Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
File: McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json)
Hash identifier: xbLIzT3akyM3EZv4nKfcSkPUx05t7awU4Fks68f+GOA=
Subject key identifier: CA:5D:66:B1:47:C6:9D:8C:4A:70:57:6A:B7:DF:25:10:46:B3:87:B3
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Certificate issuer: /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial: 019D9A74B36178CC6AF83426BDEEBDABFBD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
Manifest number: 0848
Signing time: Fri 17 Apr 2026 08:00:32 +0000
Manifest this update: Fri 17 Apr 2026 08:00:32 +0000
Manifest next update: Sat 18 Apr 2026 08:00:32 +0000
Files and hashes: 1: 1-p3HaYx4IqX4cWvi0vNEwtBCaHk.roa (hash: i3bN04ehC6KNjZ/mU1aU2Jp/6ScotgzMImvrL9el+ok=)
2: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: G7Bz1qzN2/X6JCfBHc6R4py8mB93Kz6K1iJ00vh95Lk=)
3: YHYbmuz_pM9wn1qc-egcCE-kAEA.roa (hash: 6Tz9Tz8OM7622P+63dPrrdM/er/OUWTKt1lvg0lixIg=)
4: pIxw3KC603JdsybhpGY7_5Fn_9o.roa (hash: Ci8maKrft1TBBCcPJqKFYTduIXPenh2T5qk94PPEQ08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b3:61:78:cc:6a:f8:34:26:bd:ee:bd:ab:fb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Validity
Not Before: Apr 17 08:00:32 2026 GMT
Not After : Apr 18 08:00:32 2026 GMT
Subject: CN=ca5d66b147c69d8c4a70576ab7df251046b387b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:2d:fb:42:3d:e9:c0:79:5e:20:02:53:5b:
3a:f4:35:04:f7:bb:bc:ab:4f:39:a2:8b:74:ea:5b:
43:25:95:d4:48:1c:ac:fc:b2:32:95:ff:ea:f1:4a:
10:32:c7:3d:57:dd:75:19:c8:98:bc:db:e0:51:93:
c4:fa:0e:1c:e3:33:54:09:b0:7d:8b:87:e9:85:88:
b6:57:8f:f8:96:29:bb:58:49:87:a4:ca:cd:7f:fc:
e4:07:53:b2:7f:5f:c4:b0:95:8f:3e:a8:ba:95:b2:
3b:2a:b8:25:44:93:44:ee:82:cf:e4:ea:a0:40:17:
4f:e7:f5:28:2c:71:c4:35:f8:da:3c:32:20:a3:ef:
46:5f:ca:6f:01:df:41:b4:cc:f3:7f:70:6d:dd:34:
cb:d2:78:e7:06:00:49:cf:f0:df:ce:9f:a5:22:ac:
e3:69:6d:de:35:97:ae:94:31:56:49:e6:e7:9f:f2:
d6:8b:ad:87:e7:2d:ce:82:f6:d3:4f:41:f9:f7:bf:
7c:3e:63:f6:f7:99:66:94:84:76:44:61:10:9d:72:
34:90:b3:c4:93:d3:96:10:71:bb:09:5b:2c:4d:53:
7b:fb:04:63:47:60:b1:e1:21:14:15:ef:ed:05:5f:
78:6d:67:6f:da:f4:56:02:f2:10:98:77:7b:46:ba:
89:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5D:66:B1:47:C6:9D:8C:4A:70:57:6A:B7:DF:25:10:46:B3:87:B3
X509v3 Authority Key Identifier:
keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3e:9c:03:91:69:dc:7f:2b:99:0c:47:d9:ab:af:e4:2a:01:
ee:49:11:c3:b8:f9:5a:c0:39:15:6a:0f:e4:e9:77:3f:b0:4c:
4d:31:4e:4f:78:65:9f:08:12:72:cd:02:c4:b1:ed:99:88:f1:
a3:43:36:24:01:20:e2:2a:37:3d:32:89:db:b4:e7:42:45:63:
80:e8:f6:a5:2f:34:26:34:5f:e9:f2:77:1d:c1:7d:fc:57:16:
09:29:1d:34:1f:90:5e:1c:d0:00:fd:ef:c5:8d:75:ae:b7:44:
3f:d5:38:18:4d:27:38:5c:04:19:d2:01:b6:5c:3d:61:b0:70:
f7:db:74:83:35:d9:4f:0e:58:e7:0e:7a:fe:b5:27:f8:a0:92:
59:00:91:7f:da:e6:17:72:39:ca:00:f8:bc:ec:8f:a8:93:d4:
42:5b:3d:cb:02:a1:4d:d3:58:fe:95:01:d4:38:b7:2e:45:f0:
a7:f1:99:1d:90:db:3b:91:9e:cb:13:e8:a2:a3:5e:7f:43:25:
12:25:1f:98:8b:b3:8a:ec:82:0b:cf:cd:a7:8f:4c:39:3b:5d:
bc:d8:cf:55:8b:32:b7:af:aa:15:7c:2e:42:20:0e:bd:24:5f:
91:a0:3d:c0:e4:c2:fa:71:f8:58:9a:d4:ba:ca:62:a0:2f:92:
c8:3a:74:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:37:09 2026 by rpki-client