Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: 57NZK9BANcA5wKUw0MJNTIIVr8ZuOiY5NgV/H882T9E=
Subject key identifier: 1A:D1:0E:DC:B5:A0:09:61:71:52:84:B8:1D:FE:78:95:09:9B:F9:6B
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 019CAC10218F10842C1787776D16DCC5522D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 1470
Signing time: Mon 02 Mar 2026 01:01:04 +0000
Manifest this update: Mon 02 Mar 2026 01:01:04 +0000
Manifest next update: Tue 03 Mar 2026 01:01:04 +0000
Files and hashes: 1: 49TpwXNTbP9jREpz2sa2Jtt7mT4.roa (hash: 29rndF3r0S7bzK9ai7WqeiKlzm9ig1QMwR9Nz9BHg9o=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: bR8THKzWtV6uajnp9LfLYZEFEH9H7ZRnCmAooxJVnBE=)
3: dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa (hash: GnpPZWGTVcUqisrQyyHLCMNBiEUZ8MM+stWTYBQynzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:21:8f:10:84:2c:17:87:77:6d:16:dc:c5:52:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Mar 2 01:01:04 2026 GMT
Not After : Mar 3 01:01:04 2026 GMT
Subject: CN=1ad10edcb5a00961715284b81dfe7895099bf96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:1e:b5:98:85:a4:58:32:e3:cb:d6:8b:c5:
65:0b:cc:49:96:c5:e2:66:d4:95:62:e4:84:f8:56:
20:f0:e2:5b:c9:e3:ac:8c:e4:1e:28:b8:92:86:5d:
e2:2b:78:2f:25:e9:e1:64:d0:a4:5b:78:7b:10:ca:
1e:fc:96:0f:d5:f7:97:27:d2:99:8f:69:13:01:cf:
cf:74:ee:f0:5e:7b:49:8d:96:aa:25:ea:8c:d5:47:
e0:d6:fb:99:bc:ec:cd:6a:63:dc:1e:23:ad:ad:c3:
01:46:55:a2:bc:7b:3e:a8:fc:8d:26:ce:f4:3f:2e:
46:48:02:be:c9:3f:be:73:4a:b0:7e:ac:05:f8:2d:
96:66:77:47:46:d7:d5:06:8f:ab:79:be:19:92:ad:
d8:a0:48:97:e8:da:f0:53:b6:b6:f8:6a:02:c2:23:
91:9a:6c:b6:41:ce:ab:3c:ef:95:a0:c4:6a:7b:45:
45:d9:5b:c3:b1:a5:35:ff:bb:f2:2c:88:1f:5f:37:
fc:e4:ec:15:20:1f:fe:67:83:25:cb:87:1c:8a:37:
bc:7b:87:e5:03:45:0c:1f:47:94:54:fd:ff:96:82:
09:c5:75:1f:7d:09:b5:5a:7e:e9:4c:dd:f9:bc:e0:
b0:47:17:a3:e5:2b:f2:a9:4a:af:88:37:fc:04:64:
02:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D1:0E:DC:B5:A0:09:61:71:52:84:B8:1D:FE:78:95:09:9B:F9:6B
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a8:76:32:47:4a:fe:a5:e8:b0:d0:46:64:d0:d6:ea:6e:14:
ad:fc:b7:22:96:6b:1e:e4:69:32:fc:bf:31:a7:2d:6f:b1:d7:
cc:5c:18:e6:77:b8:8a:04:da:9a:7f:71:d4:b9:20:bf:e5:a9:
3e:1f:ff:a3:51:5c:21:43:7d:bc:c4:eb:52:6a:e7:8d:11:45:
e2:d4:03:06:7c:7d:f1:d1:86:5b:cb:af:67:66:f9:24:82:1b:
6d:93:bd:40:1e:3b:2b:55:1c:16:77:c8:fe:cb:c3:1f:c1:27:
9c:d2:0e:14:3b:16:51:d0:ad:d3:42:98:ed:56:ab:b1:6a:4e:
fa:bd:79:95:17:e6:7d:62:39:c5:87:ef:e9:2c:63:e1:a7:ce:
ed:e4:40:69:15:0f:38:d3:fd:f1:8c:32:11:4e:26:37:5e:e4:
28:33:6d:d7:da:7f:9c:74:ea:9d:dd:bf:b9:ce:9e:7d:e2:c2:
f9:9b:91:07:d6:1f:de:51:4f:d1:3a:93:53:d2:90:b7:c3:f5:
3c:b6:cb:c9:2c:1a:9c:fb:89:34:32:54:0e:e9:89:ac:ef:14:
8f:4a:74:0d:3c:0d:44:cf:0d:f1:c2:0f:12:fb:55:00:c8:0b:
ad:0c:b2:d8:a9:a3:e0:b4:b5:ff:74:65:d4:33:62:2b:90:a5:
b9:3c:85:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:06 2026 by rpki-client