Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File: M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier: 8FBz/HtbRTfPj5iNIEEPt/I+sUWbDX2gy4o422cadt8=
Subject key identifier: C9:BA:7C:59:9E:CB:2F:52:3B:80:EF:28:B3:91:78:1A:28:D0:1F:1E
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer: /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial: 01A1095D78AA86DFD9ABEC5BFCF970881445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number: 1A8A
Signing time: Mon 05 Oct 2026 00:01:22 +0000
Manifest this update: Mon 05 Oct 2026 00:01:22 +0000
Manifest next update: Tue 06 Oct 2026 00:01:22 +0000
Files and hashes: 1: 7MkQZGhOVtHQk5MQ7ZY9WW07D8Q.roa (hash: Cn+90mJi74+2BcOC5W598tXat8oZgbiFe0T88t32ER0=)
2: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: MOX9frgECdl0C1LjmE+5jFTcWAsSqCf0ERDuqwFXJHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:5d:78:aa:86:df:d9:ab:ec:5b:fc:f9:70:88:14:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Validity
Not Before: Oct 5 00:01:22 2026 GMT
Not After : Oct 6 00:01:22 2026 GMT
Subject: CN=c9ba7c599ecb2f523b80ef28b391781a28d01f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:41:05:14:ca:f5:6b:57:cf:f0:04:1b:73:
5b:30:23:59:63:78:9b:c8:69:06:47:0f:d3:d2:49:
1d:c8:33:7c:53:9e:33:00:99:7a:e8:e6:05:48:78:
e4:22:11:af:99:b3:0d:d3:7c:de:1a:43:7c:6a:09:
cd:5a:52:58:db:1f:61:12:d7:1b:a9:85:76:be:42:
4b:cd:33:f2:9a:1c:b3:c8:22:8e:7e:bc:38:ad:82:
9b:30:75:41:f2:b1:94:73:70:87:a2:60:84:00:48:
89:3c:de:ba:31:6c:af:91:e2:bb:6f:81:75:c5:4f:
4b:44:ae:45:af:8e:6b:5e:c5:bf:c9:cb:43:f8:5c:
72:82:e2:7b:36:e6:94:b3:58:38:89:7d:f8:af:e2:
92:94:60:49:2b:89:a0:38:e8:57:01:97:9e:5c:ca:
6d:a3:0a:84:73:18:32:60:d9:01:9c:8a:d0:44:8f:
67:12:96:84:7f:dc:c5:b8:58:5a:fd:a3:e5:9d:30:
8b:49:9c:81:19:0c:8a:b2:f0:6c:9f:3f:42:b5:63:
3f:f3:64:7f:da:ce:d2:f9:02:56:16:04:07:ae:5d:
8e:18:ae:c0:90:ca:b1:fc:47:2d:1d:cb:27:f1:07:
cd:58:83:d0:7f:16:d8:b0:57:da:05:fe:71:16:c4:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BA:7C:59:9E:CB:2F:52:3B:80:EF:28:B3:91:78:1A:28:D0:1F:1E
X509v3 Authority Key Identifier:
keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e5:cf:6c:e8:a1:65:19:d9:ab:6b:a5:50:89:d4:8d:89:72:
80:81:9b:e6:b5:40:4b:ab:70:85:93:d1:48:24:a8:75:60:ed:
82:bc:86:3c:5e:2c:75:7e:c2:0c:f6:77:21:ed:f8:29:ea:81:
da:74:d7:d0:90:e3:50:2e:dc:c1:78:2f:58:42:c2:a8:84:23:
51:86:19:73:b4:42:be:10:fb:e7:6f:a5:c4:e2:fe:09:9d:56:
84:3b:16:1b:ff:0d:d6:59:6f:7b:61:7c:5e:93:93:6b:63:15:
a6:1f:9b:83:be:1e:cb:13:13:05:94:d7:71:b6:e8:05:19:11:
72:fa:56:1e:cd:11:b7:d2:15:0f:9a:eb:2a:74:11:85:a2:9c:
43:8d:08:48:fe:88:99:99:2b:3f:6a:07:c4:77:52:e8:43:e4:
88:31:46:df:36:09:69:c5:d0:dc:0d:c1:1b:f6:b7:b5:91:04:
07:57:7f:c4:9e:39:75:e7:ed:32:dc:47:06:7f:19:ed:ac:a1:
e9:c3:af:85:3b:13:fa:d7:09:75:94:0e:d9:64:09:e7:71:96:
ea:5a:55:ca:5c:ac:e4:f5:32:7c:d5:db:4d:ab:ad:e4:10:2d:
a0:b5:93:89:d4:70:e7:2c:42:19:dd:ef:55:24:cd:13:c8:73:
fa:a3:12:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 14:36:54 2026 by rpki-client