Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: nUTmeuZdz3l/v3SU1NEoAOarujEe2dSvmDNl2kDaF5s=
Subject key identifier: CB:4D:42:94:EC:B6:EA:84:4E:E5:37:60:BD:F1:FD:46:36:5D:D5:F8
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 01A0024AE2D48577CB4425BE1A61AE3825D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 1251
Signing time: Fri 14 Aug 2026 22:00:57 +0000
Manifest this update: Fri 14 Aug 2026 22:00:57 +0000
Manifest next update: Sat 15 Aug 2026 22:00:57 +0000
Files and hashes: 1: kJ6-t_FAgoe7HphTqXyXgseS7_A.roa (hash: nmaaXT8wxyUyQofH+9fMDVryZ1mgAUYzWspK2/2I9As=)
2: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: ZsSN5wl3NQFZRLcRqqGPw5aue2b/a1iKk9MpW6x7n0A=)
3: uBycyFV3HFO3Kaf85-1Yby5F7cI.roa (hash: UjOmW8dergl068O1JptPgYMNCbZKAckDjyhoBH2ZRDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:e2:d4:85:77:cb:44:25:be:1a:61:ae:38:25:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Aug 14 22:00:57 2026 GMT
Not After : Aug 15 22:00:57 2026 GMT
Subject: CN=cb4d4294ecb6ea844ee53760bdf1fd46365dd5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:a1:d4:5f:36:79:aa:b0:9d:af:e0:79:c0:
76:80:5a:a7:b9:ac:f8:b6:f4:55:a7:97:d5:b6:10:
e0:71:fa:44:be:f2:a4:d9:8a:e3:50:27:12:b5:dc:
26:71:61:0a:bf:4f:46:3d:24:ea:e5:03:4f:72:45:
36:c2:6f:a6:fc:fb:21:e2:f5:2c:4a:1c:af:78:82:
29:0d:54:10:e3:78:9c:42:66:f3:05:60:a0:00:65:
c4:66:76:f0:b2:bf:4c:ce:1f:ff:a8:d7:9f:d6:f4:
99:d6:49:43:b5:a0:23:82:01:5c:a9:e1:38:33:82:
4f:21:ea:6c:82:77:06:0e:a3:f2:da:8f:e1:1a:18:
9f:2a:c5:f0:bf:99:1d:b9:97:ce:a0:a2:f8:bd:0e:
d3:98:be:83:9c:9c:af:cf:e3:f3:e7:b6:60:c9:5c:
31:83:17:bc:9a:3f:c0:4c:8c:5d:3d:33:fb:89:d2:
14:3f:a4:ce:3d:44:c4:1a:7a:ad:6a:fd:8c:c2:af:
a0:9a:96:69:87:29:52:51:00:02:54:83:b6:cc:4d:
be:d1:74:56:32:12:58:2f:51:87:6f:c7:21:f4:b6:
e2:95:e5:42:b5:e5:e6:77:60:9d:9d:ef:31:3d:6d:
84:2d:46:29:24:0d:a5:b6:cf:5c:47:bf:c8:94:71:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4D:42:94:EC:B6:EA:84:4E:E5:37:60:BD:F1:FD:46:36:5D:D5:F8
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:88:04:7f:47:ce:b9:e7:30:18:5a:f9:97:33:1c:c6:1d:a8:
66:8d:89:12:88:a1:0f:15:00:8e:b1:f6:2b:b6:13:f9:12:f9:
53:29:c3:23:b3:9e:ee:f5:ba:92:b9:08:1d:46:4e:78:92:4d:
89:89:01:5a:10:fd:09:50:24:0e:7d:a6:74:e9:02:90:60:ba:
e2:ab:6b:e7:e0:25:85:cb:02:2a:f1:99:ce:36:2e:b0:76:a1:
41:63:f5:f4:d1:ff:de:8f:67:96:ae:c8:4a:29:7a:6b:59:62:
32:06:d6:fd:8b:41:d3:0c:99:9b:7c:cb:25:be:02:b4:28:39:
22:54:f7:16:33:50:03:55:39:6b:0e:77:55:58:51:e0:a6:af:
d8:2c:69:1d:32:c1:ca:89:c9:27:47:e8:1c:50:e5:bc:5d:26:
b4:6b:44:c3:9c:14:20:d9:71:ed:7c:ef:1b:83:39:91:34:dd:
1b:26:64:00:25:1a:94:b8:ed:c0:e9:1d:1a:cf:5f:bb:0d:77:
10:e1:27:a2:d4:14:55:c2:0e:25:bc:fe:ab:8a:bd:46:b9:76:
90:aa:17:6a:e5:e2:7b:06:74:83:07:31:b9:f1:e3:f8:e8:01:
1d:be:56:ff:b8:e5:6a:41:2f:a5:9c:e2:03:06:99:0c:d0:7f:
38:ba:e3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:12:06 2026 by rpki-client