Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier: myFc9XcQVYvRlzwQVrjlqkm1EcczpZHide+ja0lEEuc=
Subject key identifier: 4A:3A:08:B4:D1:29:FF:E7:AC:A0:9E:A8:E1:E7:20:A4:91:17:E5:77
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial: 019FAB6324F7605BB1DE5F85DE074569A6C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number: 1003
Signing time: Wed 29 Jul 2026 01:00:29 +0000
Manifest this update: Wed 29 Jul 2026 01:00:29 +0000
Manifest next update: Thu 30 Jul 2026 01:00:29 +0000
Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: YP8hjPP9jj/R71vcB4Cz3tmsQvl5cUY5TBOJxchC3Ho=)
2: x3j0YXNfrQ1uoL9p2fnHwDo4Voo.roa (hash: +HeOEQXq41iJ7S0nO2qqAI09YN5UE1e6xIQ3R8exCoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:24:f7:60:5b:b1:de:5f:85:de:07:45:69:a6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Validity
Not Before: Jul 29 01:00:29 2026 GMT
Not After : Jul 30 01:00:29 2026 GMT
Subject: CN=4a3a08b4d129ffe7aca09ea8e1e720a49117e577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:ff:53:a8:b4:b2:e1:51:f2:ff:b4:16:67:
64:48:6a:b7:5d:12:3b:6e:34:5d:a3:48:e1:03:10:
77:37:f2:76:6a:9d:5e:6e:4e:c0:87:f7:81:e7:54:
e0:7e:a0:cd:18:5f:95:a5:db:55:b3:93:44:1a:f8:
dc:db:93:35:9d:37:cb:54:93:dc:4a:dc:9d:39:16:
6c:06:4e:41:cf:73:3d:08:4c:14:9c:fd:46:f2:18:
cd:ab:6a:bf:50:78:4f:15:d6:e7:f1:59:ec:6e:32:
eb:2e:bf:6c:82:c3:ae:7e:4f:9a:65:96:02:43:a1:
c9:28:46:a4:65:75:16:24:0a:42:ee:47:8e:b1:c6:
d7:2a:c1:cd:c1:65:e4:bd:7f:a7:0a:4d:f6:fa:08:
a7:cf:52:56:65:6e:87:ae:c3:1e:13:14:7f:9c:cd:
34:df:e3:e8:43:64:d6:7e:f3:12:cc:20:e2:43:3a:
74:73:f4:aa:a5:dc:0a:af:fd:aa:c0:c2:79:4e:51:
d5:24:46:b4:8d:5b:10:8c:5a:9b:31:dd:68:3a:b7:
f9:b8:4f:a1:a0:be:73:48:d4:b7:fe:98:87:a6:3c:
12:94:89:9f:2b:bc:2a:ce:eb:78:9f:76:31:64:d6:
c5:23:5d:2d:41:3a:60:ce:99:6b:4b:0f:e4:41:58:
09:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3A:08:B4:D1:29:FF:E7:AC:A0:9E:A8:E1:E7:20:A4:91:17:E5:77
X509v3 Authority Key Identifier:
keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d1:06:96:0a:ad:25:a6:0a:60:2d:c8:a0:b4:b2:5b:23:16:
a4:93:f5:93:73:a0:b8:e5:2e:cf:6c:fc:70:aa:63:50:53:bf:
6c:0a:0e:f8:44:c6:de:77:37:98:20:5f:52:7e:77:85:11:a9:
13:c3:4a:2b:0e:53:b2:56:c0:fa:90:06:d1:54:3f:fe:ef:43:
80:33:65:af:7f:8b:01:11:94:79:0b:54:2f:de:51:fb:39:9a:
22:4d:5a:97:f5:4e:62:76:df:29:a9:bc:f2:f7:ff:6f:75:44:
93:cc:9f:ab:b2:2f:ae:9e:83:2c:98:93:81:bd:06:4d:1b:dd:
7f:07:ab:a3:78:c4:6c:77:f9:53:59:26:e5:f9:eb:b8:b6:e8:
0b:e9:b8:9a:1d:31:89:9e:46:67:fe:5d:48:9b:bd:22:4f:f4:
88:24:77:67:6e:5a:6e:99:42:fe:1a:e5:09:5a:c3:8b:f4:6d:
45:8c:d4:83:bc:7f:bd:11:e6:00:4e:35:81:84:f9:fb:7c:52:
be:57:d9:54:90:33:08:82:46:24:cc:70:ef:1a:2b:62:10:ae:
19:c1:44:a8:90:18:b2:c4:05:7b:88:44:97:41:58:66:f4:f9:
c3:03:b9:ec:d3:ef:dd:ff:3b:9c:eb:d8:f0:c5:46:01:da:86:
38:5a:98:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:32 2026 by rpki-client