Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
File: Marcypb0SkVzktiQfGuWS-D8-SE.mft (raw, json)
Hash identifier: i+OkMuKOR2TL+aIMhOYGhjxa3319WzYsce682zZZPxI=
Subject key identifier: D4:47:E6:70:5A:92:8C:B1:17:BD:67:9F:8B:CD:65:31:AD:81:43:F2
Authority key identifier: 31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
Certificate issuer: /CN=31aadcca96f44a457392d8907c6b964be0fcf921
Certificate serial: 019D3865980B3691258277CBC340D418CFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
Manifest number: 0F86
Signing time: Sun 29 Mar 2026 07:01:15 +0000
Manifest this update: Sun 29 Mar 2026 07:01:15 +0000
Manifest next update: Mon 30 Mar 2026 07:01:15 +0000
Files and hashes: 1: 5YCiR0QrcWWKsMsGSeLa9ApB1lg.roa (hash: 8CnagmsDT7sVAnt0oL1gz0I3s/rO0bbV7JQNEmjxT0I=)
2: Marcypb0SkVzktiQfGuWS-D8-SE.crl (hash: h32JMWOGVEbyi67GRUP24vHJ1GYi7fFLfRjIUns+g/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:98:0b:36:91:25:82:77:cb:c3:40:d4:18:cf:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31aadcca96f44a457392d8907c6b964be0fcf921
Validity
Not Before: Mar 29 07:01:15 2026 GMT
Not After : Mar 30 07:01:15 2026 GMT
Subject: CN=d447e6705a928cb117bd679f8bcd6531ad8143f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:ec:31:77:64:e2:86:fd:8c:85:14:ca:83:
8d:17:74:2d:48:5c:90:f3:ce:de:f3:24:3e:75:d6:
f8:93:d9:9b:7a:21:6a:3e:e7:39:6a:0c:7e:73:08:
24:1c:aa:19:4c:1c:22:a1:b9:2a:59:e0:0f:48:26:
3f:53:10:45:55:e1:bc:96:01:c6:85:44:f2:82:5e:
d7:a8:94:79:c7:60:0a:51:38:ff:25:94:92:93:26:
b8:15:4d:93:a5:2f:65:db:15:74:ea:d1:f0:ce:b8:
0b:b4:ab:45:7b:b8:d6:43:0e:05:9e:2f:e6:ec:b0:
5f:f0:ee:c0:15:32:57:21:0e:4d:72:da:c1:9a:90:
0a:5c:43:24:79:07:6a:42:d3:98:1f:66:9b:7b:02:
eb:ea:10:95:2e:49:ab:68:ab:06:41:25:f9:cc:27:
df:d5:40:44:be:5b:b8:dd:f7:b0:32:25:84:e4:b1:
88:a8:0d:70:25:d5:e2:42:b0:8a:bc:3d:f0:dd:e4:
55:fb:66:66:22:75:3b:38:34:0e:90:5d:1a:92:32:
74:56:15:65:e7:fb:37:fd:2a:79:69:0f:ab:dd:6e:
b0:4c:4f:7a:a7:cc:92:c4:e4:fd:0f:f3:bc:ac:ab:
67:4d:f0:fe:d7:21:10:af:2e:dc:91:71:71:36:e9:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:47:E6:70:5A:92:8C:B1:17:BD:67:9F:8B:CD:65:31:AD:81:43:F2
X509v3 Authority Key Identifier:
keyid:31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:2b:15:87:11:e9:6f:b6:5d:31:53:01:a7:d1:51:0d:36:6a:
25:56:75:f3:73:c6:dc:bc:5c:18:f9:3b:1d:8f:8f:99:c0:be:
ba:f2:85:df:e2:49:d2:7b:9c:e0:40:72:e7:6e:d7:8e:c2:f3:
ca:27:ba:0d:85:9e:5e:c2:2f:8e:50:1b:f4:ba:71:dc:51:77:
45:31:b8:3d:e9:ad:14:ad:4a:94:a2:70:65:c4:40:87:c9:a8:
47:36:76:fb:a4:ff:ae:3d:76:8e:e0:2e:73:e7:a5:7d:48:88:
16:b2:5f:b7:a9:45:45:83:20:92:79:d3:2a:7b:e3:2c:a5:e9:
9b:95:f8:41:07:50:a5:f1:f3:a9:fa:a2:d6:c2:af:a9:e7:19:
72:9a:95:af:e7:b9:b8:69:b3:c2:bc:26:85:a6:6a:1f:64:78:
1b:e8:c9:60:75:3b:dd:1b:3f:82:f0:c8:b0:a1:a9:c7:40:44:
60:89:9b:ac:bb:fd:3c:dc:ff:68:66:92:7b:43:7a:42:9f:de:
48:f7:4e:87:8b:80:8d:09:46:86:df:c7:1f:ce:7a:bc:ae:a8:
c4:6e:dc:b3:53:f9:d3:74:e2:31:2f:13:bd:84:2f:99:25:3c:
95:ca:c7:76:6e:0f:6c:9d:35:e6:37:f3:52:f5:da:e5:9e:b2:
56:62:67:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZZgLNpElgnfLw0DUGM/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYWFkY2NhOTZmNDRhNDU3MzkyZDg5MDdjNmI5NjRiZTBm
Y2Y5MjEwHhcNMjYwMzI5MDcwMTE1WhcNMjYwMzMwMDcwMTE1WjAzMTEwLwYDVQQD
EyhkNDQ3ZTY3MDVhOTI4Y2IxMTdiZDY3OWY4YmNkNjUzMWFkODE0M2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRXsMXdk4ob9jIUUyoONF3QtSFyQ
887e8yQ+ddb4k9mbeiFqPuc5agx+cwgkHKoZTBwiobkqWeAPSCY/UxBFVeG8lgHG
hUTygl7XqJR5x2AKUTj/JZSSkya4FU2TpS9l2xV06tHwzrgLtKtFe7jWQw4Fni/m
7LBf8O7AFTJXIQ5NctrBmpAKXEMkeQdqQtOYH2abewLr6hCVLkmraKsGQSX5zCff
1UBEvlu43fewMiWE5LGIqA1wJdXiQrCKvD3w3eRV+2ZmInU7ODQOkF0akjJ0VhVl
5/s3/Sp5aQ+r3W6wTE96p8ySxOT9D/O8rKtnTfD+1yEQry7ckXFxNul9PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRH5nBakoyxF71nn4vNZTGtgUPyMB8GA1UdIwQY
MBaAFDGq3MqW9EpFc5LYkHxrlkvg/PkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82NjY3ODYtNTYxYy00YmQwLWE3YjAt
OGY3ZmQzZGMxNWZlLzEvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni82NjY3ODYtNTYxYy00YmQwLWE3YjAtOGY3ZmQzZGMxNWZl
LzEvTWFyY3lwYjBTa1Z6a3RpUWZHdVdTLUQ4LVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSsVhxHp
b7ZdMVMBp9FRDTZqJVZ183PG3LxcGPk7HY+PmcC+uvKF3+JJ0nuc4EBy527XjsLz
yie6DYWeXsIvjlAb9Lpx3FF3RTG4PemtFK1KlKJwZcRAh8moRzZ2+6T/rj12juAu
c+elfUiIFrJft6lFRYMgknnTKnvjLKXpm5X4QQdQpfHzqfqi1sKvqecZcpqVr+e5
uGmzwrwmhaZqH2R4G+jJYHU73Rs/gvDIsKGpx0BEYImbrLv9PNz/aGaSe0N6Qp/e
SPdOh4uAjQlGht/HH856vK6oxG7cs1P503TiMS8TvYQvmSU8lcrHdm4PbJ015jfz
UvXa5Z6yVmJnAg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:37 2026 by rpki-client