Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bf3036-f3df-48ce-9a0a-8566166dfcc2/1/M2K_8sxJfwtSHIJUoS69TjTlK00.mft
File: M2K_8sxJfwtSHIJUoS69TjTlK00.mft (raw, json)
Hash identifier: cTuN0wNkS0z7GJZ2NZNA4QQA4zqYg3M/V9f/sbV+I3E=
Subject key identifier: 9C:10:D1:56:26:24:74:B0:62:F2:73:01:D9:E0:8C:4F:6D:85:0B:BE
Authority key identifier: 33:62:BF:F2:CC:49:7F:0B:52:1C:82:54:A1:2E:BD:4E:34:E5:2B:4D
Certificate issuer: /CN=3362bff2cc497f0b521c8254a12ebd4e34e52b4d
Certificate serial: 019D27A88308CBDCE2DFCC20FB96589C708A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2K_8sxJfwtSHIJUoS69TjTlK00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bf3036-f3df-48ce-9a0a-8566166dfcc2/1/M2K_8sxJfwtSHIJUoS69TjTlK00.mft
Manifest number: 4E
Signing time: Thu 26 Mar 2026 01:00:48 +0000
Manifest this update: Thu 26 Mar 2026 01:00:48 +0000
Manifest next update: Fri 27 Mar 2026 01:00:48 +0000
Files and hashes: 1: M2K_8sxJfwtSHIJUoS69TjTlK00.crl (hash: +X3Z5dVa5Lf31wXDxklFxvbMX3aHo1ow4RlheI3C/F8=)
2: dRnQup6ENsOnclr1PcgcIp0tL8g.roa (hash: o5bs9yh/4DZ5CC4/08k8apbs3okw9hIOvvAwRqUJ99c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bf3036-f3df-48ce-9a0a-8566166dfcc2/1/M2K_8sxJfwtSHIJUoS69TjTlK00.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/bf3036-f3df-48ce-9a0a-8566166dfcc2/1/M2K_8sxJfwtSHIJUoS69TjTlK00.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2K_8sxJfwtSHIJUoS69TjTlK00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:83:08:cb:dc:e2:df:cc:20:fb:96:58:9c:70:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3362bff2cc497f0b521c8254a12ebd4e34e52b4d
Validity
Not Before: Mar 26 01:00:48 2026 GMT
Not After : Mar 27 01:00:48 2026 GMT
Subject: CN=9c10d156262474b062f27301d9e08c4f6d850bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:f7:d3:fb:fe:46:fc:9a:40:e2:8e:9f:c4:
cd:f9:ae:6b:54:ed:ff:53:05:31:e8:80:de:c9:a7:
12:20:d2:33:39:ab:a3:66:98:b8:01:fc:3b:46:5c:
a8:46:ca:b6:39:3b:17:5c:c9:bf:2a:49:77:8f:c0:
ad:a2:e7:34:38:06:17:92:82:db:3a:21:a5:fa:9b:
42:94:b2:3f:ba:db:49:f6:88:6d:67:76:34:ad:44:
96:b7:8b:dd:c4:14:36:43:ec:c2:14:e6:60:98:b1:
82:ba:1b:1d:2a:b1:cb:31:fd:52:2c:b0:41:df:58:
a1:1f:44:85:a8:8f:89:9a:8e:55:30:a9:1d:92:28:
ce:72:77:f7:bf:e6:8e:66:ae:29:b9:ef:6f:72:d0:
63:a4:99:68:36:f7:43:cb:19:1d:fd:e9:da:6e:7f:
98:41:46:c1:46:66:c3:5f:c0:7f:5e:27:36:e0:c3:
e8:4c:35:9f:7b:ea:11:b0:c2:37:03:31:05:9f:dd:
c8:e2:4a:48:79:30:ae:1c:d2:8c:64:81:0a:d6:06:
fc:75:39:54:de:60:6d:08:4a:5f:79:18:69:47:99:
ea:25:85:b9:3f:46:10:32:0b:62:69:51:97:2d:7d:
d4:9d:f9:42:b4:26:39:a8:56:5d:3d:96:35:e0:13:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:10:D1:56:26:24:74:B0:62:F2:73:01:D9:E0:8C:4F:6D:85:0B:BE
X509v3 Authority Key Identifier:
keyid:33:62:BF:F2:CC:49:7F:0B:52:1C:82:54:A1:2E:BD:4E:34:E5:2B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2K_8sxJfwtSHIJUoS69TjTlK00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bf3036-f3df-48ce-9a0a-8566166dfcc2/1/M2K_8sxJfwtSHIJUoS69TjTlK00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bf3036-f3df-48ce-9a0a-8566166dfcc2/1/M2K_8sxJfwtSHIJUoS69TjTlK00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:e3:dd:8f:05:f2:a0:10:b4:81:91:b7:08:da:04:4f:61:1e:
e9:4f:16:25:49:62:23:3b:1f:cc:8a:bd:0d:83:0b:7d:53:dc:
a9:91:85:81:82:18:80:da:d9:45:44:61:a3:70:26:10:20:c1:
7a:82:a3:bd:53:60:fe:fc:fb:cf:53:2e:c6:21:db:7c:98:5d:
d7:bd:ea:ad:12:e9:52:ea:6a:f7:a5:4d:91:90:6a:8a:57:92:
3a:25:f4:55:1d:65:fa:1d:dd:42:af:32:37:9d:1e:1c:ba:36:
16:eb:28:4d:bd:ab:8b:17:fc:3c:82:82:ee:b1:0c:93:9c:d7:
3d:6d:fa:1d:dc:3b:f7:3d:7d:e1:d5:b5:d7:c2:97:e9:92:27:
d2:38:1d:e8:71:18:00:03:87:9d:49:04:4e:fa:32:a8:a3:16:
21:4a:73:d2:ec:71:db:aa:1f:e0:86:a7:9b:69:05:13:46:2e:
89:80:ed:85:83:a2:27:72:0c:3d:5f:30:51:55:c3:cd:76:8c:
63:da:37:87:78:57:bb:8c:13:21:d0:b7:0a:1c:eb:95:c2:15:
42:1a:ac:b4:56:c7:a4:17:88:7a:b6:69:98:1c:82:31:50:ef:
db:1c:8f:5e:9d:c3:fc:ba:f2:d1:5d:4a:5c:7a:ef:37:ca:78:
d0:6c:ec:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:03:03 2026 by rpki-client