Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bf3036-f3df-48ce-9a0a-8566166dfcc2/1/M2K_8sxJfwtSHIJUoS69TjTlK00.mft
File: M2K_8sxJfwtSHIJUoS69TjTlK00.mft (raw, json)
Hash identifier: hN1U2KrpqeSkP/HthMy6ErYS9PPJZV+eo3uogiSY0aU=
Subject key identifier: C3:91:58:23:CD:F2:BF:39:2C:81:AC:EB:2F:FD:27:21:68:BF:3B:CD
Authority key identifier: 33:62:BF:F2:CC:49:7F:0B:52:1C:82:54:A1:2E:BD:4E:34:E5:2B:4D
Certificate issuer: /CN=3362bff2cc497f0b521c8254a12ebd4e34e52b4d
Certificate serial: 019D39099ED3C129BF6620EF84132AA792CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2K_8sxJfwtSHIJUoS69TjTlK00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bf3036-f3df-48ce-9a0a-8566166dfcc2/1/M2K_8sxJfwtSHIJUoS69TjTlK00.mft
Manifest number: 57
Signing time: Sun 29 Mar 2026 10:00:24 +0000
Manifest this update: Sun 29 Mar 2026 10:00:24 +0000
Manifest next update: Mon 30 Mar 2026 10:00:24 +0000
Files and hashes: 1: M2K_8sxJfwtSHIJUoS69TjTlK00.crl (hash: fR/H7e7mmpzZqtaqj7vnvjV9CVlQE0OllFDuJerB/V8=)
2: dRnQup6ENsOnclr1PcgcIp0tL8g.roa (hash: o5bs9yh/4DZ5CC4/08k8apbs3okw9hIOvvAwRqUJ99c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bf3036-f3df-48ce-9a0a-8566166dfcc2/1/M2K_8sxJfwtSHIJUoS69TjTlK00.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/bf3036-f3df-48ce-9a0a-8566166dfcc2/1/M2K_8sxJfwtSHIJUoS69TjTlK00.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2K_8sxJfwtSHIJUoS69TjTlK00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:9e:d3:c1:29:bf:66:20:ef:84:13:2a:a7:92:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3362bff2cc497f0b521c8254a12ebd4e34e52b4d
Validity
Not Before: Mar 29 10:00:24 2026 GMT
Not After : Mar 30 10:00:24 2026 GMT
Subject: CN=c3915823cdf2bf392c81aceb2ffd272168bf3bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:ed:b1:88:14:70:78:ae:52:58:68:31:be:
ed:ba:83:23:69:00:c8:26:3c:d9:f0:a9:0b:9b:a7:
90:69:a8:71:01:53:be:a1:5a:15:37:00:31:ce:d5:
c2:31:7f:b2:43:86:89:8a:a5:70:7b:05:9d:e3:77:
27:2d:40:25:ac:6b:44:ef:d7:5b:42:bc:dd:9d:2a:
e7:16:b7:02:cf:24:29:88:45:4f:2d:2c:0a:5e:18:
65:92:28:00:07:73:12:c7:79:16:cb:ea:4e:f6:96:
17:54:ec:50:85:f7:a9:23:b5:8f:3a:74:2f:17:3d:
64:8c:d9:5b:f5:4d:0b:99:f0:24:a6:ee:ae:47:e9:
31:82:84:9d:9a:d5:34:bb:97:ad:82:ae:d3:9f:b7:
27:5f:a8:f2:31:42:03:a0:dc:f3:f8:5c:c9:54:9f:
d6:a4:20:9d:9c:49:b6:52:c9:5f:ce:d5:cb:10:b0:
27:38:bb:80:35:48:fa:50:61:de:f6:29:7a:74:e3:
7a:57:3b:54:1a:36:f7:f8:42:f3:a2:04:78:a1:5c:
c6:ee:c1:63:96:e7:5c:53:52:f8:ed:95:bc:6f:0e:
06:2a:4e:d8:d7:83:2e:3a:36:43:72:b3:dd:dd:5a:
64:01:6b:70:e1:c6:a5:39:1f:bf:ac:11:ac:e1:7f:
4b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:91:58:23:CD:F2:BF:39:2C:81:AC:EB:2F:FD:27:21:68:BF:3B:CD
X509v3 Authority Key Identifier:
keyid:33:62:BF:F2:CC:49:7F:0B:52:1C:82:54:A1:2E:BD:4E:34:E5:2B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2K_8sxJfwtSHIJUoS69TjTlK00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bf3036-f3df-48ce-9a0a-8566166dfcc2/1/M2K_8sxJfwtSHIJUoS69TjTlK00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bf3036-f3df-48ce-9a0a-8566166dfcc2/1/M2K_8sxJfwtSHIJUoS69TjTlK00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:62:b6:1f:18:96:84:da:47:86:c3:e1:01:c2:5d:49:62:d6:
d4:d7:ae:72:72:9f:ae:92:9a:b9:52:76:a4:86:af:05:d6:16:
8c:ae:07:f9:4d:be:5a:9b:43:07:58:32:8c:8a:f0:5b:1f:77:
97:34:9a:46:af:65:51:8a:63:6b:a2:b4:9f:d6:6d:87:82:b2:
e0:3b:fd:34:e1:a1:b2:3f:16:e9:d5:d6:e0:e4:a6:c1:d4:30:
b4:b7:73:78:d8:ac:4f:f6:fe:eb:04:ae:e5:bf:47:6b:b8:67:
60:cf:ab:09:de:6d:3b:71:3d:ac:1b:ce:58:05:d0:28:34:48:
68:e3:ef:29:fc:39:5d:1c:db:ae:b2:b8:b1:39:37:c9:bc:d3:
2e:b6:dc:c9:ec:6e:ca:64:b6:07:87:7d:39:32:bf:16:b8:cd:
93:0b:bf:e4:d1:f8:28:4c:42:45:7d:87:e3:62:db:5a:24:1d:
a9:62:4d:f2:ff:82:d9:43:2a:50:0d:c8:87:b1:99:68:34:87:
86:0f:60:9c:b3:b1:ca:f7:33:29:8d:54:8c:73:ac:cb:ff:df:
46:f1:bb:25:18:0f:6d:99:09:d7:89:85:09:62:1b:96:6f:42:
05:a1:ca:81:da:ff:3e:df:a0:e5:52:41:9e:e3:99:ec:8f:3f:
8d:0c:85:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:09 2026 by rpki-client