Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
File: M1etQG35k0tQSLX6Id4xRQuTb6k.mft (raw, json)
Hash identifier: 2XQL1xIkVxLvGY/xlr2mAJ+YAgyJmx/CrOIK+Q9Ic/A=
Subject key identifier: 2D:97:D3:5C:D9:A2:1F:C4:44:92:D9:20:15:76:AC:CF:98:CF:D9:E1
Authority key identifier: 33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
Certificate issuer: /CN=3357ad406df9934b5048b5fa21de31450b936fa9
Certificate serial: 019D37F7374EFF92A9502F30BCFC667E251B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:00:41 +0000
Manifest this update: Sun 29 Mar 2026 05:00:41 +0000
Manifest next update: Mon 30 Mar 2026 05:00:41 +0000
Files and hashes: 1: 8NSywpR9nT-r8M6sQZn_Vy_1zuI.roa (hash: KK6AcEIe4doXNcpLx1+rexzaHvDjwQb/+2RxEu+/uhY=)
2: M1etQG35k0tQSLX6Id4xRQuTb6k.crl (hash: +bV+8fP1rvofi4fkVTs522Kbe48ZbOsDfxuYUw4t87c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:37:4e:ff:92:a9:50:2f:30:bc:fc:66:7e:25:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3357ad406df9934b5048b5fa21de31450b936fa9
Validity
Not Before: Mar 29 05:00:41 2026 GMT
Not After : Mar 30 05:00:41 2026 GMT
Subject: CN=2d97d35cd9a21fc44492d9201576accf98cfd9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d2:76:9f:7d:26:b1:ed:c8:0f:34:2d:62:e5:
32:7f:bf:ce:8d:c0:00:f3:bc:13:39:5b:52:0a:8e:
f3:7f:60:e1:65:ee:04:cd:b1:40:7f:54:22:5e:3e:
80:11:1b:47:04:43:99:82:60:8e:af:6d:84:4f:fe:
ec:c4:65:4d:34:6b:f8:44:c4:22:dc:91:55:51:ff:
af:d8:a9:4f:37:83:b5:77:08:05:b8:ab:d9:7e:2d:
d6:5a:34:28:18:ff:0e:89:42:ce:c0:af:05:ef:53:
e6:1e:44:09:7b:85:37:f6:1c:cc:fd:29:f9:d0:d1:
9d:45:2a:e4:06:7f:bd:4a:7d:d5:8f:1e:7b:d7:c4:
92:b0:65:1c:88:17:0e:59:cc:67:c1:87:cc:e0:5f:
4e:99:95:21:1b:5b:de:75:6a:12:eb:41:71:0b:9a:
d6:ee:8a:9a:28:1a:23:c2:cd:b4:68:c9:66:1c:5a:
9f:50:b7:bc:62:d9:3a:86:97:08:9b:63:ed:4f:8f:
c5:17:c8:19:c0:a2:c4:0b:05:03:57:35:2f:4a:c9:
b0:9f:07:0f:2c:36:d5:bf:13:7a:83:b6:6a:91:50:
85:aa:e7:99:7d:10:bf:4f:e8:16:8c:48:0d:78:03:
36:cf:40:63:a9:c4:03:df:4a:15:aa:16:c8:c3:79:
1b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:97:D3:5C:D9:A2:1F:C4:44:92:D9:20:15:76:AC:CF:98:CF:D9:E1
X509v3 Authority Key Identifier:
keyid:33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d8:ae:70:d6:9d:a3:4e:fa:f8:e7:13:b6:8d:12:0b:97:d4:
b0:a7:33:78:5d:19:2f:c7:6c:5d:ca:aa:43:de:8b:e5:c2:9e:
46:f2:cd:63:90:71:59:9b:10:2d:37:9e:22:67:ab:c3:96:a8:
79:0e:72:74:7f:53:08:ae:99:b6:de:8b:8f:99:ea:89:c1:02:
1f:fd:43:30:cd:29:70:42:35:cc:1a:e6:80:ae:c4:49:ab:5e:
ed:91:83:78:66:35:ac:77:46:47:97:6e:ea:44:fb:88:1c:70:
24:d0:eb:ec:00:e6:3a:a7:44:6c:94:35:73:ee:23:0d:2d:cf:
47:74:67:4e:a0:83:02:84:c9:c0:1c:c1:c8:cb:51:9d:40:d3:
df:e3:96:27:95:bb:5c:5f:d2:ce:9a:90:f9:38:6d:ab:18:8b:
a1:05:63:49:2f:82:c5:f2:0a:96:f6:70:03:0b:a3:f5:78:68:
37:23:c3:f9:36:21:6b:69:19:e0:99:27:bd:36:f0:14:2a:f1:
2a:11:3e:5f:0f:d7:bb:44:63:8f:6c:61:1a:9c:d5:d2:81:04:
14:c6:47:11:b6:c2:5a:e7:b5:f6:ae:ac:3b:fe:32:ac:4e:2d:
75:8b:7d:d4:b2:0c:b7:f4:23:95:e6:cc:96:c1:de:97:d8:0d:
99:d6:e8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:52 2026 by rpki-client