Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
File: Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft (raw, json)
Hash identifier: ar777uLR1Wjff/w95gZQpvIw4BJsbCBXzpV8kXua10E=
Subject key identifier: BA:83:F1:27:56:48:4A:C6:9F:F2:04:84:92:5E:09:F0:3A:62:6D:E2
Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
Certificate issuer: /CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Certificate serial: 019CE711DCDCFA911FBE1352F4DC94198312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
Manifest number: 1080
Signing time: Fri 13 Mar 2026 12:00:33 +0000
Manifest this update: Fri 13 Mar 2026 12:00:33 +0000
Manifest next update: Sat 14 Mar 2026 12:00:33 +0000
Files and hashes: 1: CjdBStXrlfMB8_0msr0_VBwTlrg.roa (hash: p0sKbno7WxKWiknoi9HV1ezlNFfZBJcIz6KwtQieQwM=)
2: Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl (hash: xNSRxwnhxR6rwkaCCZMt9/Am8y0Pc5nDV1C8TrEDG6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:11:dc:dc:fa:91:1f:be:13:52:f4:dc:94:19:83:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Validity
Not Before: Mar 13 12:00:33 2026 GMT
Not After : Mar 14 12:00:33 2026 GMT
Subject: CN=ba83f12756484ac69ff20484925e09f03a626de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:c5:7d:11:a4:43:cb:8a:c6:5f:16:5e:99:
dd:59:4e:ab:12:af:d5:ad:1a:9f:02:a0:27:a2:73:
ec:02:7d:4d:16:a1:f5:5d:8d:33:6c:26:51:01:36:
99:dc:29:85:2f:28:bd:04:18:5b:71:c2:f1:1f:9b:
de:27:9e:b1:54:18:1c:a3:29:8a:52:4d:17:28:aa:
ea:c3:3c:9d:96:f7:75:f4:8c:7a:2f:13:a4:f8:9f:
bb:99:64:38:a3:4a:d5:1c:2b:14:06:e3:34:00:55:
06:a9:f7:bb:4a:91:3e:e0:8d:c8:2a:fa:3d:21:9a:
2e:7d:0b:bc:39:42:fb:f3:5f:c2:a8:bf:9d:71:ba:
c3:27:30:52:98:ad:a5:03:14:06:25:1c:60:a9:cd:
3b:d5:d9:36:bc:d1:35:a2:ca:3c:20:09:72:d7:9b:
8d:fc:47:5a:f9:26:22:b1:ad:f3:68:f8:06:1f:e2:
f1:d0:71:e8:42:81:c9:bf:9c:80:3a:43:d5:3c:9d:
1f:a6:b7:ef:47:fc:d0:8f:c6:8a:e3:4d:ec:9b:a2:
66:01:0b:a8:32:01:31:ed:dd:2d:d9:86:e2:0a:17:
94:bf:aa:6a:b1:f6:c6:72:3e:4e:b9:b1:bc:7c:98:
4a:f7:35:74:52:b4:0e:50:15:7c:92:54:a5:a9:9c:
f3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:83:F1:27:56:48:4A:C6:9F:F2:04:84:92:5E:09:F0:3A:62:6D:E2
X509v3 Authority Key Identifier:
keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1a:b0:f2:d9:6c:38:c7:a3:27:7b:38:a5:03:28:de:bd:70:
fb:cb:e4:4c:b2:79:8c:ff:6f:b1:ca:12:ec:aa:dc:a6:07:24:
5a:2c:b3:36:e2:15:ab:c6:22:60:64:3d:a3:d3:8a:51:08:f0:
85:c4:96:45:1d:4f:63:ca:58:ed:a2:13:3e:98:63:ee:d2:e4:
b6:fa:d4:67:9d:5e:35:37:70:4d:56:85:37:c4:a6:eb:87:9d:
c5:f5:d9:8f:23:90:19:65:04:ec:cf:e5:fc:08:53:f5:52:f0:
f0:73:f2:bd:9e:e8:c3:ee:8e:fa:b1:71:27:27:84:0e:24:9b:
a6:03:01:71:63:4e:16:ec:68:4b:b9:7e:fd:72:36:ca:29:8f:
72:2c:42:25:ed:db:d6:0b:3c:4d:3e:55:06:46:e4:65:27:f5:
be:56:91:ec:ce:b8:8e:1c:8b:70:b2:a9:e2:e8:16:70:6d:58:
67:dc:7d:40:73:a0:98:d6:bc:58:8d:d1:84:aa:78:fb:55:55:
e7:7f:e8:05:3e:1c:a3:73:fd:4d:00:e4:f4:7e:58:ad:47:10:
3f:78:1e:9b:3b:28:a3:aa:55:d6:f4:d8:66:a8:54:ae:cf:11:
bf:43:f6:d9:9d:64:8c:e3:ab:57:2c:ec:ad:48:23:7e:fa:26:
5b:f5:95:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:24:55 2026 by rpki-client