Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: 5fGkde9jW1JYQb+mWObAnlm+4WLYNmp5SmKQeqhR03M=
Subject key identifier: 47:C2:CF:6A:B6:56:FE:88:A9:68:07:F4:F2:79:34:C4:14:5A:D5:55
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 01A0D8A7DEB2C24CD61867796AA7BC752007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 12C0
Signing time: Fri 25 Sep 2026 13:01:15 +0000
Manifest this update: Fri 25 Sep 2026 13:01:15 +0000
Manifest next update: Sat 26 Sep 2026 13:01:15 +0000
Files and hashes: 1: kJ6-t_FAgoe7HphTqXyXgseS7_A.roa (hash: nmaaXT8wxyUyQofH+9fMDVryZ1mgAUYzWspK2/2I9As=)
2: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: xY3WlQbFMC6gzHomS8+2KNiesXoEbtZ0tigS8CJcVmY=)
3: uBycyFV3HFO3Kaf85-1Yby5F7cI.roa (hash: UjOmW8dergl068O1JptPgYMNCbZKAckDjyhoBH2ZRDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a7:de:b2:c2:4c:d6:18:67:79:6a:a7:bc:75:20:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Sep 25 13:01:15 2026 GMT
Not After : Sep 26 13:01:15 2026 GMT
Subject: CN=47c2cf6ab656fe88a96807f4f27934c4145ad555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:0c:00:39:97:81:24:06:60:3e:c2:c0:b8:
c5:1e:5a:c0:8e:f6:1e:80:72:5f:1c:1e:f8:8a:b4:
cd:b9:5b:b7:37:db:fd:de:23:55:54:bd:76:66:ed:
d8:ca:ca:14:79:c6:5a:19:f2:34:d3:2e:5d:3a:db:
89:b4:99:5c:a6:9f:97:81:26:8d:64:64:fa:a2:96:
bd:93:e2:14:68:bd:e9:39:cc:26:2d:7b:76:ec:12:
27:38:ba:a5:e0:2f:6b:3d:43:b7:e6:43:7a:cd:b2:
99:af:c6:0b:27:c6:e7:27:d9:46:01:8e:47:3b:27:
ae:58:7b:bc:9f:f1:74:d0:0a:89:25:7d:52:fb:d9:
a8:5a:6b:60:78:54:ef:8f:cd:8d:ad:19:96:5d:b1:
ee:61:ab:73:5c:1c:f0:f9:27:3c:2c:58:54:63:aa:
6f:b7:27:8d:67:dc:40:68:ba:bd:81:35:5f:c1:28:
0d:c1:32:6a:46:9a:65:49:5c:d3:e4:f0:54:64:85:
86:4b:53:c4:42:03:1e:af:dc:09:b7:15:99:5b:d5:
1e:72:77:26:4b:79:59:4e:c8:38:f9:02:f6:57:2f:
9a:98:f5:19:46:91:b1:76:64:7a:bc:68:3f:e6:cb:
2f:81:c9:35:49:25:6b:5c:7d:35:eb:ff:8c:ef:50:
5f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C2:CF:6A:B6:56:FE:88:A9:68:07:F4:F2:79:34:C4:14:5A:D5:55
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d3:b0:a9:f8:ea:db:38:4c:28:8c:6a:3f:31:54:5b:26:6b:
89:d1:ee:20:c4:97:b7:5b:25:8d:b5:d7:9a:69:7d:e0:85:cf:
7d:47:94:ff:68:a5:f7:2c:56:e3:14:1d:6b:f5:a6:b5:2f:be:
e5:79:1d:a2:6d:95:44:45:61:a6:f6:53:ca:55:c5:c0:23:de:
d6:6b:63:23:11:45:b0:a3:1c:f3:59:79:3f:39:16:56:6b:f4:
6e:41:bd:21:16:26:cf:9f:3f:a2:e0:d5:ad:ab:1c:39:dd:21:
52:7e:a9:ee:3e:15:79:3a:b3:59:99:c9:4c:48:18:f7:9f:83:
c9:24:2d:cb:93:0a:d2:93:01:ce:29:95:25:9b:c4:e6:c7:64:
2e:7f:62:14:27:27:4b:aa:68:35:a1:68:16:9c:45:d3:e3:ba:
a1:c9:df:6a:c6:87:53:a1:94:14:d9:0d:08:54:a9:02:78:6d:
87:d5:a8:e6:03:a5:51:11:ac:43:d2:f4:8b:36:2d:97:a3:e2:
51:30:9e:e2:ae:26:ad:4f:ab:b1:26:3c:86:20:0c:17:70:f1:
61:0e:6d:7c:23:f5:81:93:33:2b:2f:92:c6:43:1f:fa:54:40:
4e:2a:09:38:60:96:64:95:22:15:67:af:81:f6:95:da:55:94:
7d:45:64:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:04:31 2026 by rpki-client