Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: cmnDvJLWrBoagNGvfSOVJxF77pxruWQDzERoXBGD8Ic=
Subject key identifier: CD:44:68:A6:A4:33:DB:AE:33:4F:FC:9E:75:2D:37:86:AE:61:E2:63
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 019D33E33432D8B4E9803B3477E109BD2A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 10DD
Signing time: Sat 28 Mar 2026 10:00:21 +0000
Manifest this update: Sat 28 Mar 2026 10:00:21 +0000
Manifest next update: Sun 29 Mar 2026 10:00:21 +0000
Files and hashes: 1: kJ6-t_FAgoe7HphTqXyXgseS7_A.roa (hash: nmaaXT8wxyUyQofH+9fMDVryZ1mgAUYzWspK2/2I9As=)
2: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: ZM3fRDzLdsYTWAXsmPVqXUq+ciqCKk5uBXCPo5lwxUE=)
3: uBycyFV3HFO3Kaf85-1Yby5F7cI.roa (hash: UjOmW8dergl068O1JptPgYMNCbZKAckDjyhoBH2ZRDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:34:32:d8:b4:e9:80:3b:34:77:e1:09:bd:2a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Mar 28 10:00:21 2026 GMT
Not After : Mar 29 10:00:21 2026 GMT
Subject: CN=cd4468a6a433dbae334ffc9e752d3786ae61e263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:af:70:a3:3f:81:ff:96:d9:06:7f:9a:2c:
09:a8:90:65:27:e3:17:d6:57:10:95:a6:f2:95:d3:
41:53:a8:ab:01:85:b4:56:36:fc:a6:1f:82:ca:de:
b4:fd:a7:d0:3d:2f:f6:e9:d3:74:39:c2:cb:c1:e5:
83:af:04:be:8e:59:80:94:5c:8c:e2:df:d4:8b:af:
ee:35:90:c5:77:39:1d:b5:7d:a4:f8:3e:48:c8:b6:
32:c5:80:52:fb:01:bf:b6:be:2c:61:c2:75:b2:b5:
4f:36:d8:73:9c:89:7b:24:0f:2f:15:cc:a6:7c:e7:
ff:7b:9b:a6:5a:2d:ba:19:0c:e1:cb:28:0d:89:2c:
a9:8f:8f:13:ae:d7:d4:3f:34:bd:c1:3e:8f:bb:8c:
32:46:ad:7b:70:05:61:6d:e3:48:24:34:aa:dd:4f:
ee:ff:07:19:28:1e:21:81:ec:63:1c:f7:7b:ef:73:
83:50:d4:18:fd:8f:a2:0c:85:1e:ad:1f:37:50:82:
46:a3:ba:5e:a9:64:a7:29:c1:f2:90:8a:07:e3:00:
a3:cf:9a:b9:b6:96:5d:77:1d:ea:1a:64:2d:42:dd:
32:d2:bb:c7:4d:95:79:d2:3b:69:a0:26:d1:27:8b:
94:7a:39:7e:0e:71:e1:98:c8:14:77:3e:dd:82:95:
9b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:44:68:A6:A4:33:DB:AE:33:4F:FC:9E:75:2D:37:86:AE:61:E2:63
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:48:13:af:64:9d:1f:89:e9:64:9e:62:82:9d:83:3c:42:de:
32:49:a1:8c:cf:0c:c8:61:19:d8:29:1a:4a:65:38:8e:9f:8e:
32:27:ab:aa:e0:91:91:d9:eb:7e:21:f9:e3:7e:7e:d4:f0:91:
d0:8b:c1:0c:08:cb:a7:28:f7:5d:a9:86:5a:60:28:2c:56:4f:
28:03:b2:ed:7a:9b:8a:d1:5f:39:0b:d5:3c:84:4a:a0:91:af:
59:75:11:4a:4b:8a:a2:fb:9c:7b:03:48:ef:3d:14:d6:0f:be:
06:c2:04:78:93:81:1c:c6:4a:65:35:02:ae:25:29:1f:e1:5c:
7f:09:72:64:c7:f4:19:da:4b:f6:1f:91:4d:7f:64:bb:d3:0d:
9d:77:4e:cd:e5:6d:70:33:1d:15:3b:07:9d:a0:73:e3:8c:e9:
78:80:3e:3f:73:b7:4e:0e:f0:40:b9:b4:2f:1f:9f:7f:b6:ec:
0b:c2:b3:55:a3:d1:f1:a4:67:48:59:1f:33:47:a0:4c:7a:00:
0a:02:60:29:6e:89:5c:88:ea:44:02:ec:c4:5b:c2:26:7b:eb:
32:fb:28:03:fb:b2:4a:f2:da:49:e1:e7:2a:63:cd:1b:2f:1a:
e5:28:d7:d1:06:da:6d:16:88:08:03:c8:3e:c8:49:f5:bc:cf:
33:fc:92:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0z4zQy2LTpgDs0d+EJvSpVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYmM0MjM5YzljYjk4MWYxOWE0OTVlNjMzZDNiZWM4ODlm
Y2JlODkwHhcNMjYwMzI4MTAwMDIxWhcNMjYwMzI5MTAwMDIxWjAzMTEwLwYDVQQD
EyhjZDQ0NjhhNmE0MzNkYmFlMzM0ZmZjOWU3NTJkMzc4NmFlNjFlMjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucyvcKM/gf+W2QZ/miwJqJBlJ+MX
1lcQlabyldNBU6irAYW0Vjb8ph+Cyt60/afQPS/26dN0OcLLweWDrwS+jlmAlFyM
4t/Ui6/uNZDFdzkdtX2k+D5IyLYyxYBS+wG/tr4sYcJ1srVPNthznIl7JA8vFcym
fOf/e5umWi26GQzhyygNiSypj48TrtfUPzS9wT6Pu4wyRq17cAVhbeNIJDSq3U/u
/wcZKB4hgexjHPd773ODUNQY/Y+iDIUerR83UIJGo7peqWSnKcHykIoH4wCjz5q5
tpZddx3qGmQtQt0y0rvHTZV50jtpoCbRJ4uUejl+DnHhmMgUdz7dgpWb5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1EaKakM9uuM0/8nnUtN4auYeJjMB8GA1UdIwQY
MBaAFJu8QjnJy5gfGaSV5jPTvsiJ/L6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmIt
MDFhYTA1NmIxZjZmLzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmItMDFhYTA1NmIxZjZm
LzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEgTr2Sd
H4npZJ5igp2DPELeMkmhjM8MyGEZ2CkaSmU4jp+OMierquCRkdnrfiH5435+1PCR
0IvBDAjLpyj3XamGWmAoLFZPKAOy7XqbitFfOQvVPIRKoJGvWXURSkuKovucewNI
7z0U1g++BsIEeJOBHMZKZTUCriUpH+FcfwlyZMf0GdpL9h+RTX9ku9MNnXdOzeVt
cDMdFTsHnaBz44zpeIA+P3O3Tg7wQLm0Lx+ff7bsC8KzVaPR8aRnSFkfM0egTHoA
CgJgKW6JXIjqRALsxFvCJnvrMvsoA/uySvLaSeHnKmPNGy8a5SjX0QbabRaICAPI
PshJ9bzPM/ySkA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 20:11:11 2026 by rpki-client