Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: lSEFnOkwqbA1msP6OmLx+8z5Q34Uds8oB/YoTEIHNq4=
Subject key identifier: 72:37:B1:BA:76:12:D1:70:5A:A4:C3:32:F9:85:AB:BB:46:34:83:95
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 019D9999650DFFDF86F96F9BA42CEFDD7DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 14EB
Signing time: Fri 17 Apr 2026 04:01:00 +0000
Manifest this update: Fri 17 Apr 2026 04:01:00 +0000
Manifest next update: Sat 18 Apr 2026 04:01:00 +0000
Files and hashes: 1: 49TpwXNTbP9jREpz2sa2Jtt7mT4.roa (hash: 29rndF3r0S7bzK9ai7WqeiKlzm9ig1QMwR9Nz9BHg9o=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: tUAJQwP6LSbtfd9xfv6i2j6aSNrHIusbJcT58vz4BEs=)
3: dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa (hash: GnpPZWGTVcUqisrQyyHLCMNBiEUZ8MM+stWTYBQynzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:65:0d:ff:df:86:f9:6f:9b:a4:2c:ef:dd:7d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Apr 17 04:01:00 2026 GMT
Not After : Apr 18 04:01:00 2026 GMT
Subject: CN=7237b1ba7612d1705aa4c332f985abbb46348395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f6:8c:5f:fb:bf:80:be:29:bc:56:e3:1c:3d:
6d:db:25:8d:95:a4:93:52:f6:2f:6d:74:ee:b8:e0:
fd:c9:7c:85:6d:3c:eb:8d:d3:b2:d4:f2:72:fa:d1:
f7:2e:24:ad:8f:ae:56:9b:b0:5f:23:a2:2e:a8:be:
4d:1c:00:73:18:e3:4b:89:22:78:8e:e3:1f:5c:eb:
9e:f2:d5:59:34:aa:28:7a:4a:79:f1:48:f4:97:a4:
5b:c8:55:d2:0e:83:82:91:24:3c:85:0c:97:f2:c7:
48:eb:2c:3c:c8:bd:b5:d9:da:c9:8c:4b:e6:b9:8e:
a3:09:7e:7d:b2:77:f7:61:ba:b4:d4:4b:c3:f4:b7:
19:22:f9:0c:dd:25:91:76:79:59:c0:8e:fe:f1:b3:
5d:35:af:54:63:d8:80:e2:86:a2:2b:1e:22:70:1c:
4d:17:f5:ec:64:04:33:9b:d4:15:b9:9b:68:89:53:
20:5a:26:83:5b:b4:b0:d5:d9:54:3d:73:db:72:5d:
15:72:4a:f6:79:87:68:d5:d2:ed:08:b0:e5:16:29:
a8:12:ac:41:06:5d:78:ea:9b:c1:34:b5:c5:a1:fa:
67:0f:c6:33:7c:3a:b5:9e:df:8f:17:2b:03:c2:28:
9f:aa:57:45:ff:6c:94:52:d7:55:d7:cb:44:b7:b6:
12:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:37:B1:BA:76:12:D1:70:5A:A4:C3:32:F9:85:AB:BB:46:34:83:95
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f8:6d:2c:38:9f:c7:bd:9d:25:ba:4b:a3:7f:6d:6e:b9:2a:
c6:78:4f:cb:98:cc:b1:fd:47:5e:f2:74:3c:10:c0:b1:35:c3:
84:18:5a:5d:3b:c1:7a:b2:27:59:94:df:19:30:53:c0:3e:e3:
62:2d:2d:d3:79:aa:ea:e8:37:5e:7c:f0:47:44:15:2f:c8:cd:
df:96:dd:bf:62:12:9b:13:6e:fb:e3:e6:65:ea:f5:16:10:13:
10:f8:fe:ed:7c:25:8b:e8:1a:e9:77:45:74:89:12:93:04:78:
cd:bd:6b:68:d5:f3:69:56:fe:7a:e3:c5:bf:8f:62:d1:4a:20:
f4:05:a1:e5:4e:d8:6c:0d:31:53:90:81:15:f0:a5:9b:c0:d7:
17:f7:2e:bc:79:27:02:da:56:71:ed:32:91:91:b1:51:2e:6b:
dd:50:01:aa:ac:1a:f1:bb:ae:5e:04:e6:5d:0a:8d:ec:d3:87:
10:6c:b8:fc:af:7e:f1:a6:8d:26:78:db:f7:2e:83:ad:55:41:
41:3c:7a:bd:a4:09:a9:8c:fa:4e:33:92:33:13:b8:a1:21:65:
12:40:58:ae:96:f6:35:94:e0:79:f5:76:1c:df:98:6a:f9:68:
54:c8:07:c7:d1:39:2c:e5:81:39:ff:7e:79:43:64:49:0c:e4:
e7:0c:c4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:32 2026 by rpki-client