A:1F:CD:FE:08:F1:66:40
Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
Certificate issuer: /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Certificate serial: 019D3977CF6776CE9261E851AB905CA2E7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
Manifest number: 0E91
Signing time: Sun 29 Mar 2026 12:00:46 +0000
Manifest this update: Sun 29 Mar 2026 12:00:46 +0000
Manifest next update: Mon 30 Mar 2026 12:00:46 +0000
Files and hashes: 1: D4KKAq0ahmeZ20BwgX9kW7RnziE.roa (hash: ZoGSRKDSzROcjYhMYpND74w5OQoC/iSALsUjVAn5Y+U=)
2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: KO+w7tGhENlba0icQGTlT/sb8GKko65Kk0PoXJMTPs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:cf:67:76:ce:92:61:e8:51:ab:90:5c:a2:e7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Validity
Not Before: Mar 29 12:00:46 2026 GMT
Not After : Mar 30 12:00:46 2026 GMT
Subject: CN=188eb056fe423724da2189067a1fcdfe08f16640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:20:c1:7b:0a:4b:5d:4d:71:29:8c:40:7d:
b4:02:d3:f6:93:0c:40:d8:6f:8c:37:6b:bc:fa:63:
a6:ba:f9:27:7b:49:2d:3b:c7:fc:d3:ce:f4:ea:66:
01:e4:ae:f1:19:83:58:c2:14:26:11:f7:be:b5:ee:
2f:29:8c:4e:e9:cd:5c:95:52:dd:a6:54:90:9f:8b:
a8:30:5b:f4:fe:56:db:c3:da:92:65:c5:6a:13:d3:
23:26:f9:7c:3b:d4:f8:29:fc:bb:ef:78:95:8c:38:
19:81:79:1f:b0:65:4e:e2:51:b4:9c:59:6b:c7:1b:
9c:e6:b3:ad:c0:94:ee:d5:cd:31:00:3c:6a:24:a7:
09:c5:f5:45:51:ae:23:62:29:58:4e:0b:30:8f:be:
1c:12:6e:3a:4c:d3:f8:c9:42:37:30:0a:07:d3:38:
d9:0a:81:9f:89:51:41:a2:56:ed:0f:2c:89:fb:89:
ae:d7:b6:e0:9c:aa:b1:5a:dd:6e:39:a5:9e:85:45:
e4:5c:26:3a:77:10:32:7b:f2:fc:b8:a9:04:95:9d:
36:db:80:28:77:6f:78:e8:99:95:84:17:5e:c5:8f:
5b:92:2b:1b:44:5c:d7:75:e8:e2:49:bd:9c:f4:0e:
08:d5:9c:dc:39:54:ef:35:83:72:a4:31:93:e8:05:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8E:B0:56:FE:42:37:24:DA:21:89:06:7A:1F:CD:FE:08:F1:66:40
X509v3 Authority Key Identifier:
keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:51:00:61:76:4c:e9:51:be:0f:7f:eb:7b:41:64:8e:bf:77:
02:73:08:8c:e7:0e:2f:41:59:f4:7d:7d:e4:ba:fc:9e:12:04:
02:c2:cb:e0:65:08:67:88:e7:c5:a7:c4:ca:79:55:51:d0:fb:
10:37:0d:6a:27:b6:59:66:ee:b2:b1:03:f6:dd:08:bf:aa:fa:
c0:31:f6:70:f6:c3:bb:04:09:9c:ba:fb:0e:b0:9d:e9:c8:e9:
9d:35:41:03:e1:ff:83:bb:f7:e1:a8:6c:4a:f4:4f:5e:85:9b:
4b:1a:e0:ad:96:ec:ff:ec:19:7b:30:cb:c9:29:a2:17:f5:a1:
f3:f8:fd:d0:5e:92:f0:dd:60:68:86:bf:ab:34:6d:3d:15:74:
58:1b:d5:39:76:c4:e0:08:3d:70:50:c0:84:28:5c:ee:dc:51:
db:0c:4d:21:b1:95:9c:cf:4f:aa:cb:13:0e:d1:6b:74:62:91:
20:4a:75:96:6d:b0:55:d2:09:36:2d:02:1e:7a:9b:02:69:e5:
70:a7:c3:94:53:cc:44:3a:ca:4c:d3:89:66:83:b5:52:e2:9d:
f0:f7:c9:ef:fd:53:56:90:9d:93:e2:13:3e:94:63:30:28:39:
33:0a:10:ae:27:17:62:59:80:95:ed:67:8f:0a:1f:0e:a0:99:
75:a0:20:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d89nds6SYehRq5Bcouf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliN2E2MmU3NWUwZWM5MmJiMWRlZjFlMTk1NWY3NDlmZmQ0
NTUwNzIwHhcNMjYwMzI5MTIwMDQ2WhcNMjYwMzMwMTIwMDQ2WjAzMTEwLwYDVQQD
EygxODhlYjA1NmZlNDIzNzI0ZGEyMTg5MDY3YTFmY2RmZTA4ZjE2NjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVMgwXsKS11NcSmMQH20AtP2kwxA
2G+MN2u8+mOmuvkne0ktO8f808706mYB5K7xGYNYwhQmEfe+te4vKYxO6c1clVLd
plSQn4uoMFv0/lbbw9qSZcVqE9MjJvl8O9T4Kfy773iVjDgZgXkfsGVO4lG0nFlr
xxuc5rOtwJTu1c0xADxqJKcJxfVFUa4jYilYTgswj74cEm46TNP4yUI3MAoH0zjZ
CoGfiVFBolbtDyyJ+4mu17bgnKqxWt1uOaWehUXkXCY6dxAye/L8uKkElZ0224Ao
d2946JmVhBdexY9bkisbRFzXdejiSb2c9A4I1ZzcOVTvNYNypDGT6AXFYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiOsFb+Qjck2iGJBnofzf4I8WZAMB8GA1UdIwQY
MBaAFJt6YudeDskrsd7x4ZVfdJ/9RVByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTIt
MDIwZmM2ODEzMTIxLzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTItMDIwZmM2ODEzMTIx
LzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1EAYXZM
6VG+D3/re0Fkjr93AnMIjOcOL0FZ9H195Lr8nhIEAsLL4GUIZ4jnxafEynlVUdD7
EDcNaie2WWbusrED9t0Iv6r6wDH2cPbDuwQJnLr7DrCd6cjpnTVBA+H/g7v34ahs
SvRPXoWbSxrgrZbs/+wZezDLySmiF/Wh8/j90F6S8N1gaIa/qzRtPRV0WBvVOXbE
4Ag9cFDAhChc7txR2wxNIbGVnM9PqssTDtFrdGKRIEp1lm2wVdIJNi0CHnqbAmnl
cKfDlFPMRDrKTNOJZoO1UuKd8PfJ7/1TVpCdk+ITPpRjMCg5MwoQricXYlmAle1n
jwofDqCZdaAgtQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:37 2026 by rpki-client