Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
File: METmC7lxMuqEmlP8VUu7xjlIsBY.mft (raw, json)
Hash identifier: wZNKM55qWR9V0OKHA0ZRv4rPxFhZTAoKVQ8k58pHdqw=
Subject key identifier: 45:EA:E0:D9:5E:7B:6D:DD:D8:D2:12:9A:4A:6C:CA:13:2E:29:C7:84
Authority key identifier: 30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16
Certificate issuer: /CN=3044e60bb97132ea849a53fc554bbbc63948b016
Certificate serial: 019D265F23792AC4CD19FB35D664C549527F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
Manifest number: 1309
Signing time: Wed 25 Mar 2026 19:01:02 +0000
Manifest this update: Wed 25 Mar 2026 19:01:02 +0000
Manifest next update: Thu 26 Mar 2026 19:01:02 +0000
Files and hashes: 1: METmC7lxMuqEmlP8VUu7xjlIsBY.crl (hash: IxvzR0Ohd7bQcHi5ekmfKPoGnjh4rzCE4Sniqsh7P1Y=)
2: uimPsZybZq-yrSLpRKTm-vYNNYc.roa (hash: wtZLQDeZDb+XPOKiWpCpOdMamv2X0LhZ3Xo+KoH23rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:23:79:2a:c4:cd:19:fb:35:d6:64:c5:49:52:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3044e60bb97132ea849a53fc554bbbc63948b016
Validity
Not Before: Mar 25 19:01:02 2026 GMT
Not After : Mar 26 19:01:02 2026 GMT
Subject: CN=45eae0d95e7b6dddd8d2129a4a6cca132e29c784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:67:e1:58:0d:47:21:6d:2a:1f:88:0a:87:
82:37:b7:2b:47:ba:57:79:0b:50:75:7a:bf:d2:cd:
d4:ff:6d:50:4e:e2:47:39:6a:c9:ef:b1:78:2b:3a:
40:f3:db:67:4f:b4:b4:24:24:2e:b2:0a:47:7b:94:
3c:af:b7:ed:68:91:66:a3:61:85:af:e8:96:35:da:
39:9b:54:8a:2c:4d:b3:d0:52:54:04:db:c9:43:de:
b2:92:27:5f:dc:c7:39:32:17:47:dc:3b:0f:cd:12:
1d:b7:8b:ae:69:b2:cc:0c:f0:b9:5e:76:52:93:43:
5e:3a:d5:31:dc:0e:ff:cb:82:10:4c:4f:76:c4:4d:
a9:50:45:94:4a:86:23:dd:bf:38:c3:15:c8:5c:11:
c3:a0:aa:33:d3:e3:eb:96:f1:7f:a7:a7:0e:fe:87:
a2:31:18:82:5d:31:3d:3f:82:26:65:99:0e:2b:d7:
3a:87:bb:a0:bf:68:a6:1b:dc:91:00:ca:ab:cf:30:
66:b3:e1:4c:18:80:c7:7b:8a:2f:a4:c8:68:09:79:
ff:03:1d:09:74:97:2e:6c:0a:28:de:17:ae:16:0e:
52:9c:25:71:70:94:3e:ac:e7:19:70:ea:00:87:b9:
ac:96:32:7e:0d:5d:30:b1:9c:11:ec:ed:3d:f1:83:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EA:E0:D9:5E:7B:6D:DD:D8:D2:12:9A:4A:6C:CA:13:2E:29:C7:84
X509v3 Authority Key Identifier:
keyid:30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a9:fa:4c:a1:e2:3a:4d:6e:31:b7:04:f0:13:fc:f5:ec:d1:
d1:ec:dd:8b:52:44:0d:c3:57:fc:d3:c3:40:59:30:62:29:33:
39:2b:25:ea:26:7f:d2:27:60:64:13:49:7a:75:2d:85:3d:da:
1d:82:5c:1b:4a:88:85:27:77:4f:67:e1:87:13:fa:1b:7f:a4:
92:91:cc:fb:41:6a:51:f5:9c:e7:34:1d:d1:99:47:51:b3:20:
21:14:64:e2:dc:50:fb:9f:cd:83:e9:64:a6:1b:c7:01:83:ad:
ff:12:f5:5f:9e:b3:b1:11:2a:f4:f0:36:9b:e2:25:66:05:23:
29:71:9e:1f:2b:b7:87:08:4d:8d:b4:41:70:c1:04:9c:ed:a6:
03:aa:e5:ca:89:a3:1c:48:ce:ea:24:14:68:e4:e9:35:fd:e3:
51:f8:5b:9a:97:b1:6e:11:10:47:7a:38:d5:02:c1:41:14:d9:
37:38:00:ae:89:06:4f:e7:11:93:29:2d:82:65:ac:47:19:1a:
31:98:79:41:96:0a:6d:13:c0:9a:25:f3:0b:f4:e2:cd:54:fe:
97:5f:0b:12:86:ab:a0:6b:bc:8b:1f:6a:ed:4c:7d:66:e8:e2:
1f:c4:ae:e9:f1:eb:f5:5d:70:2b:2e:d8:e5:bf:39:ee:0f:9c:
53:69:3d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:51 2026 by rpki-client