Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
File: m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json)
Hash identifier: JpNOPw21HHVAvKpNVmRLLhR6Hq2hCKDY7x11NnM8GbQ=
Subject key identifier: 54:31:06:C4:C9:7B:0A:3B:42:50:D8:C2:69:B9:68:2C:B6:80:8B:48
Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
Certificate issuer: /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Certificate serial: 019F95EE7276AE73BE94AE6956D810100D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
Manifest number: 0FCA
Signing time: Fri 24 Jul 2026 21:00:59 +0000
Manifest this update: Fri 24 Jul 2026 21:00:59 +0000
Manifest next update: Sat 25 Jul 2026 21:00:59 +0000
Files and hashes: 1: D4KKAq0ahmeZ20BwgX9kW7RnziE.roa (hash: ZoGSRKDSzROcjYhMYpND74w5OQoC/iSALsUjVAn5Y+U=)
2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: Uaxn/tgLQew2Qh4wqvbXH3KDGqTGp0vVNhAQA3MjgWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ee:72:76:ae:73:be:94:ae:69:56:d8:10:10:0d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Validity
Not Before: Jul 24 21:00:59 2026 GMT
Not After : Jul 25 21:00:59 2026 GMT
Subject: CN=543106c4c97b0a3b4250d8c269b9682cb6808b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:a9:18:72:2c:b3:91:ab:75:85:9b:e3:f5:
70:a2:13:4c:d5:ac:eb:94:2f:97:bf:bd:96:21:c6:
7d:4c:15:1a:32:ca:f5:7d:7f:bb:8e:ea:cd:71:39:
c2:dd:6a:34:8b:e8:7d:0d:06:bd:b7:4a:63:97:f8:
f0:08:58:11:2b:49:a2:78:9b:33:4d:6f:42:ab:20:
96:c6:6d:12:9b:86:7d:cd:e0:0b:fe:3a:9c:87:91:
18:70:35:8a:96:55:b7:50:a0:f2:27:88:65:3e:4f:
21:cf:5b:5c:05:fb:05:ae:8a:66:ba:22:08:fb:53:
8f:f3:46:f1:e3:c7:47:c7:6f:95:cc:e2:fa:00:ff:
52:ca:72:ac:78:39:ba:20:25:b7:22:50:70:3a:0e:
18:80:88:88:d7:ec:52:4b:ea:b4:74:0f:dd:82:5c:
9c:a2:c4:3c:0e:13:c5:97:21:b6:ab:1c:a7:5b:25:
43:c9:f8:76:68:13:21:59:41:d1:d4:58:cb:e6:ea:
2d:46:2d:dc:cf:63:b7:8f:c0:2d:f6:3d:ee:b9:5e:
04:a0:d8:f7:31:56:b9:88:a5:91:54:6d:13:bc:38:
80:10:72:53:4c:85:f2:d1:72:27:72:2a:ee:6d:41:
e2:c1:63:61:8a:12:7a:3f:3b:86:2e:b9:14:9a:05:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:31:06:C4:C9:7B:0A:3B:42:50:D8:C2:69:B9:68:2C:B6:80:8B:48
X509v3 Authority Key Identifier:
keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:22:1b:ee:aa:af:64:ea:4a:55:7f:a6:37:9f:4f:c1:81:bf:
0c:c4:e9:25:cb:05:f6:83:62:3e:47:81:cd:cf:83:1d:e2:7b:
6c:20:e9:56:f6:89:a1:53:62:06:7a:e4:ac:c8:97:2e:93:83:
e6:af:95:38:75:10:2f:4d:c1:bb:96:60:07:4b:f6:0d:63:bf:
3c:fa:2f:58:b3:1c:59:b5:7f:63:7c:12:48:72:27:66:48:92:
18:8e:d7:aa:22:9a:fe:26:cf:3f:20:40:99:a7:02:61:2e:db:
d7:ca:1b:49:59:f7:ce:4c:d7:c8:70:30:e4:32:23:2c:71:c6:
08:68:4c:e7:15:2f:52:dd:bf:80:68:bd:b3:9b:c4:13:2c:ce:
ec:f3:84:40:97:85:de:4b:18:50:b0:64:fc:c2:74:0f:c8:ba:
ec:cb:ff:d7:31:22:be:7f:c5:fc:78:4d:50:71:3a:c5:f2:01:
9c:fc:4f:c7:4f:c4:77:db:77:ab:8e:56:96:66:61:d7:42:f1:
22:60:6f:a2:4b:fe:17:e8:67:19:64:1b:e0:dd:39:18:45:96:
63:20:4b:89:06:f3:18:47:48:18:53:91:73:67:4f:aa:1c:d2:
c2:4e:44:5f:37:71:5c:14:d4:5e:a7:b0:16:2c:e2:c3:a0:5d:
d0:03:ef:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:11:36 2026 by rpki-client