Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
File: M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json)
Hash identifier: Y/sH4Nv3VygT2+Bemg3zj/YMiZq3mpwTBgW5AFPbCEU=
Subject key identifier: 63:D9:5A:DE:B6:79:97:3F:6A:CC:D1:83:4E:30:21:52:C4:BD:6A:56
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial: 019D3865BD37A0B5BAA2E93C0F0D91CC7EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
Manifest number: 112D
Signing time: Sun 29 Mar 2026 07:01:24 +0000
Manifest this update: Sun 29 Mar 2026 07:01:24 +0000
Manifest next update: Mon 30 Mar 2026 07:01:24 +0000
Files and hashes: 1: 7syofHXFJmPSL6BJ-29lF-gFfeM.roa (hash: NO9XiETKh7e/kgh6aR14rNQhQwpTu97o6Yw7GN8zhwk=)
2: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: gQcCVDtiwEidKgD4QYT7pIMlEWQBzpwl/sSDqMJJ0L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:bd:37:a0:b5:ba:a2:e9:3c:0f:0d:91:cc:7e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Validity
Not Before: Mar 29 07:01:24 2026 GMT
Not After : Mar 30 07:01:24 2026 GMT
Subject: CN=63d95adeb679973f6accd1834e302152c4bd6a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:a9:28:3b:c5:a0:60:3c:e6:93:60:c4:0a:
da:b9:32:ed:af:e4:63:38:2b:6e:83:b1:66:fc:c2:
ce:8c:a9:08:7f:7c:40:5c:b6:39:13:fd:88:33:e9:
12:3d:c8:54:8a:c9:43:44:8d:11:ce:4e:06:76:3b:
40:0f:f5:b7:5a:d7:4d:40:49:9c:d7:68:b0:e3:cd:
4d:1e:b2:6c:87:c8:c6:12:7d:95:a1:b7:d5:7c:57:
d6:c5:0f:e1:59:38:f5:05:a3:3f:82:66:37:ab:3a:
d6:8d:2a:69:1f:35:23:f2:a4:98:4d:cb:b5:d5:57:
54:57:af:74:2e:a1:48:af:5e:b7:fb:99:af:15:09:
89:57:3f:f3:cf:cf:d7:6f:c1:45:e1:e2:f2:af:4d:
69:57:65:bc:47:8d:7c:51:76:3c:23:02:15:93:20:
c9:68:6e:ca:f2:ce:f4:ed:76:1d:36:5d:92:3a:0c:
fb:f7:af:55:3a:b5:d9:9a:4e:34:5f:bc:de:f6:62:
82:8c:73:c3:27:1b:e1:af:7f:e9:c2:31:8b:fb:cb:
cb:6e:ee:5f:b6:38:76:32:12:24:65:b6:50:4e:6b:
b0:6c:f2:05:22:f9:9b:0c:22:cc:19:52:86:fb:3c:
39:7e:ba:cc:23:14:06:95:6a:a5:c0:d6:06:7f:9a:
c7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D9:5A:DE:B6:79:97:3F:6A:CC:D1:83:4E:30:21:52:C4:BD:6A:56
X509v3 Authority Key Identifier:
keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:db:04:97:21:57:9a:b6:c3:fe:cf:50:77:81:9b:cc:0d:65:
d1:f4:1d:2c:10:9e:33:a0:34:dc:d4:ba:e8:a7:fd:39:fd:db:
82:99:a3:33:46:a1:c6:e8:aa:06:4b:ce:9d:7a:a9:4f:ce:26:
2f:94:94:be:26:23:df:d4:64:be:5e:af:0f:84:01:1f:3b:04:
12:0c:c3:58:c7:a3:b8:3e:55:a0:4e:f4:a6:d5:2d:81:0e:3b:
13:8b:da:d8:c6:20:49:eb:1e:01:b8:01:ad:36:47:4a:81:4f:
2b:e9:72:de:c6:93:5a:5c:cd:92:ea:13:1a:ce:af:0e:fb:7d:
7c:ba:80:36:0a:59:65:0d:80:76:31:ca:99:d6:df:c1:46:c8:
e4:15:a1:97:b5:f8:be:3a:0a:98:07:9f:57:c8:cc:a1:4f:98:
c4:c9:de:a3:0e:80:3b:d2:71:ca:f4:ed:f9:1f:f5:cb:60:ca:
8a:bc:be:a1:bd:d4:af:d5:d1:1a:23:7a:1c:e1:f9:dd:20:f7:
ae:08:01:04:20:86:87:2a:ad:42:07:6f:a1:29:21:fa:82:03:
bd:f5:79:1c:88:4d:9d:8f:08:3b:46:bd:4d:af:0c:d6:b1:6c:
65:ae:bf:81:b2:da:81:3f:04:05:2a:75:16:ce:9e:66:3c:1b:
92:f9:8e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:13 2026 by rpki-client