Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier: EYoCVu/DEOQjHsZcGmrDbLjzv2EQsOPMe+vwLeQrRHg=
Subject key identifier: 69:B0:AD:DA:8C:05:42:40:3A:D5:F3:40:F6:AE:17:65:F5:3A:7F:52
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial: 019CAAC64BAB52A1C5DB587A8EA467ACC857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number: 0E75
Signing time: Sun 01 Mar 2026 19:00:48 +0000
Manifest this update: Sun 01 Mar 2026 19:00:48 +0000
Manifest next update: Mon 02 Mar 2026 19:00:48 +0000
Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: Gc+lGccDdftVI8BsQ3vPSDBOr+XqEl/cep2ZGWebJ4Y=)
2: x3j0YXNfrQ1uoL9p2fnHwDo4Voo.roa (hash: +HeOEQXq41iJ7S0nO2qqAI09YN5UE1e6xIQ3R8exCoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4b:ab:52:a1:c5:db:58:7a:8e:a4:67:ac:c8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Validity
Not Before: Mar 1 19:00:48 2026 GMT
Not After : Mar 2 19:00:48 2026 GMT
Subject: CN=69b0adda8c0542403ad5f340f6ae1765f53a7f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:5e:6b:51:49:b9:6a:88:27:5e:71:94:0d:
49:e4:46:ef:71:85:c3:1a:28:06:4d:9d:cc:c6:c2:
aa:1a:8e:63:09:f0:7a:e4:6f:88:55:07:0c:a4:a8:
d9:3c:28:65:7c:d0:af:d4:cc:1b:da:2f:74:00:2c:
af:df:a2:13:fb:b8:fa:e0:d4:ae:e9:55:0c:41:09:
39:05:be:3e:c9:bc:6e:99:60:67:94:98:0d:31:54:
a9:6c:36:e7:44:51:fa:53:68:af:c1:67:c4:a9:96:
9a:a0:14:80:29:02:00:f4:66:4f:1a:bf:8d:7d:de:
b9:7e:51:c4:b0:2c:71:66:4c:35:4c:63:56:5d:d1:
88:54:13:ed:88:e9:bb:3a:34:07:22:72:4e:d0:0d:
10:a2:c1:78:38:c2:71:85:7f:88:a7:4f:bc:68:a9:
ad:23:b1:4a:56:d2:9d:59:13:7c:63:7b:8c:51:dd:
7a:f6:6a:c7:f1:c9:9b:f2:e8:68:3d:5d:a4:2f:5d:
ea:eb:97:27:c5:da:df:13:ef:cf:6f:b2:22:15:c1:
b2:d3:3c:d5:c5:fc:e0:5b:ef:3d:01:3d:2c:5a:45:
01:24:93:11:f0:1f:17:ab:b6:eb:3b:a4:a1:c2:67:
ad:1f:20:2a:54:ff:de:6b:9e:1f:75:7b:70:60:39:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B0:AD:DA:8C:05:42:40:3A:D5:F3:40:F6:AE:17:65:F5:3A:7F:52
X509v3 Authority Key Identifier:
keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2c:a2:a3:3f:d8:62:8f:89:eb:2a:37:7d:10:55:f3:42:7d:
00:a4:f7:50:70:83:aa:91:9d:f0:36:95:29:69:8f:94:c9:8a:
f4:b5:e1:b4:e7:67:c5:a3:1c:b2:55:de:c8:ec:af:ec:47:ae:
31:8b:bd:41:0a:e6:73:7f:2a:96:fa:12:83:3d:71:80:a0:16:
b2:10:de:a4:79:6f:f0:2e:81:14:77:34:52:6e:c7:6e:63:e0:
10:75:16:76:bf:f5:c7:f9:e4:43:18:47:ed:e6:18:97:06:06:
66:90:36:56:63:d1:47:47:12:82:1d:92:3e:2d:15:9d:75:5f:
08:7b:02:9d:62:46:3d:5d:37:e2:d9:36:16:c2:3b:57:3f:7f:
bc:78:8c:04:cc:2e:17:c9:a8:35:30:21:9d:84:6b:6f:d1:86:
8a:8d:64:87:91:2a:39:f5:99:a1:d5:e4:45:4f:a3:06:69:41:
0f:19:47:ad:94:2b:b2:19:7f:aa:d6:79:fa:af:ad:01:a8:57:
24:c8:13:7e:16:99:e4:0d:c5:60:c5:25:6b:e6:3f:b9:91:e2:
e1:58:a4:e2:69:1f:53:01:5b:43:2b:2d:7a:28:af:68:88:f6:
de:3d:26:61:6e:2c:ce:e8:f4:40:c3:53:c4:a3:34:9f:f0:40:
57:6e:96:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:47 2026 by rpki-client