Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
File: m3RNp58FMac61vS68IN-k-toAbE.mft (raw, json)
Hash identifier: Df6w2OSwfDXBqFJpOPQYTkmS6K2baPKiad5uz/A29RM=
Subject key identifier: 93:55:CC:A2:BF:73:F1:F5:3C:25:81:EE:09:F3:42:A4:1B:AE:13:26
Authority key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
Certificate issuer: /CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Certificate serial: 019D32D0B83E31AC6F9A597FA7AA799E1BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
Manifest number: 015E
Signing time: Sat 28 Mar 2026 05:00:32 +0000
Manifest this update: Sat 28 Mar 2026 05:00:32 +0000
Manifest next update: Sun 29 Mar 2026 05:00:32 +0000
Files and hashes: 1: RGb-rCoDknImAicpKoX_vtBq9Fs.roa (hash: UkIIBaoP+gfi07Ufjwc/M1TNIrnyxcH9oHFTQ2095Lc=)
2: bFYiDJKsGB0ZympkJZ5TjPDffcs.roa (hash: 0Z23FXjNdERF8k8I3emVp0R5JdsnHYRyYZTMKy2BSlY=)
3: m3RNp58FMac61vS68IN-k-toAbE.crl (hash: ldUqqGMcjDLSaDpVdfERVVSExkTn37pKF1dqNSa9mQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:b8:3e:31:ac:6f:9a:59:7f:a7:aa:79:9e:1b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Validity
Not Before: Mar 28 05:00:32 2026 GMT
Not After : Mar 29 05:00:32 2026 GMT
Subject: CN=9355cca2bf73f1f53c2581ee09f342a41bae1326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f0:71:29:a3:dd:f9:26:41:f3:3c:8f:34:71:
d2:31:ea:2b:c6:5e:79:7a:50:0a:e9:70:3f:cc:aa:
7d:6f:70:c8:69:98:f3:15:83:13:c5:2d:c5:dc:55:
0b:e9:02:da:42:9a:4f:c9:c2:13:b6:eb:3f:30:62:
b1:5e:2b:ff:4f:ae:0b:7f:f7:77:77:1e:a2:b8:b7:
45:05:d6:d5:c4:d6:3f:3e:93:9b:32:e5:58:7e:78:
68:47:14:bf:66:c9:d3:8e:cc:4a:7c:f1:a4:f8:9b:
4d:49:18:46:c2:45:e2:b7:89:de:22:22:01:e6:43:
57:db:3e:04:2e:9c:b2:82:62:f0:63:05:07:ff:a2:
e5:37:80:e6:9a:a0:5c:56:69:3c:c6:20:17:5b:31:
44:34:0a:e8:5e:45:22:14:89:02:50:91:f2:50:01:
d7:25:92:3b:47:30:64:07:9d:f8:e1:2e:d2:8e:6a:
89:3d:6e:db:d7:43:84:7b:16:dc:33:5b:4f:2b:93:
b3:0d:c0:dd:3f:50:ab:e0:11:bc:4b:ee:c6:80:30:
3b:45:bc:c0:be:db:2d:90:0a:88:45:ab:d7:fd:0f:
90:11:b4:ea:1c:b6:b4:7c:5f:51:e7:c6:70:18:29:
83:51:b0:d2:ed:4a:92:06:20:c1:f0:af:ab:83:0b:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:55:CC:A2:BF:73:F1:F5:3C:25:81:EE:09:F3:42:A4:1B:AE:13:26
X509v3 Authority Key Identifier:
keyid:9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:39:1e:c4:3d:a4:6a:5c:e5:d8:b0:b8:e6:90:d9:7e:8b:94:
d0:f4:44:ca:b6:c6:6c:13:19:6b:91:32:ad:d6:94:cb:18:60:
03:6b:a7:64:c2:af:c5:1f:2e:53:52:bf:fe:ce:6f:d8:18:24:
52:70:f8:78:84:c2:14:c8:6c:a2:15:62:d3:3b:a0:a6:d4:5b:
ac:21:cd:2d:ef:09:16:76:87:bc:b8:4d:a9:e9:44:a1:6f:b1:
10:45:f9:d4:ec:27:97:25:fd:46:84:14:8b:7f:4e:68:e6:01:
39:23:a0:16:0e:f5:36:d5:c6:7c:05:27:f1:9d:73:e1:07:44:
f1:7f:ea:1a:1b:87:b7:b8:66:5e:bc:5b:f2:b5:ce:5c:3e:ae:
f7:74:65:e6:99:ed:da:dc:e4:c3:51:01:40:f5:af:9f:54:e6:
46:fd:01:98:3e:6f:1f:1f:98:33:f0:2f:90:42:12:a3:d2:fc:
cc:dc:4f:f5:b3:c5:5b:32:48:21:01:82:2d:33:b9:e7:5d:ef:
ee:dd:29:23:3a:89:78:25:68:a2:82:b3:ad:1c:9d:32:aa:6c:
a9:f1:51:1c:13:74:f2:52:2e:11:5e:a6:45:10:36:65:3c:ac:
62:c1:37:43:50:0d:95:5c:65:ce:56:5f:c6:0f:08:3a:c4:97:
6b:1d:d4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:24 2026 by rpki-client