Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: k8jT2uo4XjTLaQo7DnfhzNGudAqQ3CAh75or0XA1HR4=
Subject key identifier: 42:92:27:85:E9:83:9F:D2:C2:41:26:FA:DC:64:09:86:96:BE:EC:0F
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 019EC1121478512EB1D351ABD6E926FCBBA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 1584
Signing time: Sat 13 Jun 2026 13:00:47 +0000
Manifest this update: Sat 13 Jun 2026 13:00:47 +0000
Manifest next update: Sun 14 Jun 2026 13:00:47 +0000
Files and hashes: 1: 49TpwXNTbP9jREpz2sa2Jtt7mT4.roa (hash: 29rndF3r0S7bzK9ai7WqeiKlzm9ig1QMwR9Nz9BHg9o=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: /GxB1E0gXLr5u6N+23sFcNe6vtgTfSGsUqsWBm5mEDU=)
3: dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa (hash: GnpPZWGTVcUqisrQyyHLCMNBiEUZ8MM+stWTYBQynzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:14:78:51:2e:b1:d3:51:ab:d6:e9:26:fc:bb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Jun 13 13:00:47 2026 GMT
Not After : Jun 14 13:00:47 2026 GMT
Subject: CN=42922785e9839fd2c24126fadc64098696beec0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:93:05:27:e9:13:82:3e:77:09:28:ea:41:0f:
4c:76:f4:33:77:2f:c8:9a:1f:b5:58:62:cd:4c:ee:
19:f9:47:49:ba:18:06:46:a4:ae:93:51:ae:74:9a:
59:d7:9a:2d:2f:84:5a:8b:52:eb:29:b1:d4:05:33:
a0:91:6b:cb:66:39:88:ef:cb:76:8d:1f:5b:16:aa:
15:c4:cd:e0:7a:50:a4:ce:34:c2:22:18:f1:4f:ee:
e8:52:2f:34:bd:65:d7:b7:3e:ee:35:40:c6:06:62:
44:c6:1e:4f:03:38:88:17:75:5c:3d:7c:e9:a7:84:
c5:5d:e7:39:77:1f:f4:4a:e8:61:53:a4:6a:78:72:
45:22:78:32:9d:6f:a5:99:07:c9:30:30:aa:7b:79:
c2:b2:3b:e5:71:af:3e:72:cb:09:54:84:f2:5b:99:
3a:9d:ba:ca:1c:e4:f0:07:c7:2b:bf:c9:d9:d9:3d:
96:c1:06:05:8d:d6:a2:9d:40:41:d7:cd:6b:17:8b:
db:ee:d4:5b:e5:d2:e1:db:4c:1e:54:9a:4f:46:27:
ab:7e:9d:bc:83:66:5d:db:5a:ef:3f:b3:b7:7c:63:
7d:b3:d6:24:e0:db:8c:08:c3:c1:3e:e0:7d:2b:47:
17:c0:19:ae:a1:f3:01:91:6e:d0:b8:52:38:d2:3e:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:92:27:85:E9:83:9F:D2:C2:41:26:FA:DC:64:09:86:96:BE:EC:0F
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:27:df:c9:59:7b:bd:72:ac:3c:5c:e8:be:8a:58:13:ac:1d:
54:88:95:ea:8a:6c:8a:8e:b0:07:41:a4:75:8e:e5:d7:25:49:
c3:07:0f:d4:30:c3:09:90:2e:e0:07:f8:1a:e4:74:20:2a:e0:
75:4e:ba:ac:1f:8f:67:03:7b:df:67:08:71:2b:df:2b:b5:05:
9d:3c:ed:5e:7f:3d:32:e6:81:b1:9f:3e:44:41:fd:53:1c:ea:
82:f3:1a:51:a2:0f:3c:3d:0e:be:c6:b8:51:e1:ca:db:e3:b3:
59:5a:db:a9:41:20:1b:3a:80:46:13:19:83:c3:ab:54:36:1e:
88:eb:57:28:91:b7:0c:f1:d7:65:9f:a7:b0:b6:10:86:ed:a3:
75:68:64:2b:df:e1:f2:13:1a:22:3e:dd:49:d4:0b:a3:3e:9d:
05:06:14:1b:b3:d5:1d:01:49:34:1b:c2:8f:d6:58:79:75:ab:
32:93:41:27:5c:07:17:dc:91:27:6d:cf:d6:43:89:2d:04:6a:
f7:71:d5:91:b2:ba:d0:53:b1:b1:2c:7e:46:1c:61:d7:c9:cc:
f3:6f:3d:fc:b3:6f:2d:59:5a:16:b1:c6:ec:ec:a8:8e:03:6e:
86:74:0b:e5:08:83:e4:94:51:7b:de:12:fc:21:f9:3f:cc:b2:
20:80:cf:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEhR4US6x01Gr1ukm/LupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYzZiYmFmNDA5ZjVmZDZkNzA5YzRkN2QyNDM0NGEyOTJh
M2NhYTUwHhcNMjYwNjEzMTMwMDQ3WhcNMjYwNjE0MTMwMDQ3WjAzMTEwLwYDVQQD
Eyg0MjkyMjc4NWU5ODM5ZmQyYzI0MTI2ZmFkYzY0MDk4Njk2YmVlYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45MFJ+kTgj53CSjqQQ9MdvQzdy/I
mh+1WGLNTO4Z+UdJuhgGRqSuk1GudJpZ15otL4Rai1LrKbHUBTOgkWvLZjmI78t2
jR9bFqoVxM3gelCkzjTCIhjxT+7oUi80vWXXtz7uNUDGBmJExh5PAziIF3VcPXzp
p4TFXec5dx/0SuhhU6RqeHJFIngynW+lmQfJMDCqe3nCsjvlca8+cssJVITyW5k6
nbrKHOTwB8crv8nZ2T2WwQYFjdainUBB181rF4vb7tRb5dLh20weVJpPRierfp28
g2Zd21rvP7O3fGN9s9Yk4NuMCMPBPuB9K0cXwBmuofMBkW7QuFI40j5qawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKSJ4Xpg5/SwkEm+txkCYaWvuwPMB8GA1UdIwQY
MBaAFDHGu69An1/W1wnE19JDRKKSo8qlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMt
NDFjM2NmOTA4ZTk3LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMtNDFjM2NmOTA4ZTk3
LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSffyVl7
vXKsPFzovopYE6wdVIiV6opsio6wB0GkdY7l1yVJwwcP1DDDCZAu4Af4GuR0ICrg
dU66rB+PZwN732cIcSvfK7UFnTztXn89MuaBsZ8+REH9UxzqgvMaUaIPPD0Ovsa4
UeHK2+OzWVrbqUEgGzqARhMZg8OrVDYeiOtXKJG3DPHXZZ+nsLYQhu2jdWhkK9/h
8hMaIj7dSdQLoz6dBQYUG7PVHQFJNBvCj9ZYeXWrMpNBJ1wHF9yRJ23P1kOJLQRq
93HVkbK60FOxsSx+Rhxh18nM8289/LNvLVlaFrHG7OyojgNuhnQL5QiD5JRRe94S
/CH5P8yyIIDPwg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:28:03 2026 by rpki-client