Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
File: t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json)
Hash identifier: jRrJ5w9Zf5EX4pNmQKXnKjzukG9qsUul/MRXBKrfDiE=
Subject key identifier: 27:2F:EB:74:7F:61:F0:DA:90:5E:93:27:94:38:58:A1:06:24:D1:F1
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 019D37C07D637FDBA6976E77A9332AAB1DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
Manifest number: 18A1
Signing time: Sun 29 Mar 2026 04:00:54 +0000
Manifest this update: Sun 29 Mar 2026 04:00:54 +0000
Manifest next update: Mon 30 Mar 2026 04:00:54 +0000
Files and hashes: 1: 4xhhokGYPFsmhBRT1vQea8P0Hn8.roa (hash: 0+HSxndFh8kDQtQnDwZD2bYMHa+v2whr10ZvzoQDNlg=)
2: MZj_YrNpHHNyxm4tBIi3oXc2Vqc.roa (hash: J42B6M8uvbvqBHYzoglUfGMoE5jRgrE3TAObhro1N94=)
3: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: x9U6Ph7hW8MkwFdBhm7Cv2WUAmNmsXbg5RCqmiArplA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7d:63:7f:db:a6:97:6e:77:a9:33:2a:ab:1d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Mar 29 04:00:54 2026 GMT
Not After : Mar 30 04:00:54 2026 GMT
Subject: CN=272feb747f61f0da905e9327943858a10624d1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6a:cf:b5:99:e8:5b:d5:ec:0e:8c:7a:95:47:
0a:8c:bb:8f:f1:33:e8:26:8d:0e:88:8a:74:02:18:
84:f8:a9:e2:92:0a:8a:df:3e:6a:08:96:71:5e:15:
1c:ee:fb:e7:18:ea:73:14:11:43:76:f3:33:cb:0f:
a4:70:a6:43:cc:29:bf:f4:45:24:08:c1:50:00:51:
c6:36:21:f4:bc:59:a4:1b:42:51:71:03:c3:9f:71:
86:13:94:40:dd:7f:10:b5:5a:18:e2:d2:43:cf:4a:
1d:83:a3:46:91:52:99:b4:79:a3:ea:a0:da:b8:c7:
cf:ea:1f:3b:80:da:24:9c:37:80:26:41:0f:82:69:
8f:68:5a:19:f2:c1:df:fe:6f:b4:a1:6b:13:88:d3:
5c:0f:9a:f7:88:f0:64:32:e4:54:77:28:a0:8e:d2:
fc:4a:73:74:01:4c:a3:61:83:4f:5b:7b:55:40:4a:
af:73:52:6a:03:62:8e:9c:82:78:ca:2c:a7:bd:37:
47:77:3b:25:a2:f5:e2:f4:b9:1f:7b:41:1f:1e:3e:
59:f8:cd:47:2a:12:89:dc:5d:67:b4:00:78:a1:9c:
da:a3:ee:d4:19:bb:34:aa:ea:70:01:24:45:de:d8:
39:16:3f:3d:af:56:fb:67:1c:dd:e1:d1:7b:e6:d9:
f8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2F:EB:74:7F:61:F0:DA:90:5E:93:27:94:38:58:A1:06:24:D1:F1
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:42:d9:87:e7:67:eb:44:c3:6a:fb:c7:86:fa:c7:f2:bc:16:
00:48:25:0d:80:a9:79:f5:66:3d:7e:98:aa:0a:a2:2d:92:c6:
5a:28:ae:f5:4f:13:2d:01:e0:aa:03:d4:77:a3:36:94:58:b8:
5d:c6:26:54:77:9f:a3:39:3b:56:35:16:09:75:9b:ba:55:06:
b7:10:66:f0:7a:80:27:a5:f9:31:a0:3c:2b:ae:61:77:23:73:
fa:71:36:5e:51:3f:d4:0b:c5:46:38:be:54:cd:08:8d:ce:e3:
bb:b3:2f:e8:c4:21:e7:8c:e2:91:fe:6f:91:18:0a:c7:ec:af:
c6:84:c9:82:7c:e3:f1:20:a7:3b:7e:4a:67:b5:e8:6f:db:f1:
e4:d1:e2:c2:33:19:06:00:bd:a8:fd:da:29:e1:1e:13:80:df:
1c:8f:39:6a:7f:09:8f:6b:ef:67:23:45:9b:4e:21:bb:2f:b6:
f2:ed:fe:38:0c:64:1c:d2:6c:3c:51:d2:b3:0e:4b:75:6f:40:
88:78:fa:86:37:5a:52:01:3c:6c:e8:e1:64:9a:dd:07:d1:ab:
d0:3f:0a:1b:8c:64:b4:f6:13:0d:86:4c:23:e6:45:d3:23:ab:
03:34:19:b9:c3:1b:a4:3e:e7:2c:36:87:b8:c8:3f:16:90:ca:
e7:fe:a5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:52 2026 by rpki-client