Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File: M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier: fla367YEXEFNSqazIRDcOgSs6sKG2dcnWMium3ADdeY=
Subject key identifier: 51:1C:C0:5F:59:71:C1:9C:FD:90:58:EB:50:6C:C8:E4:82:D5:AF:8F
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer: /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial: 019FABD1002FCD40F3F43145A138ED171BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 03:00:28 +0000
Manifest this update: Wed 29 Jul 2026 03:00:28 +0000
Manifest next update: Thu 30 Jul 2026 03:00:28 +0000
Files and hashes: 1: 7MkQZGhOVtHQk5MQ7ZY9WW07D8Q.roa (hash: Cn+90mJi74+2BcOC5W598tXat8oZgbiFe0T88t32ER0=)
2: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: 2kfKfikh5o+gXhcf0LZMGgewnmJ0L58C7/GyGhI3QJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:00:2f:cd:40:f3:f4:31:45:a1:38:ed:17:1b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Validity
Not Before: Jul 29 03:00:28 2026 GMT
Not After : Jul 30 03:00:28 2026 GMT
Subject: CN=511cc05f5971c19cfd9058eb506cc8e482d5af8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8d:9c:69:b3:58:b5:bb:5e:1f:d0:ef:cc:0c:
3f:d7:b2:4a:62:0b:ca:c3:07:ca:f1:00:45:5c:1c:
c0:22:e1:1f:7c:0c:03:3a:7a:b3:47:fc:be:27:0c:
b8:4b:0b:00:29:5f:d7:38:2e:5a:13:0e:57:4f:41:
d5:b0:0f:c2:e5:4c:4f:39:db:8e:00:db:5f:54:5b:
3e:82:44:fd:87:d3:ef:77:62:6c:8e:6e:80:27:94:
a1:c7:06:a5:b8:3e:b3:eb:d9:1b:05:71:69:fb:24:
4c:aa:7d:21:ce:dd:82:61:65:57:0a:13:3e:5d:23:
04:18:ff:68:16:1a:82:b3:38:bb:8a:22:4f:fd:3e:
7d:6a:0f:dd:f5:63:d7:17:a3:be:f0:ea:17:6e:dc:
81:33:02:7c:0c:83:3c:b4:db:0d:88:01:38:df:43:
88:1a:1c:d6:e0:6a:55:a3:5f:dd:16:d8:a0:ed:e0:
a6:73:5e:40:21:24:04:dc:e0:5e:65:fb:36:67:85:
df:0c:22:42:ea:af:8b:ac:3b:08:d1:e0:57:41:5b:
e5:a1:24:e7:59:7e:a0:a8:a4:bc:fa:ef:e4:6e:21:
c7:38:81:03:4d:c0:63:39:b4:b2:1c:a7:11:b1:a6:
d8:78:51:86:cb:e9:94:05:d9:c7:1b:99:ee:fb:53:
6f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1C:C0:5F:59:71:C1:9C:FD:90:58:EB:50:6C:C8:E4:82:D5:AF:8F
X509v3 Authority Key Identifier:
keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:da:ac:3e:e9:6c:57:07:46:c4:6d:77:1b:82:b7:59:8c:a7:
81:d7:c1:9c:c4:b9:89:96:20:29:36:d4:55:32:34:69:e6:19:
1c:75:7a:7d:2f:c3:6b:d3:26:52:f2:2b:35:bf:14:db:b3:b2:
26:10:89:30:9d:df:de:47:7b:00:8d:3c:a9:55:c4:99:25:4d:
a0:f8:49:ed:1d:48:32:3f:53:cb:b3:e1:22:9c:fe:33:3f:ca:
df:55:eb:07:81:e1:3d:14:cb:b3:af:f4:6b:e6:e3:64:43:16:
3a:d3:d8:07:c4:09:72:5d:d0:ce:cb:71:f8:bc:39:22:79:5f:
4f:c8:71:55:34:03:12:3c:9b:03:c0:f6:c3:cb:d5:2a:02:5a:
78:ad:50:59:54:d7:ff:b8:8d:7d:14:36:8c:40:d0:05:82:57:
49:27:70:7e:93:d9:44:19:7b:9f:6a:86:30:90:dd:ca:09:87:
4c:bd:a2:69:f7:7b:6c:c0:90:fd:78:de:07:2e:7e:66:19:7d:
63:fd:58:a9:02:b4:3a:46:bb:15:f3:6d:1a:bb:4d:a8:1b:37:
de:3a:ee:e9:69:64:4d:b6:65:de:03:58:61:df:ee:e2:29:87:
59:66:d7:31:40:7b:c4:13:38:7c:dd:34:af:aa:ff:31:93:0c:
61:49:4a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:04:42 2026 by rpki-client