Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
File: bMacPXAwzsGfj7ZuVDveZVlXCKI.mft (raw, json)
Hash identifier: 9bAxklPnPk/umpY4FhmhDqS3oGC5/4UDaJCPe3+LYt4=
Subject key identifier: FD:DE:C4:A9:01:CB:1C:4F:3F:64:6D:76:01:AE:28:A7:7B:31:F2:E6
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 01A03D4D313069C9E263D74F3AAE3F1975D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
Manifest number: 0B20
Signing time: Wed 26 Aug 2026 09:01:04 +0000
Manifest this update: Wed 26 Aug 2026 09:01:04 +0000
Manifest next update: Thu 27 Aug 2026 09:01:04 +0000
Files and hashes: 1: 1-rh5cQILjFfbLEs23MyIQmyJVyQ.roa (hash: cy/25YJD+0xNPHLeegsn8NowYywyoOpwQdx6/S7h4V0=)
2: LFDAvqd5xb9FRRe2yM-W79ogPLY.roa (hash: kgpiAD7VzIWymrLBR33coCOY8GXE7q973+jeIW77I1A=)
3: MtkMFeCwdMHY3TrtSqt90faUdo0.roa (hash: l0UeOKu9JpK0NnRYAC+4ynQckxHuoZ5fWDKY6dAiR4g=)
4: bMacPXAwzsGfj7ZuVDveZVlXCKI.crl (hash: okxW4xUOnQ4IsRnZ4DX4iLbkpLhzqoHq7HTv4wp7MDs=)
5: kS6P0-FBRVMuVdEEV02vD8TDiUc.asa (hash: Xqodnxc0/+vizlkl7MttnkM6knf6ZdTRjpzArx0o9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:4d:31:30:69:c9:e2:63:d7:4f:3a:ae:3f:19:75:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Aug 26 09:01:04 2026 GMT
Not After : Aug 27 09:01:04 2026 GMT
Subject: CN=fddec4a901cb1c4f3f646d7601ae28a77b31f2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:a9:09:78:f9:83:74:5b:f1:8a:24:b2:52:
fb:95:b5:9b:5a:8a:44:33:02:f9:d2:84:86:70:7c:
23:14:50:36:79:35:58:05:84:fa:35:c1:0a:7f:2e:
7b:8b:c2:3b:4a:0a:d1:97:2c:86:f5:9f:bd:a2:76:
19:90:2e:a8:fe:e9:c7:b1:df:b8:19:fd:de:5b:03:
8d:89:5f:71:d4:bc:0a:91:0b:2c:e5:67:8b:28:77:
45:0c:74:a7:ac:0a:e9:88:4d:a3:7d:b5:ed:a3:81:
28:72:82:ef:e1:0f:b3:85:8a:f5:c4:02:04:22:e6:
4a:a6:95:14:97:cf:30:4a:69:b8:cd:b1:7b:ad:04:
58:45:72:5b:7e:c3:34:7e:5b:a3:c8:e5:5c:65:63:
34:4a:ce:c4:6e:7a:61:0b:ab:2a:c9:5e:93:dd:d0:
29:56:16:1f:73:8a:53:05:1d:9f:5a:d1:b7:c5:ce:
99:13:79:34:34:57:92:96:28:0f:cb:eb:20:5a:9f:
16:8f:9e:8f:71:a6:7b:b0:f6:4c:1d:6f:0e:2f:f2:
39:f6:3f:e6:eb:40:d6:4f:ba:01:a8:41:53:c1:4e:
ea:c8:5f:48:0e:2b:8e:2e:35:cb:4b:0b:b3:31:5f:
f1:12:8e:3a:34:55:de:0c:af:43:14:b6:aa:26:8f:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DE:C4:A9:01:CB:1C:4F:3F:64:6D:76:01:AE:28:A7:7B:31:F2:E6
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:56:9a:c7:46:4e:60:36:a9:23:0e:1e:4f:56:eb:a9:5d:d7:
7f:0a:23:22:f0:1c:ae:b4:87:a3:c4:da:79:78:1a:34:aa:d0:
4f:3d:63:7b:63:d6:6d:cb:05:8c:67:11:b6:44:0b:b9:42:dd:
c8:44:8e:a7:cc:bf:84:07:ee:58:b3:dc:50:0d:25:e7:80:0d:
68:8e:54:ba:5c:2f:f3:75:24:ff:d7:45:c1:0f:ba:93:e4:54:
b6:f9:49:30:f2:4d:e9:31:54:a9:0d:1c:5e:bc:d9:a0:3e:50:
aa:22:72:03:b9:7a:e1:df:d3:ed:99:d9:2f:b8:f7:72:51:7a:
c3:64:5d:f8:2e:ae:51:ea:50:de:5c:53:1a:b2:86:47:34:46:
d9:45:7a:24:7f:7a:e8:49:65:a0:45:09:44:1f:48:8d:d0:92:
b0:6b:f5:85:1b:e1:b1:07:88:9f:94:fe:0a:7a:6f:32:50:c7:
8f:66:34:3b:36:58:60:07:6d:63:55:20:a4:36:e4:89:76:c4:
fa:fb:c4:d5:47:9d:64:4d:37:24:28:41:bb:72:4e:ca:4a:ad:
66:a2:e4:d1:db:5c:cb:de:27:a7:6a:b6:55:31:77:cc:11:2b:
6b:56:f8:b4:d1:ea:40:f9:5d:d6:e4:12:03:84:a3:e6:f3:24:
33:b7:e1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:17:31 2026 by rpki-client