Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier: lESIjv4soREF2ZjQU/bI68aXQ/EENT7FAcTWmLp8XN4=
Subject key identifier: 00:C4:C4:B5:AE:C3:88:42:E2:DD:F5:58:57:88:56:18:1C:0D:0A:33
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial: 019D37C08DB3F0B0B1BE9592842A97B6721B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number: 0EBE
Signing time: Sun 29 Mar 2026 04:00:59 +0000
Manifest this update: Sun 29 Mar 2026 04:00:59 +0000
Manifest next update: Mon 30 Mar 2026 04:00:59 +0000
Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: JLQHIi/dgwZics1V02jQkoqhK7CYEymjKWuM24cwVgA=)
2: x3j0YXNfrQ1uoL9p2fnHwDo4Voo.roa (hash: +HeOEQXq41iJ7S0nO2qqAI09YN5UE1e6xIQ3R8exCoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:8d:b3:f0:b0:b1:be:95:92:84:2a:97:b6:72:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Validity
Not Before: Mar 29 04:00:59 2026 GMT
Not After : Mar 30 04:00:59 2026 GMT
Subject: CN=00c4c4b5aec38842e2ddf558578856181c0d0a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:2a:4e:d0:50:f1:74:8b:ca:e8:36:2c:14:
c3:06:5d:42:24:ec:d5:d3:46:cb:fe:fc:0f:ae:ac:
71:8f:69:75:eb:25:c9:00:ee:3f:2a:08:85:4e:99:
f2:22:71:ba:a1:16:3c:73:67:9f:41:57:c3:f4:04:
32:ff:e6:85:75:9e:cf:92:ca:0f:75:54:1e:e1:a1:
75:ac:73:cf:31:56:5d:ad:62:12:ce:de:f6:bc:76:
df:b8:6a:e2:10:e9:fa:f2:c9:36:d4:a4:53:29:b9:
5e:b7:ce:4c:34:d2:cf:f2:8b:da:96:42:a6:6d:eb:
77:0d:96:7a:74:07:fe:36:ec:d0:8a:4b:be:4a:09:
d6:df:97:38:54:f0:ac:c4:97:ed:e3:28:20:47:05:
e3:83:ca:99:7f:ae:65:6d:60:32:48:78:e8:b8:35:
fd:1c:fa:bc:70:7f:0d:06:09:ea:46:cd:0d:6b:94:
a7:8a:8b:a1:a1:f3:09:8d:fa:dc:61:f6:27:53:52:
f3:6d:60:c9:33:52:17:7d:0a:3e:ae:e9:1b:27:c9:
2c:d9:52:5f:59:8a:ad:33:d4:5d:8f:d5:49:7d:65:
fe:59:7f:35:b0:b1:2f:d5:df:30:2a:de:4a:37:56:
6b:0a:41:97:81:dc:d8:0a:7c:4d:3a:34:af:15:a4:
8a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C4:C4:B5:AE:C3:88:42:E2:DD:F5:58:57:88:56:18:1C:0D:0A:33
X509v3 Authority Key Identifier:
keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:16:20:bd:3a:8d:41:1d:bd:db:04:9b:c4:2b:97:14:74:00:
1e:79:54:30:f7:77:d1:86:b7:ad:f3:1a:8e:8c:74:27:d9:cf:
76:36:f4:f7:87:f4:ba:e4:6f:32:a7:c2:0c:65:69:b5:83:e8:
b9:9d:f7:e3:e1:fd:e0:3b:48:37:3c:b7:45:03:d2:c8:41:40:
35:2a:f4:6b:69:ea:cb:88:47:d1:d6:07:b7:d8:e8:86:64:65:
f4:1b:f7:dc:8b:61:b0:e7:85:36:c7:01:e3:a4:26:e1:df:7a:
cb:ac:ed:5f:b7:31:e4:b2:cd:82:85:97:04:44:13:17:40:75:
75:1c:b7:a6:7f:b5:df:fa:23:18:9b:41:04:80:ed:f1:19:3f:
e3:a2:f0:07:43:3f:e4:ba:6d:b2:1e:fb:2d:79:06:b3:5a:73:
da:11:71:0c:b0:3e:29:e5:41:cb:87:a1:7d:72:b5:c8:de:f5:
d7:40:8d:0f:04:d3:1c:52:63:a4:c2:c3:9a:57:ab:8c:c7:01:
7f:aa:f0:53:d5:ba:ab:1e:a6:9f:9c:6e:10:ea:75:b8:47:5a:
08:80:2f:6e:1e:68:5a:e8:4f:83:b3:6a:6e:bf:78:db:a3:e8:
3e:00:a4:48:15:69:b6:10:95:6f:0d:ca:c3:4a:6a:8b:72:ac:
4f:2a:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:34 2026 by rpki-client