Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: dXpObihZsSqeqedO9w+sRR4YAY3Zvq3mlq2t5s4AsDc=
Subject key identifier: 0C:C4:46:4C:3D:76:03:E2:DA:67:A9:D9:59:4E:8C:2A:E3:C9:22:01
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 019EBFC8715CC1E599FBA7C4891D079A6BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 11AA
Signing time: Sat 13 Jun 2026 07:00:44 +0000
Manifest this update: Sat 13 Jun 2026 07:00:44 +0000
Manifest next update: Sun 14 Jun 2026 07:00:44 +0000
Files and hashes: 1: kJ6-t_FAgoe7HphTqXyXgseS7_A.roa (hash: nmaaXT8wxyUyQofH+9fMDVryZ1mgAUYzWspK2/2I9As=)
2: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: sUfWsYr8LujAefDmgeX2mPkVgDLktUFJhx/aPwrvzSs=)
3: uBycyFV3HFO3Kaf85-1Yby5F7cI.roa (hash: UjOmW8dergl068O1JptPgYMNCbZKAckDjyhoBH2ZRDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:71:5c:c1:e5:99:fb:a7:c4:89:1d:07:9a:6b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Jun 13 07:00:44 2026 GMT
Not After : Jun 14 07:00:44 2026 GMT
Subject: CN=0cc4464c3d7603e2da67a9d9594e8c2ae3c92201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:83:e8:95:98:c7:75:1f:c2:0e:58:ce:8f:
99:13:f8:3d:55:76:72:81:a2:cf:78:a7:89:36:35:
5c:6d:81:e3:a4:9f:3c:f1:e1:bc:1a:72:cf:05:9a:
60:a9:f5:15:9c:5a:a8:27:e6:bf:7e:e8:6b:4b:61:
c2:c7:d0:46:8e:f1:a0:31:c3:a1:a4:09:83:dd:a6:
07:43:51:e8:6f:d3:c0:a3:d1:c6:13:f2:57:7e:c4:
91:54:28:4b:d3:d2:82:1d:0c:17:94:60:5b:95:6c:
c8:c4:87:5f:7e:e6:16:60:f5:78:54:c7:69:90:9e:
1f:1d:2c:5c:c1:50:47:22:27:9a:24:ba:75:b1:7b:
17:27:c4:96:ef:53:5b:7c:4c:a3:d5:2b:9f:9f:e7:
f4:8f:48:de:76:7b:6d:e4:d9:60:58:08:e8:5f:fc:
2b:88:94:7b:99:a7:fd:95:bf:ad:48:a9:27:ac:8e:
13:7e:30:eb:e1:59:28:d7:17:1a:60:36:f5:d4:e3:
b0:fe:23:de:99:0c:5b:78:fd:0c:e1:7a:03:57:f5:
84:23:55:b3:c4:bd:44:31:2f:4e:dc:e1:15:af:5f:
c7:0c:5a:b0:ae:7b:14:15:19:66:aa:77:4f:dd:5c:
f8:1d:8a:c6:9f:d8:db:2c:0e:ab:ae:15:10:03:92:
8c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C4:46:4C:3D:76:03:E2:DA:67:A9:D9:59:4E:8C:2A:E3:C9:22:01
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:71:47:01:f9:a0:e5:c6:d1:7f:b0:c6:d0:3a:fb:e3:2f:6b:
58:80:29:72:4f:48:61:20:ba:c8:f4:55:16:57:a3:94:af:9d:
4f:e0:99:7d:93:46:57:fd:21:6a:b0:fb:d2:d0:41:76:8b:76:
c8:14:a7:5e:cc:63:3c:64:61:d1:bd:8b:e8:70:5c:8a:10:a2:
96:10:a1:86:85:7c:c7:3f:53:41:de:36:4a:d0:45:97:0b:87:
48:d2:3c:b7:d5:f5:7a:85:eb:d0:f5:17:31:c6:1a:af:28:27:
94:10:d1:d7:89:94:ca:1a:2e:a9:6b:e2:e3:63:7f:ea:2e:cf:
78:1a:c6:a2:90:b4:63:40:47:7b:c2:3d:e7:68:ec:82:08:2b:
55:bc:08:b8:60:ec:3a:be:8e:21:66:9b:12:56:b3:90:1b:a3:
6a:9b:d1:79:62:0e:eb:ba:85:8d:df:85:83:3c:f4:f9:00:30:
69:3a:25:fb:83:88:68:40:32:46:3f:e8:9c:a0:4a:4a:00:5c:
99:40:44:ee:89:85:ec:6a:17:ef:11:45:86:99:40:5e:60:74:
a3:53:0f:78:05:3e:f0:17:52:e9:21:d0:0d:86:20:ac:eb:76:
93:c8:20:c5:b2:8f:91:49:77:3f:cf:0c:86:0d:32:2e:b0:1a:
38:c2:bf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:17:47 2026 by rpki-client