Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: lalAHc4OZL8NimTXpyi+QDUAoss39fgdIhEE6J13zLs=
Subject key identifier: BD:AD:52:E8:18:B3:3D:D6:5D:F3:71:3D:76:B5:77:F6:DA:90:96:1F
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 019EC1B657FA40DF5F1170F3DC745FF0684D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 11AB
Signing time: Sat 13 Jun 2026 16:00:13 +0000
Manifest this update: Sat 13 Jun 2026 16:00:13 +0000
Manifest next update: Sun 14 Jun 2026 16:00:13 +0000
Files and hashes: 1: kJ6-t_FAgoe7HphTqXyXgseS7_A.roa (hash: nmaaXT8wxyUyQofH+9fMDVryZ1mgAUYzWspK2/2I9As=)
2: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: T2H+E1FhxEPfqVe8ramuPpXgiyHFP+eLSJXmy3qyYMU=)
3: uBycyFV3HFO3Kaf85-1Yby5F7cI.roa (hash: UjOmW8dergl068O1JptPgYMNCbZKAckDjyhoBH2ZRDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:57:fa:40:df:5f:11:70:f3:dc:74:5f:f0:68:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Jun 13 16:00:13 2026 GMT
Not After : Jun 14 16:00:13 2026 GMT
Subject: CN=bdad52e818b33dd65df3713d76b577f6da90961f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:6a:15:78:2d:a7:47:00:b6:8f:d2:81:48:
f8:69:6d:3c:8c:82:9b:5d:bd:39:96:11:45:a2:c7:
46:8e:51:f1:6f:17:d1:b7:98:e2:d5:c0:ad:a6:59:
42:58:54:17:db:fd:c4:58:77:a5:6e:a7:ea:32:75:
dc:b7:bd:f3:ea:d1:11:14:71:88:0e:b8:21:76:57:
a2:d7:cf:a7:39:3a:86:00:81:3b:b6:af:d6:e4:fe:
9a:02:c5:8b:50:2f:ce:12:18:c4:4e:42:99:7c:bb:
fd:45:ad:3c:6d:54:83:1d:fb:89:6d:b3:c2:24:2f:
7a:41:92:79:ac:3e:30:20:0a:6f:63:69:b8:97:bb:
e3:17:fb:20:ac:d4:1c:62:00:2d:e4:9f:76:1e:5c:
47:87:01:58:77:5f:3c:3d:d5:d0:15:0b:9f:f5:5c:
24:7e:33:98:d3:5b:c5:7a:d5:3a:76:e3:e7:a5:93:
c3:b6:98:ca:d4:1f:cc:ab:a0:f4:91:e3:e1:bc:ad:
39:90:2d:22:a1:09:cc:af:7f:f0:1c:57:c4:4b:61:
60:01:3e:0f:96:1a:54:0d:ac:ff:91:2d:40:59:f5:
f2:df:b0:53:5d:da:ca:8f:ff:6c:59:bb:be:cb:e2:
e2:b9:f7:4c:aa:80:ed:6e:b9:08:3a:65:cc:e6:61:
fb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AD:52:E8:18:B3:3D:D6:5D:F3:71:3D:76:B5:77:F6:DA:90:96:1F
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ae:a9:f0:60:1c:2c:22:de:0c:66:08:ae:19:92:85:b3:e7:
9e:64:52:d5:67:27:52:2f:23:01:26:0c:43:60:a4:66:a8:48:
10:42:14:f6:e0:7f:58:07:38:f8:d6:14:20:35:78:04:6b:76:
f0:7f:7b:3e:6e:91:e1:46:4c:87:db:b3:5a:f9:c2:ad:86:85:
28:90:f7:17:70:8f:5d:f0:3e:cc:60:5f:bb:27:18:9c:7a:8d:
c8:60:5f:61:9d:bb:73:a3:13:a0:1b:bc:12:39:9e:20:2c:2e:
64:57:94:10:9a:5b:02:46:1f:76:5c:bb:ad:65:05:90:9e:af:
f3:bb:f6:43:86:ad:b1:92:fc:19:17:fb:20:cc:be:5e:46:7e:
c8:e1:68:c7:61:f7:e8:71:0f:f4:50:e8:c7:5e:f0:14:6f:81:
32:ae:cb:19:79:4c:22:88:34:cb:56:1f:7f:24:2a:06:9a:24:
60:dc:68:46:05:9d:87:8a:f3:a0:00:7e:55:c7:f2:25:84:25:
c7:6f:12:be:5a:f7:58:98:55:08:5c:84:28:e1:0c:dc:52:46:
0b:48:b3:df:36:85:f9:d8:a9:3b:62:44:5f:a6:3e:58:ae:6a:
c1:7d:8d:c2:c3:ed:6b:0b:71:0f:0a:6a:07:c5:4e:6e:c2:4c:
43:b6:6c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:18:09 2026 by rpki-client