Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: 8c1oYKR2rOFQiC+FPYZ0EghaCVaemoYunsMEDaS9tbk=
Subject key identifier: F3:8D:43:2E:6E:44:8A:D2:07:9C:15:00:42:1C:16:0E:2C:40:21:3E
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 019F16AF7C565B33ABA0C08244F41F2EEE01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 11D7
Signing time: Tue 30 Jun 2026 04:00:27 +0000
Manifest this update: Tue 30 Jun 2026 04:00:27 +0000
Manifest next update: Wed 01 Jul 2026 04:00:27 +0000
Files and hashes: 1: kJ6-t_FAgoe7HphTqXyXgseS7_A.roa (hash: nmaaXT8wxyUyQofH+9fMDVryZ1mgAUYzWspK2/2I9As=)
2: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: OnGZE3qsWSQnnXZ5GFcNo0pCU0H3GxedUQ83QMpmHhQ=)
3: uBycyFV3HFO3Kaf85-1Yby5F7cI.roa (hash: UjOmW8dergl068O1JptPgYMNCbZKAckDjyhoBH2ZRDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:16:af:7c:56:5b:33:ab:a0:c0:82:44:f4:1f:2e:ee:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Jun 30 04:00:27 2026 GMT
Not After : Jul 1 04:00:27 2026 GMT
Subject: CN=f38d432e6e448ad2079c1500421c160e2c40213e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7b:27:2a:17:d9:fa:6e:51:14:d2:70:d4:c6:
9c:c7:b5:b4:e6:78:22:a7:e2:6a:ea:e3:4f:f8:62:
b0:0a:96:9e:e8:bf:7e:bd:3e:2c:99:38:ec:2a:99:
4e:92:b2:7c:94:cb:20:c0:41:e2:11:09:0f:1e:92:
c2:28:4a:18:32:ab:27:5f:df:17:d9:b0:9f:f0:a4:
fc:2f:b6:6e:75:f4:42:94:44:34:5d:bf:be:f1:14:
4b:9c:e8:22:1e:80:25:58:ea:7e:37:e6:67:21:d5:
2a:8e:80:8d:5d:28:eb:64:81:d4:86:0a:6d:74:b4:
55:44:fc:10:94:af:f9:a8:b0:eb:b7:99:45:e0:69:
74:4d:06:29:e7:b7:63:2c:96:47:57:9a:4b:83:13:
76:01:96:09:2b:24:5d:dd:8d:e7:dd:c8:4c:a1:9d:
40:4c:5f:6d:26:2f:ad:85:27:35:6b:f9:24:d2:bc:
c0:49:f0:25:35:30:bc:76:fd:48:f3:73:22:a5:76:
bf:04:f6:57:33:69:ce:87:5c:a2:fe:bc:0f:41:73:
94:75:d7:c6:aa:02:3a:fb:53:95:6c:51:85:03:83:
cc:70:57:c2:66:06:ff:d7:0d:01:de:24:fb:be:d6:
f0:38:1c:1d:b3:b1:b8:f8:66:97:54:cc:8e:9d:9a:
8c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8D:43:2E:6E:44:8A:D2:07:9C:15:00:42:1C:16:0E:2C:40:21:3E
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:36:3b:73:d2:09:97:cb:54:79:42:9e:1d:0f:2a:32:12:74:
e8:70:94:0b:a6:09:c1:1d:88:c6:5f:70:33:d7:fc:3b:3f:3f:
07:2d:cb:09:62:0b:61:dc:16:01:78:82:ed:07:b3:ad:1c:68:
73:df:bb:bf:8f:67:d5:10:cd:f4:79:b0:2d:91:b6:29:9a:f7:
7f:25:db:d8:32:eb:f6:cd:30:2c:6e:d3:e2:a8:44:38:ce:8b:
16:58:04:19:86:0e:05:e2:a4:0a:de:c3:15:f3:33:95:90:fb:
ba:8b:58:58:fa:60:b7:c5:b1:c4:f5:62:01:a2:90:af:f1:73:
0b:26:1e:4f:d5:25:9a:a3:6d:98:24:6d:dd:41:2e:d0:1c:67:
b3:52:99:a8:a0:84:ff:bb:5a:47:b3:d0:3f:f5:f7:fa:cd:af:
1f:ca:8a:51:87:ae:73:75:23:6b:8e:49:8c:1e:40:60:28:a6:
ed:e5:89:54:48:34:9e:e8:e9:f9:91:bd:64:32:e5:05:f3:e2:
02:59:f4:d7:37:dc:dc:76:58:4d:f0:dc:ed:f6:d5:d8:7c:aa:
e1:2a:38:d3:74:ce:45:3c:10:cc:b4:9c:31:94:e8:99:26:f0:
ab:5e:62:32:0e:15:61:a6:4d:d0:58:01:24:f3:b8:74:ae:6f:
80:da:1a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 13:24:45 2026 by rpki-client