Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File: mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier: 3r2QR5WsRz5Kgn8upNrNEruMf+gr+I4eRNAPCTPIcRg=
Subject key identifier: F8:3C:5D:9B:3F:9E:CC:FF:40:FB:18:64:6D:BC:D8:CE:31:61:0C:69
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial: 019CAA582F02A0E4028ED4D57218650BC581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number: 0FC8
Signing time: Sun 01 Mar 2026 17:00:31 +0000
Manifest this update: Sun 01 Mar 2026 17:00:31 +0000
Manifest next update: Mon 02 Mar 2026 17:00:31 +0000
Files and hashes: 1: 9V0OURiDiNau3vtgop_pWs2qLIY.roa (hash: QXeJumFHpJY2MFDHKEGfzpT/RlrjsPQ3Q8A0olOdujI=)
2: G8esPcMzQ9AFE_Fw8xl_QXTlOTU.roa (hash: 3RDVfSY7ZJX5UewWPelwEVlTR7B8w1TOwr419YQ9XiI=)
3: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: QPDrpskCLxOX4N93d/iJFN0MF3k4pjEuFZRiNs9NPsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:2f:02:a0:e4:02:8e:d4:d5:72:18:65:0b:c5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
Validity
Not Before: Mar 1 17:00:31 2026 GMT
Not After : Mar 2 17:00:31 2026 GMT
Subject: CN=f83c5d9b3f9eccff40fb18646dbcd8ce31610c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:2e:2e:33:0c:2c:88:06:c4:be:8a:fe:d7:
7a:1d:14:13:ae:67:03:fd:9a:f5:9c:b3:9a:3a:ea:
9e:35:d0:56:8c:14:dd:c9:d9:00:81:70:81:93:d2:
c5:df:80:e1:a9:63:d8:12:5d:b2:f5:d0:e7:7f:3e:
01:f5:da:c8:b5:70:e0:de:b7:f2:8f:45:7f:40:e7:
11:73:6e:5d:51:39:36:6e:34:0d:1d:0b:c6:5b:ac:
f2:6c:3f:35:db:b8:13:62:75:38:02:8f:68:34:c6:
02:9f:8f:5f:12:fb:62:5c:97:f0:16:69:15:4b:cf:
65:21:6f:21:e9:f7:26:c8:f4:b9:a4:85:d7:36:e2:
8e:05:62:eb:42:0a:c3:30:61:a9:02:a4:83:2c:12:
3b:0a:14:5e:e6:5a:b8:5c:06:88:09:e2:6b:cc:ca:
14:42:1b:17:bd:a8:6d:86:d7:d4:4c:2d:85:3e:1f:
85:b7:82:50:27:49:84:b6:da:ac:bd:54:eb:5c:b8:
c9:4b:42:b2:43:28:02:a2:a1:d0:25:65:20:15:36:
97:c1:77:46:ea:52:10:18:05:b2:30:38:e3:53:f9:
f3:41:04:6c:2a:0e:67:74:1f:48:7b:09:20:80:21:
bf:20:15:38:03:e0:50:e4:f5:f0:a7:0c:10:57:01:
6c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3C:5D:9B:3F:9E:CC:FF:40:FB:18:64:6D:BC:D8:CE:31:61:0C:69
X509v3 Authority Key Identifier:
keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:50:0c:b9:f9:f1:b8:2d:ad:2d:da:0b:ea:87:9c:51:3c:69:
38:64:f1:db:0f:e6:26:92:3a:5b:af:5f:98:40:62:f7:01:0a:
27:57:5d:c1:2d:46:43:0d:93:0f:da:b9:17:f9:76:d2:5f:d7:
6b:78:c4:59:10:13:9b:07:69:f7:a4:0a:e1:8a:fd:f7:04:a9:
22:d5:47:a1:88:f9:fb:be:6f:47:b0:9e:13:45:64:69:fc:31:
d8:d2:da:2f:ef:66:7a:a2:1d:3b:79:b0:6e:5f:08:03:79:3b:
8d:16:87:a7:ff:cf:07:f7:6c:d5:bf:87:b3:37:82:95:dc:9d:
a4:41:80:d5:a6:d4:83:0b:7a:cd:b4:e9:74:a0:35:1f:cb:f6:
40:82:80:6c:3d:ea:ab:3f:b0:72:88:44:11:5e:ba:1b:9d:22:
a4:42:47:dc:a8:61:5d:74:0e:97:93:39:e6:57:6c:f8:19:2b:
76:de:54:d7:c8:65:61:4b:e4:6d:af:56:9f:d9:1b:a5:25:57:
12:28:c6:98:26:d8:39:a6:25:aa:e0:97:05:cc:f5:0d:47:ee:
47:18:54:81:1b:d2:6f:4e:dc:7f:b3:5b:21:b7:1a:09:9f:52:
27:bd:d8:9c:65:11:89:5f:b0:c2:5c:68:c4:1b:32:13:5c:af:
ab:dc:87:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:23 2026 by rpki-client