Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
File: M1etQG35k0tQSLX6Id4xRQuTb6k.mft (raw, json)
Hash identifier: z/PV95LGzTIXLLQytRGSH1Yf1vSjT/a0NTtO+4NE6d0=
Subject key identifier: 4E:60:02:A9:F0:D4:88:D4:18:03:FF:69:F4:C9:EE:2D:A5:BE:C5:26
Authority key identifier: 33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
Certificate issuer: /CN=3357ad406df9934b5048b5fa21de31450b936fa9
Certificate serial: 019CAAFD146FAA15BF9BF26CE8FC4E423E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:00:38 +0000
Manifest this update: Sun 01 Mar 2026 20:00:38 +0000
Manifest next update: Mon 02 Mar 2026 20:00:38 +0000
Files and hashes: 1: 8NSywpR9nT-r8M6sQZn_Vy_1zuI.roa (hash: KK6AcEIe4doXNcpLx1+rexzaHvDjwQb/+2RxEu+/uhY=)
2: M1etQG35k0tQSLX6Id4xRQuTb6k.crl (hash: UoftnCvYwMpiHvw4yxLLskaxa3Zg6yyis3ygEORKSwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:14:6f:aa:15:bf:9b:f2:6c:e8:fc:4e:42:3e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3357ad406df9934b5048b5fa21de31450b936fa9
Validity
Not Before: Mar 1 20:00:38 2026 GMT
Not After : Mar 2 20:00:38 2026 GMT
Subject: CN=4e6002a9f0d488d41803ff69f4c9ee2da5bec526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:dd:fc:7c:b6:b0:e1:91:42:2a:56:18:e4:
b0:d0:74:7e:a2:69:55:c5:3c:2a:ee:c2:e4:2a:e2:
92:bd:0e:1a:32:96:f8:9f:d5:32:c0:5b:5e:10:29:
63:75:40:b2:25:8c:7d:06:93:cd:13:4c:07:70:0a:
be:e5:7c:93:95:4d:10:c0:e5:20:32:59:95:21:51:
aa:f6:cd:b4:fd:17:4e:09:be:5c:45:e4:40:0a:04:
92:02:12:b4:ee:52:b5:98:3f:1f:35:97:7b:ac:da:
f3:02:a8:a3:a5:cd:86:96:43:ee:4e:d8:44:44:63:
74:b5:00:be:4b:eb:05:ef:c4:26:71:61:fc:26:f3:
0b:6e:d1:f7:4a:2c:f5:e2:a5:a0:88:ac:0f:df:ca:
b5:46:7f:85:04:50:b9:84:0d:58:24:85:91:30:78:
b1:06:15:01:9b:f0:94:e8:2c:f1:95:e6:a3:32:26:
b2:75:af:25:6d:38:d0:4a:8a:5c:54:5c:8c:40:52:
84:2b:24:20:90:fd:ec:60:8d:68:84:d1:bd:44:c4:
a6:0f:e0:44:ab:ff:24:de:e3:45:dc:a0:72:9d:f5:
f8:c7:56:13:a1:f3:59:ec:30:11:87:d4:c4:e7:cf:
3d:8c:73:12:06:bd:9a:52:c8:a7:66:45:45:d6:4b:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:60:02:A9:F0:D4:88:D4:18:03:FF:69:F4:C9:EE:2D:A5:BE:C5:26
X509v3 Authority Key Identifier:
keyid:33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:19:13:ee:19:07:f7:9c:51:8b:55:ab:cf:9d:be:62:90:8e:
db:dc:ff:6c:03:e8:3c:98:0e:99:29:e2:8e:44:9d:34:4c:8d:
12:b2:65:80:5b:1c:1d:88:48:62:69:72:30:78:01:03:f2:39:
78:4f:99:3d:67:53:b9:91:54:a6:ce:1d:fe:c6:63:86:04:b4:
67:a6:fb:92:02:aa:1a:3e:c2:69:fe:ce:5a:04:d9:20:42:03:
b2:dd:a2:1c:fd:5b:5c:14:30:a8:9b:fd:d7:22:ae:bb:c9:95:
b7:81:aa:38:d5:73:9b:1d:6e:03:1e:e6:04:0f:46:dd:57:58:
6f:7c:e3:c6:e0:44:37:65:48:d8:cf:18:3a:f1:34:ed:fd:57:
3e:e6:cf:58:5d:a9:09:2d:79:ff:d6:0a:5d:dc:a0:99:19:ea:
bd:fa:2a:d8:97:3d:ca:40:e3:90:b8:e2:0f:14:a9:59:95:94:
9a:50:44:1b:2e:89:01:38:6c:d2:84:40:26:4d:1e:da:d1:77:
bf:99:e7:31:5c:28:b9:8b:65:5b:17:0f:0a:95:2b:a9:ee:a4:
30:7e:7f:48:02:86:33:08:81:00:c2:bd:5c:5d:28:53:7a:7c:
64:e3:b9:98:81:4a:2d:b5:59:b9:c3:eb:5c:34:fc:33:15:f0:
3f:31:2b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:37 2026 by rpki-client