Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: 1VZAjarwTzeg0NSHu5sqvvIbVXTaZmfKYyujDZDY9ig=
Subject key identifier: 57:C8:1A:E1:5B:AA:89:21:75:24:14:59:2A:F4:78:12:10:7B:6F:6D
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 01A0BCF92F845563A40675BE459B1B8CA2BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 168B
Signing time: Sun 20 Sep 2026 04:00:42 +0000
Manifest this update: Sun 20 Sep 2026 04:00:42 +0000
Manifest next update: Mon 21 Sep 2026 04:00:42 +0000
Files and hashes: 1: 49TpwXNTbP9jREpz2sa2Jtt7mT4.roa (hash: 29rndF3r0S7bzK9ai7WqeiKlzm9ig1QMwR9Nz9BHg9o=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: BrAVhrvtsZ2Vv/FsPGhu0kLfx1stiM2r6a6+JaPrXoU=)
3: dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa (hash: GnpPZWGTVcUqisrQyyHLCMNBiEUZ8MM+stWTYBQynzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:f9:2f:84:55:63:a4:06:75:be:45:9b:1b:8c:a2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Sep 20 04:00:42 2026 GMT
Not After : Sep 21 04:00:42 2026 GMT
Subject: CN=57c81ae15baa8921752414592af47812107b6f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:aa:8e:ab:7f:c0:37:ec:46:15:c2:c0:9e:41:
a8:f6:2c:a8:72:32:27:d9:0b:cc:3a:86:2e:ae:dc:
5d:b1:c4:f3:f0:56:06:08:76:b6:ac:1e:60:58:74:
4d:a5:7e:14:d5:73:e2:88:99:e0:f8:5f:04:7e:1b:
2e:9e:72:af:cd:73:c3:3c:0a:35:fc:27:23:be:e7:
1a:05:26:80:d7:0c:f5:c5:39:ef:e1:b6:b4:c4:58:
c3:f9:b3:ac:58:f2:b6:e2:3f:2d:a1:12:2c:82:fc:
6a:a4:73:49:e0:b7:34:9b:0a:9b:26:98:4a:13:d8:
a8:36:a2:ce:ff:b9:55:c7:aa:8f:7e:59:cf:45:e0:
8c:1f:eb:ae:1e:cf:81:42:20:93:52:39:ce:31:ab:
32:48:eb:b8:f3:cd:05:7f:67:d1:10:03:8e:12:49:
6c:5a:03:6e:56:73:6d:98:46:3a:ca:e1:5f:01:21:
37:9c:f3:b6:ee:a1:83:db:e9:7a:7f:cf:ff:bb:0f:
51:03:5e:ba:36:52:99:2a:65:8c:8a:01:11:3a:76:
f4:09:b6:3a:18:1c:d4:73:46:9a:d8:46:c4:0d:6d:
f7:49:e4:1a:90:04:61:02:39:1d:92:da:2c:7d:90:
83:7f:86:eb:cd:12:72:c0:34:30:de:51:56:bf:b6:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C8:1A:E1:5B:AA:89:21:75:24:14:59:2A:F4:78:12:10:7B:6F:6D
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bc:a7:72:31:47:a2:fb:24:34:bb:f3:09:1e:66:d7:34:99:
f3:ba:72:c1:df:0a:7b:ac:b2:4e:f4:de:26:f0:be:6f:a4:84:
99:6d:b9:8c:91:f3:b8:ce:1c:5f:2b:6c:5f:11:6a:97:15:e6:
de:48:28:49:2e:35:1c:88:18:1d:99:88:9d:c1:df:3f:18:6d:
de:2f:f1:0b:e8:67:a7:90:e4:ad:48:6a:09:d7:e2:69:ef:e7:
bd:56:bc:2d:ff:cb:98:c9:fb:98:c3:30:ce:b1:f1:8c:aa:53:
a6:c9:59:c4:d6:99:01:d9:e4:27:a8:d2:99:3e:c1:0b:1e:4c:
94:ab:39:1f:12:e0:50:cc:b5:25:99:f8:ff:bb:ad:84:b7:00:
bb:b0:2c:c2:ff:6f:83:61:3b:74:51:81:12:55:07:95:93:f4:
db:29:dd:e4:7f:9f:33:64:98:5f:5d:6a:ed:86:a6:71:b0:0d:
22:4c:09:e9:51:f0:7f:77:12:9f:17:35:23:ae:30:b0:34:6c:
69:bc:88:12:8a:99:9d:58:c1:dc:1e:35:e8:13:e5:6b:20:2c:
ed:b8:a6:da:70:fc:3e:31:9a:04:6f:ff:09:87:ee:19:88:7c:
96:97:6b:e0:34:58:78:c1:6b:8b:d9:55:76:a3:74:69:da:7b:
c8:ef:bd:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC8+S+EVWOkBnW+RZsbjKK/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYzZiYmFmNDA5ZjVmZDZkNzA5YzRkN2QyNDM0NGEyOTJh
M2NhYTUwHhcNMjYwOTIwMDQwMDQyWhcNMjYwOTIxMDQwMDQyWjAzMTEwLwYDVQQD
Eyg1N2M4MWFlMTViYWE4OTIxNzUyNDE0NTkyYWY0NzgxMjEwN2I2ZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16qOq3/AN+xGFcLAnkGo9iyocjIn
2QvMOoYurtxdscTz8FYGCHa2rB5gWHRNpX4U1XPiiJng+F8EfhsunnKvzXPDPAo1
/CcjvucaBSaA1wz1xTnv4ba0xFjD+bOsWPK24j8toRIsgvxqpHNJ4Lc0mwqbJphK
E9ioNqLO/7lVx6qPflnPReCMH+uuHs+BQiCTUjnOMasySOu4880Ff2fREAOOEkls
WgNuVnNtmEY6yuFfASE3nPO27qGD2+l6f8//uw9RA166NlKZKmWMigEROnb0CbY6
GBzUc0aa2EbEDW33SeQakARhAjkdktosfZCDf4brzRJywDQw3lFWv7Z9KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfIGuFbqokhdSQUWSr0eBIQe29tMB8GA1UdIwQY
MBaAFDHGu69An1/W1wnE19JDRKKSo8qlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMt
NDFjM2NmOTA4ZTk3LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMtNDFjM2NmOTA4ZTk3
LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLyncjFH
ovskNLvzCR5m1zSZ87pywd8Ke6yyTvTeJvC+b6SEmW25jJHzuM4cXytsXxFqlxXm
3kgoSS41HIgYHZmIncHfPxht3i/xC+hnp5DkrUhqCdfiae/nvVa8Lf/LmMn7mMMw
zrHxjKpTpslZxNaZAdnkJ6jSmT7BCx5MlKs5HxLgUMy1JZn4/7uthLcAu7Aswv9v
g2E7dFGBElUHlZP02ynd5H+fM2SYX11q7YamcbANIkwJ6VHwf3cSnxc1I64wsDRs
abyIEoqZnVjB3B416BPlayAs7bim2nD8PjGaBG//CYfuGYh8lpdr4DRYeMFri9lV
dqN0adp7yO+90Q==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:57:24 2026 by rpki-client