Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File: M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier: eden79zHJF+t0N4OJMkFz1GPfp7UKCJTef6aJzj0ea0=
Subject key identifier: BB:09:46:83:13:1B:A6:AA:4A:F7:75:90:9A:CC:4D:E2:FF:50:3D:AF
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer: /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial: 01A12A31F5DACC5BD9EB93D797EED5BE7F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 09:01:19 +0000
Manifest this update: Sun 11 Oct 2026 09:01:19 +0000
Manifest next update: Mon 12 Oct 2026 09:01:19 +0000
Files and hashes: 1: 7MkQZGhOVtHQk5MQ7ZY9WW07D8Q.roa (hash: Cn+90mJi74+2BcOC5W598tXat8oZgbiFe0T88t32ER0=)
2: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: B0Qx9Z9q7X2yiCu5/rbBe3alrzmQOhnzOZhBohiqGo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:31:f5:da:cc:5b:d9:eb:93:d7:97:ee:d5:be:7f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Validity
Not Before: Oct 11 09:01:19 2026 GMT
Not After : Oct 12 09:01:19 2026 GMT
Subject: CN=bb094683131ba6aa4af775909acc4de2ff503daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:66:7a:44:6d:5f:c8:86:68:e4:0c:62:08:
32:1d:24:19:80:b2:91:66:cc:1c:21:b5:87:86:86:
6c:fc:33:77:b8:13:49:7d:9c:d1:23:dd:5b:56:00:
49:e9:41:03:70:56:3f:b7:62:4f:78:ec:07:a4:af:
b0:3c:69:2d:31:ee:32:4f:a2:18:20:2b:52:9a:13:
d3:f6:7c:a1:6e:61:37:e8:96:05:8f:82:18:5f:37:
fd:24:5e:65:fd:71:bd:96:fa:39:33:aa:9e:ed:ef:
4a:ec:9a:2e:10:b9:19:4e:2a:17:58:45:3e:ad:9e:
04:9d:7b:31:2f:0d:6d:60:64:4f:b9:97:a6:28:57:
63:c9:e4:4f:3b:83:28:c1:2d:80:13:e7:95:d6:35:
6c:bd:7a:ad:6d:91:be:f3:ac:8d:7f:32:45:b9:73:
c0:13:bf:d6:77:b1:8c:2b:33:fc:03:10:eb:46:bc:
6f:eb:c0:e1:d4:3f:fc:ba:c0:b4:b9:8b:c9:d8:3a:
ea:74:f3:2d:5d:d6:59:23:1d:57:b3:cc:ef:a4:a8:
7a:77:06:89:f9:6b:ae:23:26:d6:12:70:39:fb:14:
7a:35:ca:87:f4:d0:f9:dc:08:b6:a2:bf:bc:b7:f4:
08:02:21:4f:46:cd:22:bc:e4:96:a9:20:9d:d6:30:
6d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:09:46:83:13:1B:A6:AA:4A:F7:75:90:9A:CC:4D:E2:FF:50:3D:AF
X509v3 Authority Key Identifier:
keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:af:5d:dd:30:b8:59:fe:e3:69:41:56:bf:de:a3:ad:4b:b0:
c5:2d:ea:49:24:19:7c:15:e2:d7:ba:41:97:e8:b1:5a:a4:60:
9d:9c:27:9b:84:2b:e1:36:dd:f4:46:56:8f:89:bb:37:e1:3e:
f7:50:06:f6:87:f8:7c:0a:60:a6:77:93:36:83:03:5a:4f:76:
cc:28:67:06:09:a5:40:19:c6:cb:38:36:b0:2e:39:37:80:55:
19:0f:de:b3:2c:7f:16:db:23:72:73:a6:c6:d3:03:90:94:77:
4f:ea:ef:fb:a6:b9:e5:b5:ca:3f:4e:80:a7:fc:6c:f1:3a:70:
dd:44:e3:b7:9e:9f:c5:39:79:24:84:3a:87:db:26:1d:9e:db:
cd:e7:38:64:89:97:a9:f6:c8:9f:3d:cd:c6:de:71:20:60:31:
da:22:ca:f6:e0:27:5f:8f:b0:c2:8e:77:1c:14:24:85:a2:38:
80:2e:67:00:29:51:ad:56:82:79:17:37:20:a7:72:5c:46:a0:
b1:ff:b3:d8:9a:a0:b1:34:94:73:02:3c:77:e7:17:82:f1:22:
df:a9:47:4a:d2:29:ce:24:3b:88:74:86:d0:c5:f5:15:c4:ef:
ee:44:0f:9a:d8:34:1c:24:6c:bb:d0:f1:85:bc:a9:6f:b8:bb:
8f:8f:c0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:59:09 2026 by rpki-client