Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
File: mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft (raw, json)
Hash identifier: IRX8ujVCIedLUHWT/AO0dx7iLhjf0YwP/RmPByDaMiE=
Subject key identifier: 36:09:1C:7C:F2:47:3E:4F:F1:3C:BE:FA:44:CB:07:ED:8D:05:E4:78
Authority key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Certificate issuer: /CN=987dccf5068829329cdac51d5d190fe1089cde9e
Certificate serial: 019D2A046A355A106EDDA6D70F7AD8CDD378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
Manifest number: 11A3
Signing time: Thu 26 Mar 2026 12:00:25 +0000
Manifest this update: Thu 26 Mar 2026 12:00:25 +0000
Manifest next update: Fri 27 Mar 2026 12:00:25 +0000
Files and hashes: 1: 4NPNpEtggb71IQN4rfD17PgfnPM.roa (hash: Dw4w2HoXn5ATp16MhOhkA0aUdFXm+zKXZvSVq0b6J9o=)
2: mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl (hash: jhmI+gvadsP/RdHSfTqM3ZFSH3Ni9PG63zzvYGp5i9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:6a:35:5a:10:6e:dd:a6:d7:0f:7a:d8:cd:d3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987dccf5068829329cdac51d5d190fe1089cde9e
Validity
Not Before: Mar 26 12:00:25 2026 GMT
Not After : Mar 27 12:00:25 2026 GMT
Subject: CN=36091c7cf2473e4ff13cbefa44cb07ed8d05e478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:66:c5:0e:96:a3:f8:62:c4:c1:4a:f9:64:
04:03:2b:dc:95:91:3a:35:3c:5c:0b:42:bf:59:16:
f0:76:b1:6c:9f:13:55:2c:85:0d:57:a0:b0:a2:1c:
6f:09:39:cf:68:72:d8:9d:ef:57:88:24:f2:8f:61:
d3:c9:da:a5:31:2c:de:0a:0d:b0:cc:ae:c9:7a:81:
c3:79:c6:b8:86:c4:4f:ba:40:52:f2:47:0b:1e:2d:
ce:60:67:f9:60:3e:3b:87:28:6e:f3:c9:3c:7d:f4:
47:73:40:a8:0a:55:70:c8:aa:b7:5c:a5:cd:17:13:
4a:6c:06:ca:ee:bb:c8:f3:94:8d:e2:ee:88:c4:18:
64:2e:08:09:5e:af:65:47:9d:2f:13:d9:5b:07:42:
57:54:f7:64:ec:75:db:b1:f0:2d:6c:7d:87:36:7c:
45:fe:56:cd:f7:50:d4:22:4a:76:10:ea:d8:68:6f:
d1:27:37:98:8f:ea:8b:2d:67:df:75:83:65:95:43:
d9:a8:57:75:a0:88:32:8d:dd:8d:41:f3:28:a4:34:
94:41:e9:d0:31:97:0d:de:65:cd:79:45:42:24:14:
a0:d8:b2:fd:19:83:68:d5:24:93:f6:b4:75:3e:fc:
15:59:97:46:4a:7c:e3:99:75:a3:2e:fc:4b:2c:d7:
5f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:09:1C:7C:F2:47:3E:4F:F1:3C:BE:FA:44:CB:07:ED:8D:05:E4:78
X509v3 Authority Key Identifier:
keyid:98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7f:ae:0b:ea:36:b3:83:62:7e:42:49:51:95:dd:30:2e:3d:
80:3e:a4:7b:f8:82:8b:96:b3:e7:da:a6:85:7b:35:e9:9e:ed:
f6:4a:8d:f8:6d:79:5b:f4:3d:5a:1a:8d:50:bb:b0:11:6f:41:
f7:70:55:3a:56:49:f0:be:10:b3:e3:d5:55:21:cf:c1:72:e3:
5e:cd:a1:b8:58:27:23:62:14:c0:69:15:89:5b:29:ba:aa:95:
8f:f7:2d:7d:b8:15:cb:ec:01:44:45:db:65:88:33:71:14:7e:
43:9a:cb:ef:41:5a:b6:76:6b:e8:e1:cb:db:bd:d3:fd:1d:f4:
c9:12:b3:c3:3d:9e:e9:b6:8d:37:bc:a6:76:f0:42:98:62:d8:
26:68:67:66:59:ba:0a:ef:ea:e9:c3:07:5f:9d:ef:dc:ea:a8:
66:ab:25:ad:5c:54:2b:2c:eb:4d:61:cd:cc:f4:a6:37:8b:96:
2a:7d:5a:b9:ae:0c:5b:43:82:3f:75:0b:8f:96:f4:90:ea:45:
2a:47:ba:3e:7c:1b:09:7a:8c:af:13:aa:03:92:9b:a5:bb:fe:
83:93:74:13:86:75:78:5a:02:49:fd:0d:f1:f4:ba:59:bd:a9:
37:08:55:4c:30:bc:e8:78:1c:96:a0:b7:de:d1:45:c3:71:61:
91:3c:65:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:06 2026 by rpki-client