Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File: mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier: MwopJWtYKqJn5Vypb/5nu5ST5lm5RYbQPGKlj46/+vk=
Subject key identifier: 3D:EA:3D:02:8B:B0:A0:0B:5B:08:5D:62:12:4C:28:46:A9:11:15:7C
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial: 019D27DFD29ABF22D753189733AA2BE6D7D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number: 1009
Signing time: Thu 26 Mar 2026 02:01:12 +0000
Manifest this update: Thu 26 Mar 2026 02:01:12 +0000
Manifest next update: Fri 27 Mar 2026 02:01:12 +0000
Files and hashes: 1: 9V0OURiDiNau3vtgop_pWs2qLIY.roa (hash: QXeJumFHpJY2MFDHKEGfzpT/RlrjsPQ3Q8A0olOdujI=)
2: G8esPcMzQ9AFE_Fw8xl_QXTlOTU.roa (hash: 3RDVfSY7ZJX5UewWPelwEVlTR7B8w1TOwr419YQ9XiI=)
3: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: JaZeSQrw1phg1cTQcFWWYME+ADP1r7lYAjICisaBSng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:d2:9a:bf:22:d7:53:18:97:33:aa:2b:e6:d7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
Validity
Not Before: Mar 26 02:01:12 2026 GMT
Not After : Mar 27 02:01:12 2026 GMT
Subject: CN=3dea3d028bb0a00b5b085d62124c2846a911157c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:27:c9:56:f7:65:c8:7d:3d:36:57:a0:49:
74:c3:df:73:20:87:c1:19:cd:cd:6d:93:59:eb:af:
03:e1:8c:3d:2b:ed:2e:6a:39:5f:94:e9:a3:fd:0c:
ea:96:68:82:90:c4:8f:ee:7c:16:dd:f3:6b:80:8b:
fe:a2:8f:2e:6f:94:f2:15:d7:af:09:dc:ca:1a:d8:
72:0f:36:d0:b7:90:cf:b5:8d:7a:fe:e0:69:51:6b:
60:7c:fd:b0:51:50:58:40:ca:65:57:2e:60:8c:7d:
a9:cf:ef:82:f5:8a:68:72:24:63:52:0d:a2:e8:b9:
14:3d:4b:5a:1d:f5:df:5a:65:14:ff:a4:18:2b:ef:
75:ba:6a:23:a3:ce:b9:23:2d:8b:e1:4a:1b:40:40:
26:e0:67:41:c6:16:de:0a:ac:4a:b2:bf:94:dd:9d:
48:01:ee:01:21:33:3a:42:ac:ac:f0:31:8b:04:b9:
f9:79:71:b7:65:83:f2:2c:cd:b5:05:63:65:a2:58:
ef:a3:09:f8:78:8c:b1:c2:c8:e3:05:bc:83:ed:fe:
46:80:f6:60:78:2e:12:5c:71:20:54:fa:1e:0d:a4:
8e:b3:8e:8f:f8:6b:5a:8d:4b:9b:a6:15:c2:b2:a2:
52:dc:6a:b1:35:70:d0:93:e0:c0:83:4b:f8:bb:8f:
67:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EA:3D:02:8B:B0:A0:0B:5B:08:5D:62:12:4C:28:46:A9:11:15:7C
X509v3 Authority Key Identifier:
keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5d:c1:6d:dd:a4:45:5b:2f:1e:07:ce:45:da:81:a7:ff:ac:
9d:f1:67:22:7c:d0:9c:41:4b:36:0e:74:ed:87:e8:f3:ba:ba:
cd:72:57:6c:05:39:a0:50:13:9f:68:82:17:4a:4e:9b:64:a7:
d8:44:da:18:39:b0:6e:05:d3:09:38:56:9f:f4:71:b3:98:31:
a3:d7:ff:d6:6a:67:e8:77:78:e8:59:0b:42:ba:6a:3d:e9:72:
b7:ab:72:38:1f:ad:a5:a1:bd:23:ac:52:1b:5f:0f:56:f6:f3:
36:da:31:fd:81:62:cb:c9:b8:32:d2:be:ba:bf:45:13:3e:f0:
59:f5:9f:a4:76:66:db:d5:2d:a1:89:82:d8:a2:7e:26:4a:8a:
0f:ff:16:8d:2c:a7:97:b0:86:09:80:9e:af:36:aa:60:70:5f:
6e:c6:1f:99:e2:49:6d:c0:9b:61:ca:dc:18:95:b8:12:5a:8c:
d5:75:d2:ad:19:7d:aa:29:36:5f:c8:9f:76:52:24:17:17:b9:
1a:73:3e:17:f2:0b:e7:27:c0:f3:34:98:72:ac:30:f9:3b:7c:
0f:7d:ef:ce:7a:e4:14:36:8f:18:c7:9f:a4:0d:ab:7c:75:b3:
6b:3e:bc:32:27:bb:66:e6:a6:d7:fd:c0:11:b6:b1:23:9f:e2:
b5:b0:a5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:21:27 2026 by rpki-client