Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
File: METmC7lxMuqEmlP8VUu7xjlIsBY.mft (raw, json)
Hash identifier: tIIxwiRy/odYYvYtebg2N5XLtkspMvr2usVGInUiQ1g=
Subject key identifier: 16:B4:6C:46:A7:53:3C:89:57:60:CF:A2:26:E0:D8:71:89:2F:32:92
Authority key identifier: 30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16
Certificate issuer: /CN=3044e60bb97132ea849a53fc554bbbc63948b016
Certificate serial: 019CAEA319A6DAE2C09A163D9FE7836A18AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
Manifest number: 12CB
Signing time: Mon 02 Mar 2026 13:00:50 +0000
Manifest this update: Mon 02 Mar 2026 13:00:50 +0000
Manifest next update: Tue 03 Mar 2026 13:00:50 +0000
Files and hashes: 1: METmC7lxMuqEmlP8VUu7xjlIsBY.crl (hash: ogHoUtOvTjztuk3Yd+g4fX0qMuWjpZ5XuKYbTmuZETU=)
2: uimPsZybZq-yrSLpRKTm-vYNNYc.roa (hash: wtZLQDeZDb+XPOKiWpCpOdMamv2X0LhZ3Xo+KoH23rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:19:a6:da:e2:c0:9a:16:3d:9f:e7:83:6a:18:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3044e60bb97132ea849a53fc554bbbc63948b016
Validity
Not Before: Mar 2 13:00:50 2026 GMT
Not After : Mar 3 13:00:50 2026 GMT
Subject: CN=16b46c46a7533c895760cfa226e0d871892f3292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:ee:5d:77:20:67:dd:62:28:8c:ff:2e:78:
2a:84:0c:3b:a7:28:ce:ff:52:57:03:58:30:fc:b3:
2d:11:5d:27:70:58:50:37:34:43:7c:d4:0f:a2:fa:
24:fe:58:42:4f:2b:a3:2f:8c:c7:2e:1e:7a:a8:0b:
27:c1:72:f0:11:d5:4e:c2:c5:7c:d7:17:88:6f:59:
25:05:c6:67:e6:8f:b9:ae:e6:95:a7:0b:02:8b:15:
c2:a9:1c:17:03:bb:ed:98:44:5e:03:29:0d:ab:48:
69:54:f1:29:d3:43:f5:96:01:30:77:99:f4:95:51:
7c:cc:49:c9:f2:b6:68:6c:35:7a:53:9f:4f:59:29:
88:97:32:eb:cb:8b:ce:03:b2:71:be:75:57:59:d6:
20:af:50:2b:22:5b:02:ac:5a:2f:fd:d5:ac:1d:56:
87:7c:70:98:21:da:76:c0:07:7d:12:5d:11:86:0e:
7b:4e:64:3b:55:bf:9e:25:2e:1e:e8:79:f5:d9:aa:
c8:29:3a:52:bf:6f:ce:dc:5c:34:b8:07:b9:d6:e5:
3b:da:6c:86:e8:6e:9e:a9:95:9c:a1:57:40:e2:ca:
d4:d9:49:72:29:35:c0:f2:58:86:90:c5:06:20:b7:
0f:52:87:c1:2d:2f:06:1e:f1:6c:42:5c:04:46:7e:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B4:6C:46:A7:53:3C:89:57:60:CF:A2:26:E0:D8:71:89:2F:32:92
X509v3 Authority Key Identifier:
keyid:30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e4:ee:0a:39:32:90:6a:95:12:c3:bd:3e:dd:fb:67:6e:aa:
7b:28:d6:b1:00:ee:6a:6b:aa:8e:7d:52:f8:8a:78:6c:05:8a:
82:a2:60:da:77:b4:9f:4e:ff:27:86:35:c6:48:a1:22:b5:45:
02:15:01:26:70:94:11:47:74:1e:a4:6a:30:7e:df:8d:9a:85:
ad:6f:24:e5:99:bb:b1:f1:f8:1c:89:b4:8b:a1:d8:fb:c4:3a:
90:ff:fd:fb:26:97:15:0e:76:99:9c:45:b3:8e:e0:c6:7e:cf:
b2:8f:45:71:d7:fd:ce:f3:22:4e:99:65:47:e3:96:88:ee:22:
da:b2:eb:69:17:c1:8b:26:63:72:d8:14:0c:f1:7c:e1:a5:d8:
46:1f:7e:c2:1a:22:23:06:07:3a:3d:de:e1:c7:cc:41:39:bc:
a7:20:3f:2f:71:a9:9d:42:36:60:45:d5:4e:c3:60:5c:e5:c4:
88:9c:16:9a:80:fe:fe:a8:65:54:06:97:d0:db:04:74:1b:ca:
a2:5a:f5:a5:7e:6c:47:5f:61:eb:7a:98:fa:2d:d1:94:8d:12:
bf:32:d0:1a:11:5b:35:c0:53:b3:8e:9a:b1:c1:c2:f1:d1:d3:
93:ff:54:96:cd:3d:b1:b3:e5:c1:61:9f:34:2f:ec:ef:03:41:
7f:e9:d7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:08:49 2026 by rpki-client