Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
File: M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json)
Hash identifier: sy5gxVzJPmHTfZqpsDbs5I37+Nb7aOtpsjoPLKd6aKI=
Subject key identifier: 73:62:92:E6:31:B9:72:9F:36:A7:1C:5E:C5:4C:B9:D4:87:B5:B4:41
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial: 019CAF478F478BF4E35B2AB8E2987D665C52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
Manifest number: 10E6
Signing time: Mon 02 Mar 2026 16:00:28 +0000
Manifest this update: Mon 02 Mar 2026 16:00:28 +0000
Manifest next update: Tue 03 Mar 2026 16:00:28 +0000
Files and hashes: 1: 7syofHXFJmPSL6BJ-29lF-gFfeM.roa (hash: NO9XiETKh7e/kgh6aR14rNQhQwpTu97o6Yw7GN8zhwk=)
2: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: snQw8+5CtwD6CE+yP8huM81uJRapl+2AoPEah2XyFsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:47:8f:47:8b:f4:e3:5b:2a:b8:e2:98:7d:66:5c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Validity
Not Before: Mar 2 16:00:28 2026 GMT
Not After : Mar 3 16:00:28 2026 GMT
Subject: CN=736292e631b9729f36a71c5ec54cb9d487b5b441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:43:92:d9:a6:12:8c:83:7c:a3:58:bb:62:
82:43:e7:9d:80:3e:f4:51:14:58:0d:11:a9:09:36:
35:cb:eb:8a:43:d1:de:0d:08:25:46:82:6d:61:81:
19:f3:e1:f8:04:4d:69:13:01:ab:86:6b:be:b2:77:
fe:ea:5c:cc:71:ba:01:d4:38:c1:5a:83:26:69:98:
db:39:df:3a:06:93:23:d9:32:56:e4:ba:2e:6b:7d:
ee:da:4f:8f:a7:80:30:70:ec:b0:7d:22:5e:d8:33:
7c:2b:31:e1:ce:53:95:db:07:51:08:d9:d0:75:5c:
e2:61:f2:e9:14:e2:99:40:19:51:59:7e:71:dd:0d:
ce:b0:73:4e:5c:ff:dc:88:c8:1e:6f:b0:67:92:c5:
d9:a0:ae:79:8c:8e:fa:bd:7b:12:97:c6:31:dd:8c:
14:3c:fe:f3:b4:a0:90:52:72:8b:75:8d:09:d1:56:
d5:67:4c:a9:dc:de:1f:45:44:07:a9:1a:36:e3:c7:
69:bb:24:a9:03:28:86:b3:86:e1:f7:09:f1:7c:8a:
cd:02:de:ab:1b:37:3e:53:46:78:69:30:35:f5:90:
f0:39:dd:9f:f4:d0:e3:7b:50:12:f3:d0:23:30:8d:
3b:a2:18:e2:42:66:b1:28:4d:18:1e:7a:eb:9f:e2:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:62:92:E6:31:B9:72:9F:36:A7:1C:5E:C5:4C:B9:D4:87:B5:B4:41
X509v3 Authority Key Identifier:
keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:21:e0:ec:6d:e3:7e:b5:ba:5c:41:fb:8e:b4:11:60:4e:95:
cb:ac:dc:b0:30:f4:5e:b0:93:0e:cf:3f:71:f0:07:ad:91:e9:
d7:65:b9:a1:42:8a:57:1e:8d:31:a2:15:86:1b:f8:bb:aa:f4:
2e:d0:fd:9a:f4:b1:26:47:fc:1f:54:95:cc:33:99:52:ac:02:
20:46:24:4f:51:27:f6:0f:ac:c9:d1:8b:9d:5a:b6:f6:0d:2a:
b4:e9:89:89:c8:05:cd:85:95:05:6f:9f:67:c5:a3:73:f7:85:
b6:22:37:86:07:f9:7f:04:d1:2e:b5:c9:39:36:34:9c:58:76:
19:37:6a:28:c7:39:7c:5d:43:6e:75:06:36:88:fa:77:cd:24:
6f:85:75:7e:58:85:99:04:9a:e9:04:21:4e:14:82:d5:16:9c:
b6:44:c0:2b:3e:97:51:ea:f1:bc:6c:47:cf:76:8f:c1:a1:a6:
b6:eb:04:51:7c:fd:f6:9e:74:db:d6:17:65:65:f6:cf:3b:56:
16:f2:61:c0:32:96:f6:1f:a1:0f:53:68:86:12:3d:27:8d:41:
99:4f:f8:4d:d2:38:06:72:9b:35:d7:fa:93:ed:e4:0f:83:03:
91:12:1a:0a:52:45:2c:60:68:2b:4c:fe:3d:96:86:63:8b:7c:
f7:a4:d8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:08:34 2026 by rpki-client