Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier: L4QlE+A8DfMfO5/RNKF1JL7LJ3TemWvG1C52fjmbiR4=
Subject key identifier: 6C:B9:E0:A9:CA:DF:D7:D9:04:54:11:95:F1:B2:00:E7:57:0E:AF:28
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial: 019D284D98E766F7C2C62AB22E4C170EC638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number: 0EB6
Signing time: Thu 26 Mar 2026 04:01:07 +0000
Manifest this update: Thu 26 Mar 2026 04:01:07 +0000
Manifest next update: Fri 27 Mar 2026 04:01:07 +0000
Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: FUObTIJEguFaMi7beQvVNaxwF+PfjzgFlxHn+0RYNl0=)
2: x3j0YXNfrQ1uoL9p2fnHwDo4Voo.roa (hash: +HeOEQXq41iJ7S0nO2qqAI09YN5UE1e6xIQ3R8exCoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:98:e7:66:f7:c2:c6:2a:b2:2e:4c:17:0e:c6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Validity
Not Before: Mar 26 04:01:07 2026 GMT
Not After : Mar 27 04:01:07 2026 GMT
Subject: CN=6cb9e0a9cadfd7d904541195f1b200e7570eaf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:73:b7:22:e6:dc:4c:46:4e:61:a7:5f:a9:
08:ae:0d:5e:32:cb:bf:69:c3:c7:66:af:d8:d5:a3:
c5:ab:de:61:25:af:01:29:97:c2:62:eb:e3:e9:69:
fe:a4:dd:e8:79:04:dc:52:35:48:e3:2b:14:de:f3:
f7:e9:4f:f2:a4:f2:7b:06:7a:0f:26:6b:f7:99:96:
69:0d:78:a0:d2:57:51:5f:07:9e:4f:8a:c2:65:3d:
95:83:eb:18:02:11:a8:7e:f8:73:0f:e3:5e:23:68:
4a:ff:f3:57:e8:33:b1:cf:76:30:70:a1:15:05:e5:
a2:c5:b0:71:0c:0b:31:54:90:b8:3d:f7:3e:ae:8f:
c7:98:be:b1:d1:05:d9:32:73:02:a7:3a:7c:d5:75:
18:94:dd:06:81:b7:6c:48:80:01:9b:07:67:94:48:
92:32:ab:20:bf:50:62:4d:d8:45:58:aa:c0:05:33:
d4:5e:e3:84:84:ff:ed:dd:fd:a9:6d:54:1e:31:e0:
54:d1:05:c2:f6:e5:d4:1c:b3:f1:bb:09:4f:11:e5:
63:ab:13:71:f5:1e:2a:b7:76:d4:94:a3:6d:74:52:
2f:4f:12:44:8b:51:58:8f:b9:fa:c7:8b:20:00:ec:
d0:93:91:55:9a:35:e8:5e:64:cd:df:46:41:93:c8:
41:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B9:E0:A9:CA:DF:D7:D9:04:54:11:95:F1:B2:00:E7:57:0E:AF:28
X509v3 Authority Key Identifier:
keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:03:f9:f4:69:f8:00:49:c9:e4:59:df:ba:13:5f:46:f9:9d:
fa:98:0f:86:bb:90:de:5b:bf:fe:11:81:f5:8b:09:66:ed:a7:
64:1e:ee:05:b3:fd:f3:76:6f:52:a9:9a:30:9d:3e:4c:b8:8f:
b2:f6:83:74:31:75:d1:2d:86:40:f1:bf:b3:13:36:a0:f1:c7:
cc:41:0b:81:f1:e1:6b:52:53:ec:c9:23:fb:a8:58:ad:b7:29:
ea:c8:46:f7:60:29:bb:4b:e7:d7:70:46:30:6e:70:70:b5:f5:
0a:22:b9:12:39:a4:4f:4e:eb:4d:2c:e5:a9:e8:72:04:c0:0c:
c0:b9:94:79:90:15:fa:14:16:da:c7:2f:38:60:a2:2f:bc:c4:
82:e7:d6:46:fa:ee:16:96:f5:3d:e2:b8:c6:7c:37:75:15:a5:
36:dd:ad:da:12:aa:65:74:24:a0:11:01:46:ce:fd:07:19:fd:
c9:f7:79:61:f2:9e:ed:99:b8:42:5e:46:cb:0b:17:84:36:51:
f2:65:21:c1:a8:67:f8:41:c9:fe:f4:84:1d:bf:48:f6:fb:21:
6f:31:ac:86:91:ca:9d:b2:0c:93:8a:bf:89:5a:64:8c:f1:4b:
c9:0b:c6:91:31:73:b6:98:3f:2a:c1:e1:56:c0:7e:00:e4:5c:
0c:2e:65:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:43 2026 by rpki-client