Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: NcBlismBenE3hOLiHVikZ5bRp+0WffIT5UHALXyWsnw=
Subject key identifier: 46:B1:04:1D:3F:68:3A:2F:E7:77:E6:47:21:77:67:6F:46:38:34:CA
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 019D9A3E9FD20C7214A189DBCAB9BB7A700B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 1112
Signing time: Fri 17 Apr 2026 07:01:28 +0000
Manifest this update: Fri 17 Apr 2026 07:01:28 +0000
Manifest next update: Sat 18 Apr 2026 07:01:28 +0000
Files and hashes: 1: kJ6-t_FAgoe7HphTqXyXgseS7_A.roa (hash: nmaaXT8wxyUyQofH+9fMDVryZ1mgAUYzWspK2/2I9As=)
2: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: QZaFN8Omfm2A1MNg1b5+V+cINscxD8trR64dniHrPLI=)
3: uBycyFV3HFO3Kaf85-1Yby5F7cI.roa (hash: UjOmW8dergl068O1JptPgYMNCbZKAckDjyhoBH2ZRDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:9f:d2:0c:72:14:a1:89:db:ca:b9:bb:7a:70:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Apr 17 07:01:28 2026 GMT
Not After : Apr 18 07:01:28 2026 GMT
Subject: CN=46b1041d3f683a2fe777e6472177676f463834ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:73:21:b0:f0:95:4d:6a:2b:33:16:ae:c3:
85:e1:7d:d1:0a:9b:68:b6:ce:52:25:c8:d0:ca:09:
f4:28:9e:bd:f6:68:65:91:1e:75:5c:05:90:f0:7e:
7a:d9:ee:cb:f2:18:ea:9a:5f:80:67:19:11:44:53:
2e:48:00:2b:dd:44:69:75:36:be:bb:12:d2:31:47:
1b:0b:65:05:9d:f9:ea:a2:17:6c:ce:ca:aa:b3:e7:
cf:a7:ad:12:f2:1b:68:ff:f0:14:6a:24:de:9b:37:
0f:d5:c4:1f:05:86:9f:fb:5c:1d:d1:0c:e4:d8:79:
45:fb:19:17:7f:92:da:39:e7:f3:45:4f:b9:a5:ee:
c6:ac:eb:4b:68:22:4d:7c:d9:01:2d:04:42:2c:af:
d4:87:35:7a:2d:68:6d:8e:00:84:68:37:fc:3e:1c:
f2:68:7b:26:cc:d6:6b:08:db:ee:c7:23:3c:29:07:
2e:4f:73:c1:4e:52:f0:db:8a:e5:52:dd:59:6d:31:
25:75:12:3d:e7:7f:ea:24:92:9c:96:a3:cd:79:2b:
64:f8:c1:7b:cf:a1:ef:36:43:04:aa:21:44:f7:05:
46:1a:04:2d:84:44:2b:d1:61:cd:e1:93:44:99:8c:
db:20:5e:48:8e:c2:a5:d8:7d:53:0c:3d:0b:8e:f0:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B1:04:1D:3F:68:3A:2F:E7:77:E6:47:21:77:67:6F:46:38:34:CA
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3e:be:eb:95:79:23:81:f6:d0:9d:ad:3d:02:ab:b1:7b:d5:
0c:80:7d:a4:35:ec:4f:fe:b9:a5:ec:84:1a:da:df:63:d5:1b:
5e:ef:e1:a9:da:66:07:ed:c0:db:32:2a:44:8b:6c:60:63:d0:
2b:6c:7e:3b:0c:b2:3a:e2:48:be:3c:20:c0:b1:d0:bf:4a:18:
28:33:4e:58:02:3e:0e:e2:18:8d:63:48:7d:56:94:43:d1:3e:
7c:d3:e5:50:e9:1a:c0:1b:ac:d2:94:72:c6:48:ff:50:01:2e:
bb:82:56:66:7f:26:65:dd:08:66:b6:39:10:1a:8a:33:d8:6a:
a6:fd:1d:c8:e9:5e:86:68:48:0a:b4:8a:9a:0d:5f:b4:1c:85:
37:26:14:dc:45:5b:19:1f:ff:21:16:2e:07:7a:10:91:71:fb:
81:72:8e:ce:2f:77:ce:31:d9:2c:88:0d:43:95:b4:9f:70:89:
70:8c:28:e8:00:66:9a:97:a7:64:7a:59:70:72:e3:5a:72:3a:
a3:f0:45:12:33:11:48:21:5d:b6:64:fb:b0:e8:5a:a7:6d:ef:
58:56:08:4b:8b:b5:77:b5:26:21:d3:96:e4:b7:2d:f6:03:99:
33:92:c3:75:bd:db:6e:b9:5b:1f:52:42:d9:3d:00:a9:99:76:
0b:65:05:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:50 2026 by rpki-client