Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: WWTtGEjTh3XqIcAQ+GLhGKaTz1p80ulprcdCeX09B3I=
Subject key identifier: 0B:11:18:24:4F:90:5B:8E:2C:D3:51:8C:65:96:64:CE:F8:B5:B1:42
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 019FAB637A5CBEF8E92992BB48175F300AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 1224
Signing time: Wed 29 Jul 2026 01:00:51 +0000
Manifest this update: Wed 29 Jul 2026 01:00:51 +0000
Manifest next update: Thu 30 Jul 2026 01:00:51 +0000
Files and hashes: 1: kJ6-t_FAgoe7HphTqXyXgseS7_A.roa (hash: nmaaXT8wxyUyQofH+9fMDVryZ1mgAUYzWspK2/2I9As=)
2: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: QhmD/ecezo2/5eHJsemxms9K2dbo01Li94EqMW61JOE=)
3: uBycyFV3HFO3Kaf85-1Yby5F7cI.roa (hash: UjOmW8dergl068O1JptPgYMNCbZKAckDjyhoBH2ZRDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:7a:5c:be:f8:e9:29:92:bb:48:17:5f:30:0a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Jul 29 01:00:51 2026 GMT
Not After : Jul 30 01:00:51 2026 GMT
Subject: CN=0b1118244f905b8e2cd3518c659664cef8b5b142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:23:a1:81:d0:44:01:ca:a7:92:ba:ea:19:
33:ad:55:f4:7d:dc:36:69:ec:25:b7:be:4a:5b:bf:
85:70:10:c7:48:29:08:8c:55:e9:c3:c2:9e:20:0d:
e3:fd:47:7d:d2:5a:64:15:26:13:c6:e9:a5:c0:83:
e7:9c:5f:bb:b6:53:74:c3:e7:2d:94:ea:1d:37:64:
6b:b4:05:92:80:5f:f2:b5:7b:fd:52:05:8f:7f:fb:
bd:75:22:1f:6c:42:44:3f:79:56:89:ec:16:ed:b2:
3b:ab:bd:8b:a0:2a:55:e6:e7:29:07:ca:cb:aa:07:
c1:75:41:2d:f3:65:d4:0f:14:98:d2:1a:40:18:dc:
b9:1c:24:d0:98:b8:e2:ee:12:69:fd:3a:e3:36:95:
bb:22:1f:ef:32:e9:01:be:1d:53:3b:0a:38:44:55:
4d:d1:6a:3b:39:31:f0:a3:59:0c:6e:e9:dc:4b:f1:
5f:f5:6c:8d:92:72:f6:8f:28:d3:d6:42:7e:00:d5:
ec:36:a3:71:74:6f:09:07:97:11:ae:81:00:ea:e2:
85:29:21:ca:c3:1d:9f:d8:62:c2:d2:b2:87:4f:76:
90:5b:ea:0b:f3:ee:67:bf:48:27:f4:1d:46:02:0c:
db:91:bc:83:46:34:c4:b1:0a:e3:97:ca:f4:5c:66:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:11:18:24:4F:90:5B:8E:2C:D3:51:8C:65:96:64:CE:F8:B5:B1:42
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e8:ca:66:dd:f0:b3:1f:2f:11:1f:b1:ac:66:44:c1:ca:70:
47:21:b8:a5:1f:b4:c0:3e:c1:75:ce:36:e8:4c:f5:5d:75:3f:
39:5c:7e:f8:53:64:0b:b9:2a:e5:83:f4:83:89:6a:94:57:a2:
82:49:d2:e3:36:5e:6d:6b:b6:72:f5:ec:ed:32:e6:02:b5:28:
f0:72:90:90:af:c3:1c:24:7d:da:9c:4a:e2:50:f9:ad:1d:8b:
9c:8f:8a:8d:04:f4:06:14:6c:f7:b8:91:57:35:35:67:0b:76:
fd:f4:a9:cc:be:6e:70:fb:5a:6d:ac:77:08:83:93:52:62:27:
8f:5b:81:52:76:be:21:69:5f:5d:7d:cd:06:b1:0d:8b:59:bd:
6e:b8:d0:2d:9a:52:5d:4e:98:90:1a:31:60:45:41:ff:87:2d:
70:69:67:8a:08:90:10:44:fa:b9:97:38:51:f9:6b:8b:32:7b:
e3:a6:f4:05:f2:e4:d4:09:8e:13:dc:2a:e4:db:60:06:c5:e8:
d6:b9:d2:40:98:70:2a:fb:1e:13:da:e4:62:16:0e:56:19:b7:
c2:11:1f:dd:b7:99:ff:8b:c9:71:45:41:c0:c5:9e:d2:b4:2d:
67:b2:b2:f2:25:ea:6b:70:ae:db:23:f7:89:c0:9f:b3:11:58:
54:c9:74:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY3pcvvjpKZK7SBdfMArEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYmM0MjM5YzljYjk4MWYxOWE0OTVlNjMzZDNiZWM4ODlm
Y2JlODkwHhcNMjYwNzI5MDEwMDUxWhcNMjYwNzMwMDEwMDUxWjAzMTEwLwYDVQQD
EygwYjExMTgyNDRmOTA1YjhlMmNkMzUxOGM2NTk2NjRjZWY4YjViMTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXAjoYHQRAHKp5K66hkzrVX0fdw2
aewlt75KW7+FcBDHSCkIjFXpw8KeIA3j/Ud90lpkFSYTxumlwIPnnF+7tlN0w+ct
lOodN2RrtAWSgF/ytXv9UgWPf/u9dSIfbEJEP3lWiewW7bI7q72LoCpV5ucpB8rL
qgfBdUEt82XUDxSY0hpAGNy5HCTQmLji7hJp/TrjNpW7Ih/vMukBvh1TOwo4RFVN
0Wo7OTHwo1kMbuncS/Ff9WyNknL2jyjT1kJ+ANXsNqNxdG8JB5cRroEA6uKFKSHK
wx2f2GLC0rKHT3aQW+oL8+5nv0gn9B1GAgzbkbyDRjTEsQrjl8r0XGZIjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsRGCRPkFuOLNNRjGWWZM74tbFCMB8GA1UdIwQY
MBaAFJu8QjnJy5gfGaSV5jPTvsiJ/L6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmIt
MDFhYTA1NmIxZjZmLzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmItMDFhYTA1NmIxZjZm
LzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXejKZt3w
sx8vER+xrGZEwcpwRyG4pR+0wD7Bdc426Ez1XXU/OVx++FNkC7kq5YP0g4lqlFei
gknS4zZebWu2cvXs7TLmArUo8HKQkK/DHCR92pxK4lD5rR2LnI+KjQT0BhRs97iR
VzU1Zwt2/fSpzL5ucPtabax3CIOTUmInj1uBUna+IWlfXX3NBrENi1m9brjQLZpS
XU6YkBoxYEVB/4ctcGlnigiQEET6uZc4UflrizJ746b0BfLk1AmOE9wq5NtgBsXo
1rnSQJhwKvseE9rkYhYOVhm3whEf3beZ/4vJcUVBwMWe0rQtZ7Ky8iXqa3Cu2yP3
icCfsxFYVMl0WQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:34:00 2026 by rpki-client