Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
File: McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json)
Hash identifier: wRA/bJeDpM13b4Eq7LOXPtoFdLULQBQazrjIIpdw3k8=
Subject key identifier: 6A:23:EA:93:BB:09:81:40:35:EA:E2:84:65:72:E5:92:48:91:2B:3A
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Certificate issuer: /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial: 01A17EF42E1306E69006D3B855A44ABE75F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
Manifest number: 0A4C
Signing time: Tue 27 Oct 2026 20:01:34 +0000
Manifest this update: Tue 27 Oct 2026 20:01:34 +0000
Manifest next update: Wed 28 Oct 2026 20:01:34 +0000
Files and hashes: 1: 1-p3HaYx4IqX4cWvi0vNEwtBCaHk.roa (hash: i3bN04ehC6KNjZ/mU1aU2Jp/6ScotgzMImvrL9el+ok=)
2: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: gx0c+/awcm8+842EuqX5k2/rvEfMcKC+eld9+zODj9g=)
3: YHYbmuz_pM9wn1qc-egcCE-kAEA.roa (hash: 6Tz9Tz8OM7622P+63dPrrdM/er/OUWTKt1lvg0lixIg=)
4: pIxw3KC603JdsybhpGY7_5Fn_9o.roa (hash: Ci8maKrft1TBBCcPJqKFYTduIXPenh2T5qk94PPEQ08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f4:2e:13:06:e6:90:06:d3:b8:55:a4:4a:be:75:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Validity
Not Before: Oct 27 20:01:34 2026 GMT
Not After : Oct 28 20:01:34 2026 GMT
Subject: CN=6a23ea93bb09814035eae2846572e59248912b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:0f:f0:87:17:98:5f:f6:42:00:0c:82:31:
67:9b:70:3c:bd:74:50:65:76:75:80:79:dc:86:ec:
4d:ef:ac:ce:ef:8f:99:29:4c:9d:fb:74:df:5f:9b:
99:66:a6:4c:00:45:2f:f9:d3:1e:56:17:57:16:e9:
a1:e7:cd:4d:8f:65:34:95:05:05:76:aa:04:ad:31:
80:4b:69:fb:68:9c:11:be:fc:1d:2a:69:9d:93:df:
80:3c:83:39:b8:dc:3b:20:31:eb:9f:cf:2e:b9:a0:
bf:d7:51:c6:5d:e4:0d:70:e4:f8:f0:52:7b:2e:e6:
f5:45:2d:0d:9c:4f:3e:31:35:c0:89:fb:fa:2d:28:
f5:50:01:82:3c:14:5a:d1:59:3b:6b:99:a2:68:30:
d9:0c:7f:d7:2b:5f:cc:94:49:c0:e0:c6:15:77:46:
0d:12:ee:f2:a1:5d:be:fb:09:f7:fb:63:76:2f:2a:
6e:78:ba:e7:cf:54:9b:05:69:6b:77:62:45:6d:e0:
1e:50:1b:16:b6:0c:a4:ce:a9:81:ee:bb:b4:04:02:
1a:7e:b3:f7:5b:b9:db:70:75:c6:5c:d6:7a:a6:13:
f6:7a:fe:47:09:28:8d:f3:f0:6e:6f:5f:82:c7:12:
06:16:e0:01:48:f4:ee:fb:75:fd:11:ad:f3:6b:69:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:23:EA:93:BB:09:81:40:35:EA:E2:84:65:72:E5:92:48:91:2B:3A
X509v3 Authority Key Identifier:
keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8c:a4:59:73:b8:dc:47:f1:fd:fe:15:9f:97:79:a8:ac:28:
9f:6d:a8:15:5a:4e:5e:d6:f8:61:5a:9c:10:3d:36:d7:7f:f9:
db:58:57:bb:49:3c:7a:79:dd:01:d4:7c:bf:ab:6d:2d:77:7c:
27:bd:45:80:e4:06:83:ee:69:d3:8b:0c:7b:9b:da:7e:ca:b8:
36:d0:ec:64:dd:93:a0:77:b7:b9:a7:da:bc:34:22:2f:cb:d3:
47:47:c8:6a:09:60:88:c4:d4:9c:4a:f7:17:36:24:b8:71:7e:
83:09:aa:01:69:6f:51:9a:5c:f1:2a:ae:f2:47:f7:5e:19:cc:
72:5a:44:cd:7f:b6:a1:ff:da:47:e8:6e:aa:60:79:10:38:b9:
84:fd:69:2e:ed:9d:91:ab:f3:09:9e:72:d0:a7:1b:29:b7:ef:
b4:bc:49:6e:d6:48:7f:ad:64:af:ca:c1:b3:90:72:37:50:fd:
8f:de:99:04:a1:cb:2b:47:6d:06:6b:04:12:22:62:59:19:0c:
9f:8b:79:a1:59:99:ea:c2:8a:f9:ec:49:40:b8:9c:06:05:e2:
a0:92:4e:af:5b:63:f3:be:93:56:9c:5a:f8:fe:fe:a4:ca:75:
5e:52:c1:e9:7a:ce:c4:03:e7:78:95:89:66:c2:83:a9:1e:24:
7c:57:d9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:41 2026 by rpki-client