Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
File: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft (raw, json)
Hash identifier: VU51ik1Jmlrl56TFN7y7/R6EfUzwD+OIWitX+LGX9nA=
Subject key identifier: 82:77:33:40:97:EA:CB:13:15:2F:EC:AE:E4:B9:92:03:32:98:26:00
Authority key identifier: 9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
Certificate issuer: /CN=9b792de70f33b82882542bef23b18da97538ca04
Certificate serial: 019CAD906FBCC07921015627FD709095661F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
Manifest number: 164D
Signing time: Mon 02 Mar 2026 08:00:49 +0000
Manifest this update: Mon 02 Mar 2026 08:00:49 +0000
Manifest next update: Tue 03 Mar 2026 08:00:49 +0000
Files and hashes: 1: G2OQOrRbStQFRQnBFH5JsZK3fzk.roa (hash: J+Ruik9jZ8APiFx+KnGjdD7/sHBg8DbjFfn6BOTSsX4=)
2: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl (hash: RijQ5KmeNGRs0xIOv+emt6vtrqr5eP1oGGo8egNKcAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:6f:bc:c0:79:21:01:56:27:fd:70:90:95:66:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b792de70f33b82882542bef23b18da97538ca04
Validity
Not Before: Mar 2 08:00:49 2026 GMT
Not After : Mar 3 08:00:49 2026 GMT
Subject: CN=8277334097eacb13152fecaee4b9920332982600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:14:6c:93:68:77:62:82:20:db:94:72:10:28:
c4:d5:d6:b1:d9:50:05:0b:4d:22:e2:d9:fe:16:c9:
8c:3a:59:81:52:3e:a6:cc:79:ea:92:ae:bd:7e:7c:
37:68:c2:eb:fc:10:38:cb:4c:ff:82:17:e7:7c:e9:
b5:1e:2c:8c:6e:f8:07:f1:ac:4b:9f:79:10:d0:50:
71:8a:fc:c9:90:bd:95:fa:56:c7:34:01:2d:ae:1a:
67:9a:a0:ad:21:59:31:bc:f1:7d:af:fa:c1:70:d7:
af:8d:c0:d5:4a:8b:0c:57:81:39:62:07:f5:7a:f9:
1c:bc:ba:57:d4:7d:d8:2d:0f:3b:0d:1c:e0:84:55:
28:2e:9e:71:60:ac:28:d9:87:e9:76:ef:a1:3b:f0:
1f:b8:e8:2a:65:ad:64:ff:4d:68:08:db:55:ca:82:
a9:a3:be:59:ab:e1:35:9e:1c:f2:4a:33:53:aa:00:
29:f9:41:72:3f:cd:61:d8:7d:bb:da:0b:d8:7c:fe:
37:03:b9:be:2c:41:a3:ab:1c:60:58:2b:a6:ad:fa:
12:c0:67:d1:ad:f8:17:67:25:4f:f7:f5:7e:99:81:
da:43:51:56:da:eb:24:e7:b6:d2:0f:24:ac:86:b2:
a5:14:61:60:b8:ce:5f:10:b8:93:53:97:a9:d4:4b:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:77:33:40:97:EA:CB:13:15:2F:EC:AE:E4:B9:92:03:32:98:26:00
X509v3 Authority Key Identifier:
keyid:9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:15:aa:03:be:8f:2d:fb:85:76:5a:00:af:2a:26:0c:2f:34:
d9:de:bc:87:94:fc:99:c0:0f:fd:83:81:41:94:07:02:1f:c7:
29:3c:39:fa:f5:6a:b5:12:e2:cd:be:b8:bc:eb:85:a5:4f:ee:
e5:d7:17:63:6d:d2:bb:27:63:4c:58:59:80:0f:f9:b8:a0:f9:
e1:30:8c:c8:c5:39:92:dd:68:f4:da:dc:34:87:24:37:e0:22:
4b:db:4f:7b:01:49:6b:80:09:af:ea:ff:d7:64:c0:81:96:74:
f4:dd:de:32:dc:88:73:13:db:4e:af:b8:10:7b:66:19:c4:b5:
8d:d0:c5:ce:9d:21:94:dd:1a:ec:12:b4:fe:e6:a1:f4:8c:25:
27:00:d4:e6:b9:20:3e:2f:0c:0d:52:d0:bc:c1:9d:94:d1:24:
55:22:04:9a:80:73:a9:e1:64:fc:72:68:a4:be:61:3f:6b:fb:
97:c3:7c:a1:01:bd:2e:5a:62:30:20:35:44:8e:e9:7e:59:85:
63:6f:ee:83:41:10:19:0e:b8:5e:ba:dd:17:ac:10:38:7a:3e:
c5:98:95:fb:b1:56:37:22:f8:e2:ef:7d:ec:3c:19:43:c3:4f:
33:51:c2:df:91:9d:4b:9c:d0:dc:7b:f1:12:00:4f:fe:ed:af:
70:a3:18:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:43 2026 by rpki-client