
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File: M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier: NstFQoGFLd7V7vn5uNAOyzPa+t05Er7k8UQBZ9CSFLM=
Subject key identifier: 76:BF:FC:06:FC:7D:D2:E7:41:7E:A2:3C:80:D2:6B:3A:72:E1:9C:5D
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer: /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial: 019D2AA9897B2485FEE8BC1A82D24D73BF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 15:00:46 +0000
Manifest this update: Thu 26 Mar 2026 15:00:46 +0000
Manifest next update: Fri 27 Mar 2026 15:00:46 +0000
Files and hashes: 1: 7MkQZGhOVtHQk5MQ7ZY9WW07D8Q.roa (hash: Cn+90mJi74+2BcOC5W598tXat8oZgbiFe0T88t32ER0=)
2: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: DSzo4vsy/ia3x+Pztne5n7cbdPmIRJKjBvNA+52iysk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:89:7b:24:85:fe:e8:bc:1a:82:d2:4d:73:bf:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Validity
Not Before: Mar 26 15:00:46 2026 GMT
Not After : Mar 27 15:00:46 2026 GMT
Subject: CN=76bffc06fc7dd2e7417ea23c80d26b3a72e19c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:b4:e9:30:b0:d6:7a:59:86:d4:d2:a8:d3:
79:7c:57:d1:24:26:ba:b2:db:7b:b9:fe:22:5f:14:
6f:05:92:94:5a:b9:22:b5:e1:84:6f:d9:04:43:f9:
98:27:7e:03:d7:c2:9e:2b:5d:5e:8e:86:4e:83:66:
6f:31:3c:30:6d:e9:27:e8:85:3f:c1:a2:05:74:fe:
a4:94:26:bc:67:a6:30:0a:ac:98:70:93:29:40:99:
b0:03:b7:d4:5a:61:07:93:0e:85:84:8e:9b:19:1c:
24:3c:b5:55:9b:71:a4:99:e5:46:81:c6:90:35:ac:
98:38:93:90:39:bc:a6:18:ba:7e:4d:28:d8:52:30:
b6:e8:88:2f:7c:d7:4f:a9:34:96:73:a0:44:22:7c:
60:4b:25:86:ba:19:fb:e5:58:74:55:dc:97:e9:69:
b8:2e:af:00:25:bf:69:c8:c8:fc:96:b3:5b:4c:0f:
06:ed:a3:b5:99:28:cb:16:36:ad:e7:ec:43:b2:26:
cf:db:f8:05:0b:44:40:2e:72:30:3c:9f:60:98:50:
de:33:55:dd:c2:d2:86:76:c2:8c:2b:15:6a:cd:e3:
02:8a:50:fe:b5:13:ef:33:3b:8a:d1:d2:91:4b:87:
2c:53:fc:8b:69:ca:3f:62:f8:97:8a:de:96:7d:a8:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BF:FC:06:FC:7D:D2:E7:41:7E:A2:3C:80:D2:6B:3A:72:E1:9C:5D
X509v3 Authority Key Identifier:
keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4c:3a:3f:e9:a8:dc:c2:77:82:fb:95:f8:83:fb:24:e0:d6:
aa:c6:02:5a:96:80:e5:66:7c:60:4a:56:12:69:cf:49:92:5c:
01:10:52:bf:9c:2c:eb:33:fc:e5:ae:12:34:78:3c:7e:af:71:
07:da:ce:f6:15:aa:ba:42:d5:f1:ae:ed:eb:af:1d:8b:ad:bf:
1b:01:42:52:6d:19:dd:e4:3a:94:d0:3a:bf:23:ab:f7:cc:dc:
35:f0:3f:f8:7f:4a:c2:96:0c:6e:30:cc:cf:c5:04:69:d6:9c:
81:56:7b:ab:52:58:24:8d:f6:69:dd:dd:0a:da:28:e6:4c:c5:
8c:8a:e8:02:95:a7:c4:2e:0d:bf:bd:24:d7:70:0f:b6:c2:23:
c7:58:32:7d:3f:1a:7e:7f:a9:4a:e0:49:85:50:c0:1c:69:32:
06:e6:8e:44:ef:ad:7b:f0:da:cc:06:48:7f:52:66:06:6d:35:
3e:b0:87:b7:ef:66:b0:3e:5a:6a:ad:bb:03:66:6d:4e:14:83:
e8:b3:a6:0a:a2:e1:35:6a:a5:50:8d:42:2b:05:82:b9:67:68:
89:6d:50:6c:84:77:8c:c1:d3:eb:e5:5a:94:44:73:79:16:6e:
2f:96:c4:9e:47:6e:78:ef:93:d9:e4:60:84:b0:25:d0:43:fa:
f1:5d:45:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:13:50 2026 by rpki-client