Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier: c83AbYgNWyvoM16zhnCgNzjdNzg2/sAnXPZ5ay/Af+k=
Subject key identifier: 85:5C:57:DE:3A:F9:86:07:07:4E:D0:AA:EF:07:C6:04:91:8F:36:A2
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial: 019E1D906CB3ADB7ADC20ED6587AD3212FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number: 0F35
Signing time: Tue 12 May 2026 19:01:04 +0000
Manifest this update: Tue 12 May 2026 19:01:04 +0000
Manifest next update: Wed 13 May 2026 19:01:04 +0000
Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: 8MwxPrW9i5H6G6R5s0wTUfWRHwniC0hjXNj1qnf415c=)
2: x3j0YXNfrQ1uoL9p2fnHwDo4Voo.roa (hash: +HeOEQXq41iJ7S0nO2qqAI09YN5UE1e6xIQ3R8exCoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:6c:b3:ad:b7:ad:c2:0e:d6:58:7a:d3:21:2f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Validity
Not Before: May 12 19:01:04 2026 GMT
Not After : May 13 19:01:04 2026 GMT
Subject: CN=855c57de3af98607074ed0aaef07c604918f36a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9b:cf:a2:4e:7d:48:4b:d0:90:d0:78:c2:6d:
c4:6c:f7:2c:b3:0c:0f:80:a2:0b:da:cd:9f:3b:08:
60:51:c2:00:1a:bf:ac:fc:72:7c:4e:b1:38:f9:0e:
be:00:78:df:68:94:33:ea:8e:b6:18:bf:8c:57:8c:
50:23:b9:1c:81:94:6d:3e:03:aa:40:16:d7:fd:32:
25:6d:c4:37:b3:d3:3d:8d:a3:3b:c1:bb:a0:32:f5:
13:5b:e9:ac:23:99:78:7a:9d:52:28:04:db:5e:ce:
b4:72:eb:71:ed:23:35:67:76:93:6b:21:a0:f6:be:
8c:d7:30:1b:73:24:b1:04:76:21:a7:b1:8e:14:11:
02:b9:d3:33:5e:33:71:cc:3b:0a:56:f2:40:46:b7:
89:2b:6a:6d:ad:ad:c3:2a:f2:30:a8:ea:2a:cc:f7:
6f:1d:c2:ce:10:a9:91:ff:3e:05:3d:96:3f:63:dd:
72:b6:8d:23:f9:a6:85:ed:1c:da:10:70:a6:cf:8a:
02:e1:78:a1:5d:94:a4:ea:9c:8d:39:90:c0:7a:24:
dd:30:fb:93:78:73:5f:c3:1a:9e:c0:f0:dd:db:b7:
88:a0:ac:c6:2a:86:3b:d7:de:b3:9f:49:7d:32:9d:
36:21:13:60:19:b6:24:5d:4b:28:d2:df:91:16:07:
8b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5C:57:DE:3A:F9:86:07:07:4E:D0:AA:EF:07:C6:04:91:8F:36:A2
X509v3 Authority Key Identifier:
keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:15:aa:4c:11:34:81:fd:45:34:8b:3c:d6:ba:34:17:ff:bb:
25:05:31:e4:c7:52:f7:6b:0d:b8:88:2b:06:a1:35:05:94:d7:
42:14:56:e5:6b:67:b7:bc:9c:fa:c0:69:a7:f7:b1:bc:a8:08:
f8:ec:7c:26:6f:6f:fa:6d:50:28:92:64:e2:18:ba:f5:43:fa:
ff:1e:d4:90:21:91:81:4b:f8:16:26:b5:f0:69:ae:57:38:61:
e9:62:59:00:cf:29:16:6f:d2:92:f7:a6:06:e3:82:16:d4:4f:
f8:a7:09:d3:26:f1:84:31:7b:01:72:c8:e8:7c:67:cf:58:cc:
1f:2a:60:a0:e5:6b:7b:66:21:7f:ab:ae:15:3a:90:1d:eb:84:
1f:1d:ad:3f:e2:eb:d6:0d:2c:62:06:32:97:33:20:d9:58:01:
f4:2c:71:e9:a7:30:16:ac:e0:96:78:57:68:ee:15:aa:1f:cc:
6d:d8:bd:96:66:c9:6d:ae:d8:24:46:2c:fd:73:61:fd:76:86:
46:6e:19:6e:89:63:3a:47:1f:0a:fd:06:53:21:bf:a0:e7:24:
f7:9e:d7:21:bc:8d:9a:07:bb:73:48:ae:7d:f0:1d:ed:0c:2f:
5b:11:94:0f:60:4f:ab:17:5d:ad:55:88:5d:53:ff:ac:1e:17:
a4:a9:8d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkGyzrbetwg7WWHrTIS/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNzJmNWQxMThhYmQxMjkxYWUyNDhlNmM2OWQ2NGE5OWE5
YWVmMDYwHhcNMjYwNTEyMTkwMTA0WhcNMjYwNTEzMTkwMTA0WjAzMTEwLwYDVQQD
Eyg4NTVjNTdkZTNhZjk4NjA3MDc0ZWQwYWFlZjA3YzYwNDkxOGYzNmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35vPok59SEvQkNB4wm3EbPcsswwP
gKIL2s2fOwhgUcIAGr+s/HJ8TrE4+Q6+AHjfaJQz6o62GL+MV4xQI7kcgZRtPgOq
QBbX/TIlbcQ3s9M9jaM7wbugMvUTW+msI5l4ep1SKATbXs60cutx7SM1Z3aTayGg
9r6M1zAbcySxBHYhp7GOFBECudMzXjNxzDsKVvJARreJK2ptra3DKvIwqOoqzPdv
HcLOEKmR/z4FPZY/Y91yto0j+aaF7RzaEHCmz4oC4XihXZSk6pyNOZDAeiTdMPuT
eHNfwxqewPDd27eIoKzGKoY7196zn0l9Mp02IRNgGbYkXUso0t+RFgeLuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVcV946+YYHB07Qqu8HxgSRjzaiMB8GA1UdIwQY
MBaAFDNy9dEYq9EpGuJI5sadZKmamu8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMt
ZDJkOTI0MWVjNWRiLzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMtZDJkOTI0MWVjNWRi
LzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxWqTBE0
gf1FNIs81ro0F/+7JQUx5MdS92sNuIgrBqE1BZTXQhRW5Wtnt7yc+sBpp/exvKgI
+Ox8Jm9v+m1QKJJk4hi69UP6/x7UkCGRgUv4Fia18GmuVzhh6WJZAM8pFm/Skvem
BuOCFtRP+KcJ0ybxhDF7AXLI6Hxnz1jMHypgoOVre2Yhf6uuFTqQHeuEHx2tP+Lr
1g0sYgYylzMg2VgB9Cxx6acwFqzglnhXaO4Vqh/Mbdi9lmbJba7YJEYs/XNh/XaG
Rm4ZboljOkcfCv0GUyG/oOck957XIbyNmge7c0iuffAd7QwvWxGUD2BPqxddrVWI
XVP/rB4XpKmNWg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:25:21 2026 by rpki-client