Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier: O3rj47qTPFtKwTJJeh73arxdJcP+RD9uhOjAUkSAShw=
Subject key identifier: 66:A1:1B:A0:27:2A:F0:5E:05:F0:C5:63:86:C4:76:C8:D2:09:A9:83
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial: 019E916F4E1522A87BF67D696014176462B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number: 0F71
Signing time: Thu 04 Jun 2026 07:00:51 +0000
Manifest this update: Thu 04 Jun 2026 07:00:51 +0000
Manifest next update: Fri 05 Jun 2026 07:00:51 +0000
Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: RzFXc8KtvkTnx1SLgt0QzfRLRcdtcSHZMkGDq9E0ZIc=)
2: x3j0YXNfrQ1uoL9p2fnHwDo4Voo.roa (hash: +HeOEQXq41iJ7S0nO2qqAI09YN5UE1e6xIQ3R8exCoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:6f:4e:15:22:a8:7b:f6:7d:69:60:14:17:64:62:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Validity
Not Before: Jun 4 07:00:51 2026 GMT
Not After : Jun 5 07:00:51 2026 GMT
Subject: CN=66a11ba0272af05e05f0c56386c476c8d209a983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ac:30:6b:8b:04:ed:51:36:1a:61:2e:fe:1e:
c8:bf:fb:89:0b:7e:f5:ee:21:da:08:67:8b:13:ad:
f4:30:ea:72:89:8f:5c:9e:a5:40:20:40:5e:01:bc:
6f:7e:df:28:87:de:e9:d2:b0:a8:3a:80:68:cf:40:
4f:2d:1d:fa:2b:db:86:9f:12:9c:8f:a3:4b:3c:89:
01:98:a0:cf:c9:cc:66:19:b1:c9:36:7e:62:3c:5e:
22:e7:cb:28:af:f4:f5:f0:59:4f:a1:8c:c7:36:4f:
51:d6:fa:51:bb:be:15:a3:09:54:eb:e0:ec:04:fa:
4c:ac:0d:29:86:b3:3b:8e:c7:c1:12:58:a8:bc:90:
02:ee:95:b2:89:00:fb:a1:79:91:bc:5b:0d:2c:39:
1b:7a:c2:8c:56:b1:4a:e9:bf:01:27:c9:35:85:32:
96:36:7d:a4:c2:c2:d3:21:01:a2:6e:aa:a2:8d:bd:
2f:2d:9a:b2:da:ed:82:06:da:ef:b6:fd:95:6e:64:
7d:ad:b2:db:64:dc:e2:c5:d6:c3:a3:10:29:78:9d:
33:11:72:24:a0:73:3e:53:8a:92:c8:2c:54:aa:9d:
2b:e4:ae:66:48:16:de:86:5c:8e:97:ae:72:27:6f:
c1:ca:0f:7a:ff:65:c1:6f:2b:35:4c:04:e4:6c:74:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A1:1B:A0:27:2A:F0:5E:05:F0:C5:63:86:C4:76:C8:D2:09:A9:83
X509v3 Authority Key Identifier:
keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:59:bf:66:33:52:f0:0f:a9:8b:5b:05:cf:a7:a7:2a:2e:15:
19:2f:4d:3f:28:7d:a8:3a:f7:cc:7b:e5:b9:88:72:97:5c:ee:
25:fc:63:ce:e8:56:b8:ae:fd:51:2d:9b:80:58:c6:43:89:dd:
f8:f9:ac:78:91:94:a4:3f:00:65:47:5e:01:13:bb:eb:6c:31:
74:f3:4f:3f:23:0e:b0:36:cf:73:db:df:87:f3:eb:51:22:b4:
fb:3e:0f:18:89:41:02:1e:27:13:92:01:37:3b:e9:84:6c:57:
67:fa:58:ef:d0:9a:37:48:5f:33:9c:76:2f:3a:ee:77:cc:65:
91:05:90:5b:fc:c0:ef:ce:4c:21:80:64:2d:60:d8:ff:79:6b:
ed:16:f3:26:98:ba:fe:ee:21:b7:f9:6a:23:b1:61:1f:7b:74:
e7:75:d5:f4:ec:42:0a:b9:ec:56:16:0e:0d:c5:7c:65:21:93:
06:d1:13:9b:55:ad:12:e0:cb:fa:f8:d2:47:a1:de:92:48:95:
36:d9:28:39:29:c1:26:75:b6:d1:81:b1:c3:f0:e9:69:35:d8:
a3:db:97:65:40:0d:e5:94:85:77:68:b1:46:c4:0e:c7:2e:76:
67:82:94:fa:64:f9:92:75:a4:e8:de:17:5d:65:b2:1a:9b:3e:
97:c4:c7:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6Rb04VIqh79n1pYBQXZGKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNzJmNWQxMThhYmQxMjkxYWUyNDhlNmM2OWQ2NGE5OWE5
YWVmMDYwHhcNMjYwNjA0MDcwMDUxWhcNMjYwNjA1MDcwMDUxWjAzMTEwLwYDVQQD
Eyg2NmExMWJhMDI3MmFmMDVlMDVmMGM1NjM4NmM0NzZjOGQyMDlhOTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3awwa4sE7VE2GmEu/h7Iv/uJC371
7iHaCGeLE630MOpyiY9cnqVAIEBeAbxvft8oh97p0rCoOoBoz0BPLR36K9uGnxKc
j6NLPIkBmKDPycxmGbHJNn5iPF4i58sor/T18FlPoYzHNk9R1vpRu74VowlU6+Ds
BPpMrA0phrM7jsfBEliovJAC7pWyiQD7oXmRvFsNLDkbesKMVrFK6b8BJ8k1hTKW
Nn2kwsLTIQGibqqijb0vLZqy2u2CBtrvtv2VbmR9rbLbZNzixdbDoxApeJ0zEXIk
oHM+U4qSyCxUqp0r5K5mSBbehlyOl65yJ2/Byg96/2XBbys1TATkbHQdawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGahG6AnKvBeBfDFY4bEdsjSCamDMB8GA1UdIwQY
MBaAFDNy9dEYq9EpGuJI5sadZKmamu8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMt
ZDJkOTI0MWVjNWRiLzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMtZDJkOTI0MWVjNWRi
LzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFm/ZjNS
8A+pi1sFz6enKi4VGS9NPyh9qDr3zHvluYhyl1zuJfxjzuhWuK79US2bgFjGQ4nd
+PmseJGUpD8AZUdeARO762wxdPNPPyMOsDbPc9vfh/PrUSK0+z4PGIlBAh4nE5IB
NzvphGxXZ/pY79CaN0hfM5x2Lzrud8xlkQWQW/zA785MIYBkLWDY/3lr7RbzJpi6
/u4ht/lqI7FhH3t053XV9OxCCrnsVhYODcV8ZSGTBtETm1WtEuDL+vjSR6HekkiV
NtkoOSnBJnW20YGxw/DpaTXYo9uXZUAN5ZSFd2ixRsQOxy52Z4KU+mT5knWk6N4X
XWWyGps+l8THmw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 13:20:12 2026 by rpki-client