Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
File: Marcypb0SkVzktiQfGuWS-D8-SE.mft (raw, json)
Hash identifier: ygvjaR8INu6oYOdNH4YjG0Jiph2fe9SmHJiTrL5oU3k=
Subject key identifier: 6C:C0:3C:3F:0C:CC:8A:D7:66:30:35:D4:04:B5:A3:46:A4:65:B7:3C
Authority key identifier: 31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
Certificate issuer: /CN=31aadcca96f44a457392d8907c6b964be0fcf921
Certificate serial: 019CAB6B1B1113926B81B2585FE6E9C7979A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
Manifest number: 0F3D
Signing time: Sun 01 Mar 2026 22:00:49 +0000
Manifest this update: Sun 01 Mar 2026 22:00:49 +0000
Manifest next update: Mon 02 Mar 2026 22:00:49 +0000
Files and hashes: 1: 5YCiR0QrcWWKsMsGSeLa9ApB1lg.roa (hash: 8CnagmsDT7sVAnt0oL1gz0I3s/rO0bbV7JQNEmjxT0I=)
2: Marcypb0SkVzktiQfGuWS-D8-SE.crl (hash: 6BlWMCnCKmVYYur0SBHAlJ0dGyvsVoOO54NAGYvuVvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:1b:11:13:92:6b:81:b2:58:5f:e6:e9:c7:97:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31aadcca96f44a457392d8907c6b964be0fcf921
Validity
Not Before: Mar 1 22:00:49 2026 GMT
Not After : Mar 2 22:00:49 2026 GMT
Subject: CN=6cc03c3f0ccc8ad7663035d404b5a346a465b73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:6d:c0:e4:a1:7f:02:13:85:11:a7:c5:d8:
6d:47:db:b0:c7:51:f6:0b:b9:dc:da:f9:d6:65:dc:
48:e0:da:ef:19:b7:dc:cb:9e:1d:69:48:7e:29:d2:
c2:74:5e:4d:5c:c3:b3:e8:0a:f1:17:6f:2e:8d:a2:
38:5c:e5:cc:f0:63:e9:b6:7c:f5:c2:8a:e1:cb:c8:
7e:9b:23:c6:ad:d7:e7:32:51:d9:35:86:13:04:8a:
89:d2:23:6b:93:61:93:c9:16:10:4f:0d:95:d8:d4:
3c:ba:cb:65:04:8b:6a:0c:3a:65:a3:0d:48:40:4d:
af:be:7c:0d:b3:2b:58:b4:2c:a1:c5:60:cf:5a:5b:
0c:52:8e:9f:b2:6b:a2:67:0d:75:53:6d:2a:21:d8:
a6:c8:69:d1:8a:cd:0c:63:44:7a:84:a0:8b:5c:b9:
35:13:76:b3:4a:57:60:33:53:54:a9:ef:84:ad:df:
c6:69:2b:ef:16:af:40:28:95:e3:a0:44:3d:a2:bf:
68:4d:cd:41:fa:52:c2:d8:ea:37:20:ac:89:43:97:
16:b5:eb:2f:fe:a4:e8:5c:3a:b0:81:6c:27:30:31:
60:be:e9:5b:d3:ac:ae:20:45:4b:6b:08:e9:51:ff:
9d:25:a1:49:ad:26:d2:eb:81:6c:6e:0b:f3:63:a0:
49:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C0:3C:3F:0C:CC:8A:D7:66:30:35:D4:04:B5:A3:46:A4:65:B7:3C
X509v3 Authority Key Identifier:
keyid:31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fa:ab:01:9b:92:c4:94:ab:ea:3f:5f:ad:a6:24:a6:1f:9a:
81:13:cb:e9:00:ef:c2:72:64:37:6c:45:be:38:d4:87:a8:e9:
85:df:c3:6b:48:d9:6b:33:62:fe:23:5a:76:34:cf:23:c2:33:
b7:f8:35:18:22:ab:53:df:39:06:36:43:d0:96:9c:39:7a:ad:
aa:01:0a:9c:e7:f7:d8:b6:b3:b7:08:b1:47:31:e5:0a:85:60:
7f:26:69:22:79:b7:bb:21:10:3f:eb:d9:5d:7d:c7:f1:6e:17:
27:25:a0:9f:a2:cd:fe:55:dc:34:e7:26:9d:57:16:34:3d:ad:
a9:6c:0e:df:7c:2c:77:7b:07:4a:05:a2:e1:cb:61:4b:e1:50:
f9:72:2e:6a:14:7a:d1:2e:91:92:80:0d:fc:b9:61:a8:30:f7:
a2:b1:2a:50:8d:c5:36:6b:a0:1c:a3:3b:13:83:08:b9:6a:be:
f4:5b:1f:4e:57:94:a8:f9:11:1f:97:d7:a6:b2:a3:89:be:36:
f0:88:d8:a6:35:38:24:40:f8:37:35:a9:1a:f9:94:42:da:4d:
f1:9e:c9:51:7c:9b:d1:42:4f:4b:8d:4f:93:d6:70:b5:7b:e2:
97:86:32:68:1d:6c:27:02:5c:31:2a:05:99:0b:21:d9:a2:60:
77:3c:ba:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:31 2026 by rpki-client