Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
File: m3RNp58FMac61vS68IN-k-toAbE.mft (raw, json)
Hash identifier: 5k8fAB6efBxdjFCka2Vc8H715fl3Cjl+64fKaA+Lc+8=
Subject key identifier: CD:D0:1B:AA:43:A4:23:4C:F4:4F:68:FC:45:1D:79:EA:EA:C8:D3:DD
Authority key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
Certificate issuer: /CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Certificate serial: 019CA9B396AB3F9F7DFC697684825AAC2CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
Manifest number: 0117
Signing time: Sun 01 Mar 2026 14:00:44 +0000
Manifest this update: Sun 01 Mar 2026 14:00:44 +0000
Manifest next update: Mon 02 Mar 2026 14:00:44 +0000
Files and hashes: 1: RGb-rCoDknImAicpKoX_vtBq9Fs.roa (hash: UkIIBaoP+gfi07Ufjwc/M1TNIrnyxcH9oHFTQ2095Lc=)
2: bFYiDJKsGB0ZympkJZ5TjPDffcs.roa (hash: 0Z23FXjNdERF8k8I3emVp0R5JdsnHYRyYZTMKy2BSlY=)
3: m3RNp58FMac61vS68IN-k-toAbE.crl (hash: t02+bsFzhXQNsqkgc3JoDCN2rNaiX0NzUn4ViOnUrHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:96:ab:3f:9f:7d:fc:69:76:84:82:5a:ac:2c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1
Validity
Not Before: Mar 1 14:00:44 2026 GMT
Not After : Mar 2 14:00:44 2026 GMT
Subject: CN=cdd01baa43a4234cf44f68fc451d79eaeac8d3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:e6:ea:31:ce:2f:64:b7:0e:08:63:88:2c:
82:df:1d:38:55:f4:63:52:49:5f:d2:52:5b:09:c2:
83:c4:28:67:c4:d3:53:0f:14:cc:39:f6:cb:32:cf:
02:28:6d:d0:4d:c2:05:99:d1:13:5f:c3:dd:6f:2d:
1f:5a:9e:5e:91:05:48:3d:11:a3:fd:7b:5e:0d:f6:
f6:62:f5:17:38:8d:4f:f8:33:52:76:7f:4f:db:5a:
e4:ae:fd:2b:27:93:4d:f1:85:5b:e2:9a:fc:30:09:
81:d5:94:23:44:32:f5:9b:5d:97:1f:20:18:58:0d:
63:eb:a0:e4:3f:20:17:5e:ab:43:52:ea:ab:14:dd:
f2:92:75:b1:0e:ea:e4:98:bb:d9:d9:3e:9d:af:2a:
54:d6:46:9e:93:81:16:ed:08:3c:43:48:fe:bd:76:
10:d9:5e:e2:78:3b:06:38:ad:6f:09:7d:8f:7a:4e:
55:2a:23:fc:69:4e:a3:76:ce:58:88:4a:e6:36:ae:
26:fe:b0:82:d8:99:a9:7b:1d:88:60:07:20:79:f9:
4f:52:44:24:6e:a6:b6:ee:f6:a3:b0:4c:88:07:64:
73:a8:bd:9f:04:eb:b5:b9:b5:61:4e:d2:d5:5e:e6:
1d:a3:bd:5d:1b:b1:01:c7:21:9f:6f:6c:1d:13:3e:
7c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D0:1B:AA:43:A4:23:4C:F4:4F:68:FC:45:1D:79:EA:EA:C8:D3:DD
X509v3 Authority Key Identifier:
keyid:9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:13:10:b8:bd:21:ac:f5:7c:ab:7c:bc:8d:53:17:d8:3f:d2:
93:eb:b6:a0:07:d8:11:76:ab:bb:3e:89:96:a9:e9:f9:45:5f:
4b:26:f8:40:c6:3d:54:24:d6:30:0f:30:93:ba:03:60:cb:89:
d5:f4:7e:6e:fc:e8:ed:8c:6d:54:56:88:05:e5:86:43:cd:78:
8c:b3:63:68:26:4e:1a:ac:3c:ee:62:02:ec:f8:5c:40:f7:8d:
5a:b9:3e:e4:8f:48:0d:68:93:ca:0b:d5:31:46:ee:ed:bf:5e:
e9:d4:bb:77:cc:55:b2:8a:89:eb:30:0e:35:fa:5d:f9:e7:09:
1b:ee:e6:a9:a0:09:3c:17:8f:80:5a:4b:c6:a7:9c:5b:ba:ff:
36:b0:62:b9:9e:1f:0d:5f:47:dc:09:bc:e0:fa:0e:22:10:d5:
61:9a:76:e4:3e:88:a4:0f:73:59:4f:5d:a7:cb:a5:a1:69:b1:
48:db:35:f7:dd:f6:27:56:ea:a8:7a:a2:3c:f0:2e:59:ad:9d:
91:c7:cb:6a:51:11:4e:da:ab:41:73:35:33:ee:41:b9:ca:fd:
aa:23:43:d7:83:1d:b3:33:fb:59:35:fb:c2:fc:86:7f:8d:2b:
1d:56:ec:d3:49:83:54:ce:c4:e4:8f:f5:18:d8:a1:a2:c1:6f:
55:83:91:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:55 2026 by rpki-client