Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File: mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier: +p12a2Sm9Jr/N/TO+Eumo9thruDQYo3sTh9OUcUBkgs=
Subject key identifier: B4:D7:EE:F6:AB:48:02:C7:0D:92:94:AB:A5:3C:14:45:15:14:55:2B
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial: 019CC93E65857AE97C05B529558F815808E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number: 0FD8
Signing time: Sat 07 Mar 2026 17:00:35 +0000
Manifest this update: Sat 07 Mar 2026 17:00:35 +0000
Manifest next update: Sun 08 Mar 2026 17:00:35 +0000
Files and hashes: 1: 9V0OURiDiNau3vtgop_pWs2qLIY.roa (hash: QXeJumFHpJY2MFDHKEGfzpT/RlrjsPQ3Q8A0olOdujI=)
2: G8esPcMzQ9AFE_Fw8xl_QXTlOTU.roa (hash: 3RDVfSY7ZJX5UewWPelwEVlTR7B8w1TOwr419YQ9XiI=)
3: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: 6eYJOYnqkNbEzLBhIxnlPqbPB6jxNsxfQ1CfAA3/IJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:3e:65:85:7a:e9:7c:05:b5:29:55:8f:81:58:08:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
Validity
Not Before: Mar 7 17:00:35 2026 GMT
Not After : Mar 8 17:00:35 2026 GMT
Subject: CN=b4d7eef6ab4802c70d9294aba53c14451514552b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1a:e9:cc:f9:be:e8:3a:1f:16:d2:f4:1d:fb:
cd:33:55:bf:c3:63:1a:38:93:03:1e:64:12:80:63:
41:86:64:89:93:bd:f8:95:91:f9:0b:49:8d:3d:12:
b1:e8:3f:7b:7e:31:06:bd:89:5f:0d:bd:c9:a9:d7:
e3:f8:00:8b:28:18:62:26:fd:55:91:eb:95:11:9a:
f7:05:66:7a:ff:6f:54:6c:6e:33:09:13:40:5a:ee:
38:82:98:cc:e7:c8:ee:10:1a:e3:80:d5:a5:13:87:
38:e8:36:15:8f:89:4a:4a:8d:9b:2d:21:12:56:79:
1d:c7:d8:82:46:b4:b6:92:b4:f5:c9:1f:f2:a5:10:
60:e6:8f:f6:c3:63:d5:d5:2f:74:29:f7:86:18:3b:
e5:7f:16:c6:7a:f5:ea:60:4a:8c:95:b0:60:ac:af:
3c:d9:d6:2e:31:64:ab:09:39:b6:8d:df:c3:a7:20:
33:ec:f2:86:ba:3a:22:07:1d:dd:a8:11:6f:86:fa:
8b:92:cd:43:85:9b:75:40:91:df:23:d7:1f:bb:da:
d9:6c:54:bc:6a:50:ad:a3:47:a6:e2:16:34:b1:e3:
8d:c3:34:ad:62:b8:9f:e0:66:7c:5a:14:7a:35:eb:
11:8e:b1:28:56:0a:d9:e9:c4:ea:0d:65:16:76:31:
d6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D7:EE:F6:AB:48:02:C7:0D:92:94:AB:A5:3C:14:45:15:14:55:2B
X509v3 Authority Key Identifier:
keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:25:ed:ec:d5:57:a7:c0:10:1d:d6:02:dd:24:66:d0:99:12:
a3:cf:3d:d6:fd:e7:32:6d:a7:a2:eb:ab:8a:23:ff:36:ab:d5:
2b:fb:1f:8c:3d:0a:72:fb:84:cd:7f:dc:4d:83:8c:af:10:fe:
9d:ec:6f:98:72:4c:32:0d:d6:31:0c:34:e4:37:e9:71:8f:b2:
00:f7:c4:3d:e6:32:d4:5a:40:55:4a:2e:f4:39:ac:56:61:18:
cb:64:54:b2:d3:64:2d:2f:15:d5:3e:ec:2c:41:11:27:29:6e:
1f:8d:02:75:04:f3:6a:f3:47:8b:ea:ea:15:57:c5:34:90:69:
e0:8f:51:ed:95:a5:ad:c3:73:2c:11:a2:6a:80:f5:87:fb:27:
0f:11:75:64:4c:ee:a4:41:40:a1:ff:14:78:2d:50:95:a2:97:
ce:3f:80:6c:e2:a8:93:ca:ab:64:b9:1f:7c:80:35:6c:ba:71:
9a:b5:d4:95:6d:ce:52:29:38:4f:ed:65:f9:ce:27:b4:52:1e:
d9:13:67:ef:53:be:7d:9e:03:5f:cb:5c:44:a2:38:29:8c:02:
6d:49:12:87:c7:85:28:79:e5:3c:a6:56:bf:30:61:75:84:0d:
13:b7:08:db:ac:83:8b:08:4b:84:d0:56:84:00:77:d8:a6:81:
d3:ea:78:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:13:50 2026 by rpki-client