Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
File: m3RNp58FMac61vS68IN-k-toAbE.mft (raw, json)
Hash identifier: z7IhZ65UGpZuTWyekfFaId2MdY9at9KBgn9NlpGPA0g=
Subject key identifier: CA:0F:8B:F0:3E:C7:20:12:0A:80:9D:48:E9:B5:FF:9F:EE:B9:81:F4
Authority key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
Certificate issuer: /CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Certificate serial: 019D9B1A1CF44234981D8E47814CF82615FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
Manifest number: 0194
Signing time: Fri 17 Apr 2026 11:01:12 +0000
Manifest this update: Fri 17 Apr 2026 11:01:12 +0000
Manifest next update: Sat 18 Apr 2026 11:01:12 +0000
Files and hashes: 1: RGb-rCoDknImAicpKoX_vtBq9Fs.roa (hash: UkIIBaoP+gfi07Ufjwc/M1TNIrnyxcH9oHFTQ2095Lc=)
2: bFYiDJKsGB0ZympkJZ5TjPDffcs.roa (hash: 0Z23FXjNdERF8k8I3emVp0R5JdsnHYRyYZTMKy2BSlY=)
3: m3RNp58FMac61vS68IN-k-toAbE.crl (hash: HH2chXrXYme+IcQff8BBY1UxxO/0UOmX2otmsxF/HsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:1c:f4:42:34:98:1d:8e:47:81:4c:f8:26:15:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Validity
Not Before: Apr 17 11:01:12 2026 GMT
Not After : Apr 18 11:01:12 2026 GMT
Subject: CN=ca0f8bf03ec720120a809d48e9b5ff9feeb981f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:d8:a5:90:6b:44:f4:5a:09:42:33:ff:95:
36:06:b4:b3:f0:56:00:7b:91:15:de:f2:4c:52:01:
6a:69:e7:61:75:63:0f:06:7e:d5:99:22:e1:9f:24:
95:99:bb:4a:c1:a6:53:5f:65:ec:7f:d9:bc:81:2f:
28:e6:76:2a:3a:c1:83:80:aa:0f:75:33:99:60:d4:
38:fa:ee:dd:1e:d2:be:20:3b:fd:e7:c0:42:10:c9:
24:75:a2:09:32:70:34:27:9c:1a:aa:ee:d5:b7:a0:
65:c1:12:b0:b7:a1:72:a7:c3:be:6f:63:88:fa:d7:
e8:22:e5:1b:7a:38:3b:ac:78:8c:74:58:44:a1:4f:
28:f3:aa:8d:c7:33:6b:8f:36:f6:94:90:0e:62:73:
6e:02:02:58:50:64:21:5e:20:e5:ab:44:8c:df:ff:
cd:d9:7d:9f:c4:dc:87:9b:38:7b:59:dd:f5:52:cb:
dc:9a:86:c0:a4:dd:60:f7:e6:5e:82:40:dc:92:fc:
02:7d:19:e4:00:3f:0e:31:6b:e6:a0:6c:55:59:26:
7c:f8:22:b8:f2:6f:32:56:40:4b:d5:23:7f:65:1e:
b4:91:31:af:68:5b:7b:65:3f:57:54:a9:82:29:79:
30:01:0d:68:2f:d4:df:cd:c7:cb:e4:34:4d:70:6c:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0F:8B:F0:3E:C7:20:12:0A:80:9D:48:E9:B5:FF:9F:EE:B9:81:F4
X509v3 Authority Key Identifier:
keyid:9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9b:35:90:90:7f:15:d9:99:08:c5:56:ff:d4:9a:c8:b5:fd:
e0:1d:27:4b:d6:f9:b8:66:ae:12:e7:0a:6e:bb:6f:27:36:f3:
35:ad:0a:87:bf:bb:2b:40:5f:43:83:3b:aa:c4:e5:33:1c:2f:
f6:94:3b:7a:47:31:a7:65:88:7a:f2:2a:f8:42:97:9f:c8:db:
96:55:1e:60:7e:17:a7:d6:5a:9f:02:2f:68:87:c3:4e:41:b2:
2f:3a:fb:f7:c5:89:44:dd:c6:2d:00:f8:67:3c:3f:86:f3:76:
e9:98:3e:34:a5:db:46:15:22:b1:f8:1d:35:24:e4:f8:65:ed:
1e:4c:5b:be:8c:63:bf:37:2b:cd:28:50:fe:3f:b1:4a:09:15:
26:72:ce:b3:0c:67:56:89:b0:64:b4:16:e9:c6:be:82:86:ca:
80:1e:01:56:32:93:0c:f1:00:0b:4c:a9:c3:56:69:86:9e:d1:
e5:3a:a2:4e:44:b6:46:23:29:75:d3:03:cb:cb:16:a7:61:e5:
82:9a:6f:91:b6:d3:a8:ab:b7:64:60:6d:7e:e3:cf:a4:6b:63:
c7:57:5f:8f:0c:f0:22:16:12:ba:ac:f1:ae:f9:c8:46:91:00:
cb:06:bc:6e:38:89:55:d3:d6:6b:80:14:c4:c5:0a:96:62:2e:
3c:14:2d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:12:30 2026 by rpki-client