Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
File: m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json)
Hash identifier: Cep9RxyYXn8usdhrhNmJ+KvqxaS/NQsBH0Ax4tKqx4g=
Subject key identifier: B4:8C:2D:4F:43:BD:5D:1D:41:EF:5D:B7:6D:36:FB:F9:F2:F2:6D:C7
Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
Certificate issuer: /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Certificate serial: 01A102ED72FE04A8057987DA2FDE8E84535E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
Manifest number: 1087
Signing time: Sat 03 Oct 2026 18:01:18 +0000
Manifest this update: Sat 03 Oct 2026 18:01:18 +0000
Manifest next update: Sun 04 Oct 2026 18:01:18 +0000
Files and hashes: 1: D4KKAq0ahmeZ20BwgX9kW7RnziE.roa (hash: ZoGSRKDSzROcjYhMYpND74w5OQoC/iSALsUjVAn5Y+U=)
2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: p9aie9XtOveDXhXRiOO+Fqirba8atYJX33V8qgus3w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:ed:72:fe:04:a8:05:79:87:da:2f:de:8e:84:53:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Validity
Not Before: Oct 3 18:01:18 2026 GMT
Not After : Oct 4 18:01:18 2026 GMT
Subject: CN=b48c2d4f43bd5d1d41ef5db76d36fbf9f2f26dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:90:c9:91:75:e6:a8:fe:1a:85:00:67:45:1e:
1f:5c:07:57:dc:81:34:59:ce:a9:0a:d3:f1:0f:12:
35:75:c5:b1:7c:d9:2f:18:ee:0c:33:01:b5:dd:f4:
d7:08:01:c2:38:0c:3a:b3:84:2c:27:8c:c9:38:cf:
cf:15:84:e6:20:bc:9e:07:dd:de:e0:f2:97:ea:ae:
94:9d:a9:cd:5a:ab:f4:50:e6:5a:ac:54:04:62:cf:
e9:c7:5b:97:64:2a:b2:77:28:ac:17:a6:d5:63:29:
39:15:c1:a8:cb:f8:cd:f7:db:57:9f:b7:6f:99:63:
9f:4a:6e:50:f5:26:7a:96:e4:8f:67:38:19:a8:84:
f3:cd:1d:3e:c1:7c:16:3c:f7:30:a0:53:b3:ae:81:
96:09:a7:2b:af:ca:64:cc:64:0f:6e:7d:98:b1:82:
b9:dd:ae:c9:e4:81:4a:ea:28:74:5c:25:78:3c:14:
c5:3a:2b:34:e9:cc:20:13:24:7c:9c:97:b6:53:50:
22:3f:08:7a:25:fb:9b:39:62:21:60:ec:76:a3:d4:
9b:ed:66:72:ee:14:40:97:1f:47:76:51:c3:5b:be:
18:08:7c:57:bc:eb:52:ce:cf:61:c5:21:f8:da:f2:
4e:90:95:58:6a:aa:ad:eb:c1:5b:e3:af:3b:96:bc:
fd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8C:2D:4F:43:BD:5D:1D:41:EF:5D:B7:6D:36:FB:F9:F2:F2:6D:C7
X509v3 Authority Key Identifier:
keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:20:18:04:91:f1:dd:7d:3b:15:b6:84:e0:ab:61:2d:64:36:
ef:83:23:9e:4a:27:8a:d8:a6:82:e5:5c:c3:b0:d1:17:27:e1:
d0:da:da:8c:ca:fc:51:4e:d2:78:77:e5:8b:d6:d5:2d:50:19:
23:d0:c0:2d:54:33:aa:4f:5d:ab:fc:0c:1f:ef:3e:e1:34:66:
f2:8d:9f:e8:27:ef:b7:7f:00:b4:79:85:6e:e6:f0:38:b2:de:
68:8f:65:37:8c:b8:53:fb:2a:d8:9f:19:ff:a4:0f:4f:89:e8:
aa:84:28:70:ba:37:d5:ed:62:ae:60:88:2a:c5:ed:17:5e:37:
29:4b:18:f6:84:64:c2:b3:33:81:f5:76:43:21:9a:6a:63:2f:
b2:d8:9d:15:c9:69:95:71:e1:3b:cc:29:c1:93:fd:ec:a1:bd:
1a:29:5a:a3:72:a8:88:46:c7:94:07:ca:03:42:fd:2c:0a:69:
53:91:22:f5:4a:d6:0f:76:78:00:23:9d:96:82:b3:23:ae:c4:
2a:33:14:93:01:14:31:2b:39:2d:d9:8d:99:b9:01:81:bb:45:
86:50:58:e6:cd:b9:a6:19:7e:6c:db:ce:45:c1:78:d1:53:c2:
eb:71:27:96:f7:00:f5:d0:f8:c8:92:6e:15:06:aa:c9:03:dc:
21:24:94:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:29:15 2026 by rpki-client