Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: W7MURxUox/cQOx+zsAbsvb1Mpl9hZmFN4wa3ZEmdc3Y=
Subject key identifier: F8:25:F8:E4:DA:62:51:0C:61:50:46:DD:E8:51:A6:62:33:C9:A2:5F
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 019FAABEA6B330113EC9882DBC20E771B835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 15FD
Signing time: Tue 28 Jul 2026 22:00:48 +0000
Manifest this update: Tue 28 Jul 2026 22:00:48 +0000
Manifest next update: Wed 29 Jul 2026 22:00:48 +0000
Files and hashes: 1: 49TpwXNTbP9jREpz2sa2Jtt7mT4.roa (hash: 29rndF3r0S7bzK9ai7WqeiKlzm9ig1QMwR9Nz9BHg9o=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: o/x3uIChMrpqkGbXGYUlsyjoy3uI9vUsqct4LoG0cwA=)
3: dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa (hash: GnpPZWGTVcUqisrQyyHLCMNBiEUZ8MM+stWTYBQynzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:a6:b3:30:11:3e:c9:88:2d:bc:20:e7:71:b8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Jul 28 22:00:48 2026 GMT
Not After : Jul 29 22:00:48 2026 GMT
Subject: CN=f825f8e4da62510c615046dde851a66233c9a25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:b9:11:34:19:b6:0f:43:39:86:65:0b:a2:
bf:a8:08:59:89:60:7b:95:95:ff:93:6c:b2:d6:3e:
ee:2e:f9:1f:5c:7f:ea:8b:79:cf:fe:49:aa:86:91:
9c:51:2b:ab:19:15:3f:8b:8a:c7:e2:b9:74:4e:4d:
fc:9d:5d:89:03:a8:a0:3c:11:36:53:20:28:9f:b8:
55:a4:e9:6f:48:f1:3b:a7:ff:94:de:88:02:50:67:
7d:8e:6e:cf:ee:1a:b0:dc:23:ea:8d:95:9d:5b:7d:
a9:65:fa:cf:16:9a:94:d0:01:d8:c4:47:f8:0d:5e:
2d:01:b2:f2:a8:a3:63:b4:94:d8:79:df:d2:0b:ab:
70:67:ff:b0:7a:e6:4c:ef:63:79:e3:f6:e6:7c:21:
0f:5d:2b:87:c5:4b:b6:6f:87:cd:a1:ed:ab:82:eb:
9c:fc:fc:cc:7d:14:84:8e:6d:f2:85:47:50:9a:4f:
6b:0e:a5:a1:f6:f8:44:5e:90:3c:b0:24:38:f6:91:
7f:35:0b:f4:25:f8:5c:a7:bc:b6:a9:d3:57:20:3b:
36:2b:d5:a8:70:51:69:bf:81:de:92:68:50:ec:10:
f3:20:05:eb:f5:0a:4f:b9:1b:84:ed:6e:94:d7:8b:
f3:cd:de:d3:17:23:5e:f4:9a:98:c1:4f:a3:58:29:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:25:F8:E4:DA:62:51:0C:61:50:46:DD:E8:51:A6:62:33:C9:A2:5F
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:73:15:4d:55:d1:02:aa:97:53:8c:07:be:f4:7c:b4:af:1d:
20:90:77:a3:e3:0f:d7:e0:ee:28:3a:41:7d:b9:d2:10:cd:f6:
12:b5:54:48:93:9b:d6:c8:f2:62:53:68:d0:12:03:61:ab:56:
62:d5:85:56:d6:04:f0:7e:31:de:c1:9b:86:fc:94:8e:da:9b:
4f:4c:67:4d:72:3a:97:6b:a6:06:e6:77:f6:c7:7d:8e:71:22:
93:23:70:5c:b1:25:b9:c0:bf:8a:98:6c:b5:ed:83:85:01:65:
63:3b:12:10:d5:08:bf:25:c9:bc:46:0e:40:a3:c1:61:de:4a:
25:41:77:2b:d5:f1:dd:a3:6b:ee:e5:97:b1:9e:e7:af:21:a7:
d8:04:be:93:f0:b8:57:20:56:8b:7d:6d:d6:d4:74:94:86:10:
90:8e:28:7a:0b:5e:3e:55:45:78:eb:20:cb:04:99:9c:42:d7:
fc:3f:ed:84:38:c3:d3:4c:30:45:30:0d:6c:86:77:d0:e4:fd:
16:2e:e1:bb:87:c7:ca:51:39:b6:07:8c:aa:a6:f5:78:29:12:
b5:f5:73:e3:da:9a:38:79:01:5c:50:78:45:f7:1b:06:39:ac:
18:d9:93:e8:4f:21:59:40:90:0a:ae:bb:1d:4c:26:6e:ec:5f:
e5:3a:c5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:56:03 2026 by rpki-client