Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: saG6nA6n9Y2gQYPKdZudJkWR3/04CXSi6em0ERSoVD0=
Subject key identifier: 04:B5:05:10:DE:46:7F:B1:69:21:CD:71:3F:B2:C2:E3:D3:5A:81:57
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 019FA8D03E795AD8F971E3E2C93D601536DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 15FC
Signing time: Tue 28 Jul 2026 13:00:47 +0000
Manifest this update: Tue 28 Jul 2026 13:00:47 +0000
Manifest next update: Wed 29 Jul 2026 13:00:47 +0000
Files and hashes: 1: 49TpwXNTbP9jREpz2sa2Jtt7mT4.roa (hash: 29rndF3r0S7bzK9ai7WqeiKlzm9ig1QMwR9Nz9BHg9o=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: 0YAAfXvogKxbUCPph0dqsTT07hIHsRipPoW+Obfa2n4=)
3: dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa (hash: GnpPZWGTVcUqisrQyyHLCMNBiEUZ8MM+stWTYBQynzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:3e:79:5a:d8:f9:71:e3:e2:c9:3d:60:15:36:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Jul 28 13:00:47 2026 GMT
Not After : Jul 29 13:00:47 2026 GMT
Subject: CN=04b50510de467fb16921cd713fb2c2e3d35a8157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:c7:e0:2c:9d:89:87:78:03:60:ed:31:32:
36:cd:b9:7b:dd:f5:3c:1e:73:3c:21:cb:30:56:d9:
19:65:52:bb:a3:f6:a0:ea:0b:ce:da:63:28:e8:f5:
65:4b:65:cf:6c:b1:9c:22:fc:13:a7:ce:7c:08:5b:
53:0f:43:40:23:48:0a:30:3c:14:11:68:0b:83:08:
81:cf:14:76:60:19:c0:fd:50:f8:5e:5e:c2:b3:17:
8a:37:79:f0:ec:d7:41:23:f9:d5:61:e9:cc:4e:bb:
85:95:eb:a4:47:1e:e1:b5:3a:5c:db:99:32:77:92:
d8:2f:e2:1e:bc:be:ad:9e:08:cc:b0:3d:48:c7:b0:
52:7a:d0:57:e5:08:f0:50:9b:f5:7d:19:48:fb:8e:
90:a5:5a:52:94:83:ea:52:08:c0:2c:15:a3:8c:e9:
66:d8:b2:3e:f2:c7:b9:8f:c3:c2:1d:ae:e9:95:8b:
1b:e0:05:f9:72:65:91:5b:6d:6c:94:b1:68:84:99:
d2:8d:b7:0b:52:01:97:8d:8a:5c:61:3e:4b:91:6e:
47:d1:97:52:7b:15:2c:98:4c:80:29:a4:dd:b0:31:
23:e4:51:08:e8:eb:ef:fd:5e:f1:1c:6f:fe:90:44:
4b:dc:9f:e6:a8:6e:15:25:c1:76:92:98:16:64:e1:
ab:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B5:05:10:DE:46:7F:B1:69:21:CD:71:3F:B2:C2:E3:D3:5A:81:57
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:02:70:cf:a3:f6:a5:15:e1:2f:89:7e:76:d5:ad:be:fd:49:
eb:ad:7f:20:49:b3:ec:b6:ba:5c:32:95:98:5d:60:a6:4a:2a:
59:da:5c:55:54:c8:df:2e:5e:dc:a5:87:32:e5:fc:a6:a6:f9:
d7:01:51:a5:c1:58:97:c8:57:87:25:d1:bb:ae:09:c5:a7:c1:
2f:ac:0e:09:0f:ab:37:29:3e:66:f6:24:54:ce:14:50:e9:af:
ad:0b:d6:e2:37:75:e5:c8:85:4f:2b:e2:e4:fe:c1:44:a0:d9:
d8:19:1f:27:26:be:43:b8:65:25:dd:a5:40:a0:e5:23:ee:c4:
4e:56:e5:68:e4:c4:87:b4:35:43:a0:ce:de:2c:f3:a4:dd:a3:
9e:36:2e:dd:00:13:af:2c:56:37:97:37:2e:59:5a:80:3a:3e:
3e:3e:a2:9b:ba:ac:ac:be:d2:72:73:b6:d0:b8:e7:62:0c:47:
80:80:19:87:1d:dd:ab:2c:77:45:5a:b8:a6:ef:25:d1:61:b1:
5f:fa:a9:23:58:df:ad:71:89:d3:d9:95:10:96:9e:9a:2b:01:
cd:ea:72:25:0d:f2:f6:a0:67:58:85:62:cc:5f:51:c9:3a:0b:
ba:c4:ed:18:ea:e0:80:29:86:c9:72:2a:b9:2f:04:7b:95:37:
60:fb:97:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0D55Wtj5cePiyT1gFTbcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYzZiYmFmNDA5ZjVmZDZkNzA5YzRkN2QyNDM0NGEyOTJh
M2NhYTUwHhcNMjYwNzI4MTMwMDQ3WhcNMjYwNzI5MTMwMDQ3WjAzMTEwLwYDVQQD
EygwNGI1MDUxMGRlNDY3ZmIxNjkyMWNkNzEzZmIyYzJlM2QzNWE4MTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2fH4CydiYd4A2DtMTI2zbl73fU8
HnM8IcswVtkZZVK7o/ag6gvO2mMo6PVlS2XPbLGcIvwTp858CFtTD0NAI0gKMDwU
EWgLgwiBzxR2YBnA/VD4Xl7CsxeKN3nw7NdBI/nVYenMTruFleukRx7htTpc25ky
d5LYL+IevL6tngjMsD1Ix7BSetBX5QjwUJv1fRlI+46QpVpSlIPqUgjALBWjjOlm
2LI+8se5j8PCHa7plYsb4AX5cmWRW21slLFohJnSjbcLUgGXjYpcYT5LkW5H0ZdS
exUsmEyAKaTdsDEj5FEI6Ovv/V7xHG/+kERL3J/mqG4VJcF2kpgWZOGrhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAS1BRDeRn+xaSHNcT+ywuPTWoFXMB8GA1UdIwQY
MBaAFDHGu69An1/W1wnE19JDRKKSo8qlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMt
NDFjM2NmOTA4ZTk3LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMtNDFjM2NmOTA4ZTk3
LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAygJwz6P2
pRXhL4l+dtWtvv1J661/IEmz7La6XDKVmF1gpkoqWdpcVVTI3y5e3KWHMuX8pqb5
1wFRpcFYl8hXhyXRu64JxafBL6wOCQ+rNyk+ZvYkVM4UUOmvrQvW4jd15ciFTyvi
5P7BRKDZ2BkfJya+Q7hlJd2lQKDlI+7ETlblaOTEh7Q1Q6DO3izzpN2jnjYu3QAT
ryxWN5c3LllagDo+Pj6im7qsrL7ScnO20LjnYgxHgIAZhx3dqyx3RVq4pu8l0WGx
X/qpI1jfrXGJ09mVEJaemisBzepyJQ3y9qBnWIVizF9RyToLusTtGOrggCmGyXIq
uS8Ee5U3YPuXRg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:26 2026 by rpki-client