Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
File: Marcypb0SkVzktiQfGuWS-D8-SE.mft (raw, json)
Hash identifier: Kua8v54ph7PX59ZAo2XscQwRiUKydOJaOt3vV7oPQBM=
Subject key identifier: BB:FF:3C:48:95:D1:3C:4F:B9:64:41:BC:DB:52:45:D0:96:50:7E:D3
Authority key identifier: 31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
Certificate issuer: /CN=31aadcca96f44a457392d8907c6b964be0fcf921
Certificate serial: 019D9AE26D4A4DA6ACEBB7A9578399416B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
Manifest number: 0FB9
Signing time: Fri 17 Apr 2026 10:00:23 +0000
Manifest this update: Fri 17 Apr 2026 10:00:23 +0000
Manifest next update: Sat 18 Apr 2026 10:00:23 +0000
Files and hashes: 1: 5YCiR0QrcWWKsMsGSeLa9ApB1lg.roa (hash: 8CnagmsDT7sVAnt0oL1gz0I3s/rO0bbV7JQNEmjxT0I=)
2: Marcypb0SkVzktiQfGuWS-D8-SE.crl (hash: fVgiiWQ8SCO73i4Kaki4CflM2qwy523x4G45FVK3PIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:6d:4a:4d:a6:ac:eb:b7:a9:57:83:99:41:6b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31aadcca96f44a457392d8907c6b964be0fcf921
Validity
Not Before: Apr 17 10:00:23 2026 GMT
Not After : Apr 18 10:00:23 2026 GMT
Subject: CN=bbff3c4895d13c4fb96441bcdb5245d096507ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:df:b8:a1:2e:47:9c:d9:7d:3a:06:fd:29:
4d:06:6b:76:05:c2:41:f2:2f:e6:23:41:1d:fb:60:
2e:07:79:66:2c:84:a1:97:f3:5d:c2:de:10:a8:08:
0f:d3:7a:af:c0:e3:75:2b:b7:34:fc:82:9c:ba:7a:
6c:8e:73:62:29:d8:6a:0a:01:12:7c:54:54:af:07:
c1:0a:4a:1b:7c:fb:82:55:99:0b:d6:8b:e7:c9:a4:
ed:4b:04:e7:84:6d:41:1a:f2:fc:a9:69:e4:98:c7:
b7:f6:d2:da:07:ee:69:d2:c8:ed:c4:97:9b:be:bc:
79:39:49:fe:67:31:fa:31:e0:d7:a8:bb:d4:85:5c:
7a:28:e9:86:75:16:b1:61:a2:3e:59:82:f6:0a:7c:
8c:01:b8:c6:5f:31:d7:0f:3e:5b:82:ab:59:1e:36:
74:99:a3:d4:bb:e7:94:c6:63:d9:06:83:61:b4:84:
ac:12:2c:dd:8e:f1:38:a4:ac:9b:19:cc:f7:9c:cf:
88:18:0c:72:e9:28:1f:50:dd:12:6a:5b:e3:20:8f:
35:82:0c:ab:d5:96:33:e1:fd:7d:7c:52:d2:cd:b7:
87:6c:16:5e:17:b2:5e:e3:f5:d5:f9:e2:3b:8e:23:
52:03:11:66:36:3f:85:9a:40:bd:49:2d:25:9c:da:
cc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FF:3C:48:95:D1:3C:4F:B9:64:41:BC:DB:52:45:D0:96:50:7E:D3
X509v3 Authority Key Identifier:
keyid:31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8f:e2:4b:d6:35:e1:48:c4:fa:e7:47:6b:8a:97:93:02:21:
a8:eb:15:e6:be:b4:0f:fb:4d:34:3c:bf:d3:72:12:03:dc:33:
7b:d0:63:1d:01:5d:d1:ac:98:1a:ae:29:db:9e:75:23:a0:a6:
31:6b:32:66:c7:60:2e:f4:b5:b7:39:02:e9:8b:6d:7b:c3:4b:
82:18:2b:06:a4:70:f2:63:62:78:91:7c:24:bf:fe:31:fe:87:
25:33:5d:31:8d:89:96:08:be:63:de:34:9e:c1:d0:08:ae:67:
bd:1f:c3:ad:6a:b6:88:82:2a:57:de:40:9b:75:a8:a4:56:9f:
57:57:7a:d5:c9:b7:0e:85:b8:be:f9:77:d0:7d:2b:9d:42:32:
e9:5e:91:b2:5f:88:35:6e:c7:b0:b3:38:5e:19:c5:a9:00:23:
09:d5:ba:e8:c1:47:45:77:89:a9:6e:bf:6f:95:ac:35:07:31:
c6:7c:32:b7:66:d3:fc:f2:ad:2c:eb:e8:0a:dd:bd:ec:83:52:
35:10:8b:8f:6d:0d:4d:89:ec:81:28:61:51:6b:8a:58:8d:1f:
d1:58:12:c4:3c:35:ca:a2:5f:fb:3c:4b:c7:73:2c:33:77:41:
35:a7:bc:8d:30:ac:01:de:08:aa:82:f1:79:b6:4b:79:1b:42:
e9:7d:5b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:25:40 2026 by rpki-client