Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
File: m3RNp58FMac61vS68IN-k-toAbE.mft (raw, json)
Hash identifier: NFrW54R1cGtpeK1kIvpzwYaf0u9fD/KYxElfFwxFgGU=
Subject key identifier: 90:E7:F4:00:C9:2B:15:2D:FC:46:66:A9:FE:1C:CD:D5:E3:A4:82:B4
Authority key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
Certificate issuer: /CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Certificate serial: 019E1E6CBBCFA07EBB8E48AA803B11D43FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
Manifest number: 01D8
Signing time: Tue 12 May 2026 23:01:42 +0000
Manifest this update: Tue 12 May 2026 23:01:42 +0000
Manifest next update: Wed 13 May 2026 23:01:42 +0000
Files and hashes: 1: RGb-rCoDknImAicpKoX_vtBq9Fs.roa (hash: UkIIBaoP+gfi07Ufjwc/M1TNIrnyxcH9oHFTQ2095Lc=)
2: bFYiDJKsGB0ZympkJZ5TjPDffcs.roa (hash: 0Z23FXjNdERF8k8I3emVp0R5JdsnHYRyYZTMKy2BSlY=)
3: m3RNp58FMac61vS68IN-k-toAbE.crl (hash: ZfKbT3VHJJ8uYI4wBsMPHYjuLcoUIRIxWtVl/cvQYLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:bb:cf:a0:7e:bb:8e:48:aa:80:3b:11:d4:3f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Validity
Not Before: May 12 23:01:42 2026 GMT
Not After : May 13 23:01:42 2026 GMT
Subject: CN=90e7f400c92b152dfc4666a9fe1ccdd5e3a482b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:09:9d:01:f0:4c:04:54:2e:d2:0e:8a:15:
7e:aa:5d:da:e3:65:50:47:24:ab:d1:51:a1:b9:43:
ef:7b:6b:d9:5d:0a:04:07:d8:5b:c4:1a:a8:ef:d8:
67:45:41:35:68:6f:73:5a:c2:d1:11:dd:db:1b:8b:
86:c3:37:04:64:f7:e3:44:e7:c6:6b:c7:d6:a0:0d:
f6:1e:9a:42:18:6c:da:75:82:82:a9:ac:43:71:87:
29:a2:ac:42:35:12:4d:a9:19:33:21:fe:42:e0:8d:
f8:18:65:83:f9:e4:73:05:86:0f:bb:b8:97:4a:a7:
2a:8d:10:6d:3e:fb:b6:b0:fc:db:bd:75:2f:40:ba:
36:2e:68:cf:23:3f:7c:02:e7:95:ea:db:12:03:82:
4b:8c:f4:f1:3f:4b:0c:48:52:0b:fc:50:26:0c:91:
d1:59:98:fd:58:bf:06:1c:9a:31:85:fe:08:54:a5:
bc:9b:56:51:59:9f:1e:20:a9:5b:82:ff:7e:40:13:
84:25:95:29:06:32:19:ab:1c:ab:2e:53:e5:44:ca:
ce:51:22:e5:f6:4b:6b:a0:4a:47:eb:55:eb:eb:00:
80:7a:65:86:ef:2a:93:c7:53:2b:ea:f7:2c:14:52:
c7:09:34:08:83:7a:c3:b8:2e:6f:68:78:fe:51:1a:
41:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E7:F4:00:C9:2B:15:2D:FC:46:66:A9:FE:1C:CD:D5:E3:A4:82:B4
X509v3 Authority Key Identifier:
keyid:9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3f:72:6d:8d:17:72:15:44:2d:e4:54:8b:85:de:d9:e3:71:
1f:a5:c7:26:c3:95:4b:af:bb:9d:16:b8:f0:2c:c9:df:f7:65:
db:6b:9c:9b:62:c4:15:a5:71:08:cc:1d:ea:29:2a:69:81:6b:
45:83:c4:a7:d5:fb:e1:08:16:6c:34:01:8b:37:6c:ab:a0:59:
32:06:38:62:db:87:bc:d6:55:3b:af:02:5d:4b:4f:f1:01:9c:
0e:90:79:06:59:63:10:ef:f5:31:1c:51:31:f6:4d:52:4c:92:
0c:d8:a9:7a:21:20:6a:6f:c3:34:29:f2:50:cf:4e:9a:87:58:
72:bf:ea:24:98:14:81:d9:30:0a:cf:13:98:59:7d:1e:0e:42:
37:19:b9:f6:ed:90:a2:97:92:09:4b:54:27:9d:b0:65:c6:be:
9c:72:a7:39:2d:2c:f2:de:ad:15:49:b6:ca:aa:1a:b3:b7:c1:
3a:12:7c:4f:58:e2:0e:c7:7d:1b:51:59:00:16:3a:fd:0e:b5:
cd:67:e1:28:8c:68:e7:e7:a1:b2:ec:f5:17:27:d7:a0:20:2e:
a9:b7:d5:d2:fe:46:2b:db:fb:48:8e:28:e8:f0:cd:2c:62:c9:
cf:46:bc:42:fe:ac:3e:85:f1:47:f2:c2:49:a0:09:88:9c:15:
68:8e:8e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:59 2026 by rpki-client