Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: HmkiHaDn845UhZn31iQkwQUjm/v2u+vREkzl7M/rvzA=
Subject key identifier: 90:C1:8E:F5:2B:00:A8:85:2F:CC:8D:AC:D5:B9:EA:59:22:66:DB:C6
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 019CAAC690EBC02738977CE3E1B46077E216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 1096
Signing time: Sun 01 Mar 2026 19:01:05 +0000
Manifest this update: Sun 01 Mar 2026 19:01:05 +0000
Manifest next update: Mon 02 Mar 2026 19:01:05 +0000
Files and hashes: 1: kJ6-t_FAgoe7HphTqXyXgseS7_A.roa (hash: nmaaXT8wxyUyQofH+9fMDVryZ1mgAUYzWspK2/2I9As=)
2: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: SwIRVWGAvGSepQKbVH4fEwyIn+nFRSjgYcVeaJFq/hQ=)
3: uBycyFV3HFO3Kaf85-1Yby5F7cI.roa (hash: UjOmW8dergl068O1JptPgYMNCbZKAckDjyhoBH2ZRDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:90:eb:c0:27:38:97:7c:e3:e1:b4:60:77:e2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Mar 1 19:01:05 2026 GMT
Not After : Mar 2 19:01:05 2026 GMT
Subject: CN=90c18ef52b00a8852fcc8dacd5b9ea592266dbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:c6:cf:ab:b8:5d:3d:3f:a3:01:fc:85:4f:
0b:6a:97:9d:76:c8:f2:db:3a:28:ce:34:e0:85:21:
ff:2e:a5:cb:fd:70:97:e1:9a:cc:fd:72:ca:a3:6b:
1c:6e:3c:0b:74:b6:8b:ba:b3:2c:3c:44:31:a5:0c:
de:32:ad:a2:ca:1f:6c:f9:99:ef:7a:e2:a7:68:7a:
fb:35:1a:ae:dd:00:f7:8e:58:77:05:3a:cd:c9:96:
cd:ae:eb:4a:74:c6:fc:a5:38:e9:d1:d6:41:9d:05:
7b:67:93:91:11:ef:1a:45:c5:71:9b:ee:e4:98:5f:
d5:49:15:8d:09:19:16:3d:12:24:62:d9:2e:85:8f:
a4:f4:a4:4c:98:5c:02:6d:29:2e:ac:3f:c3:56:a5:
ca:ae:ac:2b:22:f1:05:f2:cb:d8:44:50:bc:6c:5a:
85:e4:d2:2d:16:28:76:3d:cf:2a:03:fc:9d:f1:bd:
d3:9a:9a:df:1c:20:68:88:9a:f3:65:78:8a:df:6f:
ee:27:75:16:56:4f:c0:ec:70:c5:b3:15:c7:37:b9:
e3:e9:19:f8:8f:e3:24:3c:b5:13:58:07:fa:c1:88:
bc:b9:f8:10:cc:3f:27:75:b1:1c:63:cf:60:79:6b:
56:af:55:a4:c1:c8:c5:8d:42:b3:a4:e1:5c:d4:4e:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C1:8E:F5:2B:00:A8:85:2F:CC:8D:AC:D5:B9:EA:59:22:66:DB:C6
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e3:0a:29:31:3f:c9:37:52:b3:43:84:00:b5:b3:e8:8d:e3:
fb:53:d3:9b:d1:04:f0:da:fb:ae:d3:df:8f:5c:4f:ef:5b:93:
2f:c4:9e:8f:d8:5b:4e:64:07:4f:e1:ce:c4:e7:92:09:02:55:
0c:c8:85:c5:cd:0d:16:a6:18:11:b0:28:62:5a:d3:c8:3b:09:
cc:83:ea:50:f8:06:67:11:58:79:6a:e5:8c:36:63:38:f4:fe:
03:ee:33:b9:7e:ad:70:80:bc:bb:d6:31:02:61:11:5d:fe:f1:
b3:62:50:48:8c:31:8f:57:ec:29:0b:de:13:7d:79:ef:1e:5a:
ff:56:d3:ab:89:5f:d2:cf:ec:ba:42:cd:1b:f1:bb:88:c3:96:
64:9e:c5:30:c2:d6:94:1e:07:b7:e6:4c:74:12:a5:07:57:dc:
7b:28:4b:70:32:bd:9c:34:56:e8:59:2d:65:f6:99:15:0e:cd:
50:fe:e4:2a:fa:e8:a6:94:08:19:16:90:b4:84:f5:65:46:4e:
dd:43:1d:c9:3b:60:fe:2d:79:55:1d:c8:ea:53:1b:0f:ce:28:
5e:e9:4c:98:a0:d7:1a:2e:37:9e:a7:65:f8:d0:99:bd:9b:9e:
85:50:aa:18:2f:da:fa:51:a5:d5:8e:73:00:81:ad:51:ac:3b:
79:0b:bf:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxpDrwCc4l3zj4bRgd+IWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYmM0MjM5YzljYjk4MWYxOWE0OTVlNjMzZDNiZWM4ODlm
Y2JlODkwHhcNMjYwMzAxMTkwMTA1WhcNMjYwMzAyMTkwMTA1WjAzMTEwLwYDVQQD
Eyg5MGMxOGVmNTJiMDBhODg1MmZjYzhkYWNkNWI5ZWE1OTIyNjZkYmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOzGz6u4XT0/owH8hU8Lapeddsjy
2zoozjTghSH/LqXL/XCX4ZrM/XLKo2scbjwLdLaLurMsPEQxpQzeMq2iyh9s+Znv
euKnaHr7NRqu3QD3jlh3BTrNyZbNrutKdMb8pTjp0dZBnQV7Z5OREe8aRcVxm+7k
mF/VSRWNCRkWPRIkYtkuhY+k9KRMmFwCbSkurD/DVqXKrqwrIvEF8svYRFC8bFqF
5NItFih2Pc8qA/yd8b3TmprfHCBoiJrzZXiK32/uJ3UWVk/A7HDFsxXHN7nj6Rn4
j+MkPLUTWAf6wYi8ufgQzD8ndbEcY89geWtWr1WkwcjFjUKzpOFc1E5ujQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDBjvUrAKiFL8yNrNW56lkiZtvGMB8GA1UdIwQY
MBaAFJu8QjnJy5gfGaSV5jPTvsiJ/L6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmIt
MDFhYTA1NmIxZjZmLzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmItMDFhYTA1NmIxZjZm
LzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOMKKTE/
yTdSs0OEALWz6I3j+1PTm9EE8Nr7rtPfj1xP71uTL8Sej9hbTmQHT+HOxOeSCQJV
DMiFxc0NFqYYEbAoYlrTyDsJzIPqUPgGZxFYeWrljDZjOPT+A+4zuX6tcIC8u9Yx
AmERXf7xs2JQSIwxj1fsKQveE3157x5a/1bTq4lf0s/sukLNG/G7iMOWZJ7FMMLW
lB4Ht+ZMdBKlB1fceyhLcDK9nDRW6FktZfaZFQ7NUP7kKvroppQIGRaQtIT1ZUZO
3UMdyTtg/i15VR3I6lMbD84oXulMmKDXGi43nqdl+NCZvZuehVCqGC/a+lGl1Y5z
AIGtUaw7eQu/9g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:22 2026 by rpki-client