Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
File: bMacPXAwzsGfj7ZuVDveZVlXCKI.mft (raw, json)
Hash identifier: IUxebUu1QGVcpd4I+uhrEZB8YlrmqvXEFQVkKjwxf5g=
Subject key identifier: 7F:33:60:43:71:EA:0F:40:E8:46:90:5E:6B:F8:E4:AA:A9:4B:AF:15
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 019D37532521F6E9DB3C8ED09C77A09F2A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
Manifest number: 098F
Signing time: Sun 29 Mar 2026 02:01:28 +0000
Manifest this update: Sun 29 Mar 2026 02:01:28 +0000
Manifest next update: Mon 30 Mar 2026 02:01:28 +0000
Files and hashes: 1: 1-rh5cQILjFfbLEs23MyIQmyJVyQ.roa (hash: cy/25YJD+0xNPHLeegsn8NowYywyoOpwQdx6/S7h4V0=)
2: EKOknUpftnx0Q7axH9neRzx4NSA.roa (hash: n+4PMTNbAHk9TtNsZ242IVt0Y1GiuJ2mxezao/gIwZc=)
3: _A6QNXxL5haXYGnIWjTWFpFJgfw.roa (hash: wBYoGVK+AJbrNsBKUYrwucKaBV6UAGbmCu6gl1XSKOY=)
4: bMacPXAwzsGfj7ZuVDveZVlXCKI.crl (hash: Yq6nkvzVodeHJUI0rNkHzOQPU/Y83H4zDhTs/71Q9xA=)
5: kS6P0-FBRVMuVdEEV02vD8TDiUc.asa (hash: Xqodnxc0/+vizlkl7MttnkM6knf6ZdTRjpzArx0o9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:25:21:f6:e9:db:3c:8e:d0:9c:77:a0:9f:2a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Mar 29 02:01:28 2026 GMT
Not After : Mar 30 02:01:28 2026 GMT
Subject: CN=7f33604371ea0f40e846905e6bf8e4aaa94baf15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:34:01:9c:ec:3b:22:a0:f1:a1:a7:15:36:
7b:98:1c:76:39:96:52:84:80:97:11:d2:ab:42:a0:
57:c6:9d:42:1b:25:d9:70:a5:a9:4e:b0:3c:f4:3d:
73:98:fd:51:34:22:d7:e9:a8:dc:d7:12:d5:32:76:
bf:5a:84:ef:d8:9f:1b:65:1f:fd:b3:ef:3e:37:d9:
1f:c7:38:33:cf:85:20:d0:cb:33:9a:79:42:5f:a8:
76:b9:5b:f2:fb:66:c1:c6:0d:c1:e8:82:5d:85:39:
8f:60:30:1c:3f:93:f0:97:72:96:34:cd:c1:5f:3f:
83:80:d5:e8:16:f5:0d:5e:c1:fc:2a:97:22:b2:f5:
02:6b:9a:0c:2d:62:3a:d4:a5:b7:cb:85:af:12:7e:
f1:8d:5d:ed:8c:57:49:4e:f1:fe:b6:62:c1:a9:6a:
2d:58:70:b3:26:05:07:db:49:99:49:5a:32:0d:44:
db:1c:60:54:60:28:dd:0b:8e:68:d8:69:a5:79:88:
84:82:33:6f:9f:fe:d4:c8:b7:45:ee:0f:47:8c:b0:
c5:2e:78:80:5f:63:b0:86:f8:be:ba:fb:a6:48:9e:
aa:52:82:7b:90:d9:1d:6a:d2:6e:ab:1c:97:0c:05:
eb:4e:eb:22:00:6b:ca:11:09:b2:f9:71:f9:f0:7e:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:33:60:43:71:EA:0F:40:E8:46:90:5E:6B:F8:E4:AA:A9:4B:AF:15
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a5:48:23:18:72:a1:99:b1:ff:56:16:41:84:64:2a:cd:f0:
dc:db:f8:67:99:f4:c0:8f:a2:ec:04:0e:4f:1e:9d:cb:88:c3:
34:98:5f:46:26:13:ae:4d:30:39:87:3d:31:3e:da:02:bc:5b:
b0:74:37:fd:43:9b:6d:13:48:66:44:39:2b:4d:50:34:15:54:
c8:e9:bf:dd:55:06:8b:67:db:2a:92:be:d2:2a:0d:f2:6c:40:
11:94:02:80:02:16:ef:8d:64:7e:06:81:d2:1f:17:b5:d8:94:
f2:9a:57:28:3c:9c:c5:7c:16:1a:5d:b1:41:1a:f4:d8:61:67:
23:a5:98:ac:e5:fc:3b:26:b1:33:41:14:3b:12:19:17:22:d9:
72:ed:63:ed:6d:c9:35:62:61:4f:33:4c:38:51:81:7a:d4:ca:
30:68:aa:74:de:e0:11:81:5d:6b:33:6b:d3:55:1f:3d:d7:1a:
8c:7e:81:fb:5e:23:2e:4e:82:98:41:aa:9f:3b:c9:02:da:26:
21:ec:8a:ca:10:1d:74:d1:01:db:ac:2b:a3:1c:9c:c5:bc:47:
11:4c:56:d8:81:e1:d9:28:7d:30:3a:41:7e:23:d2:05:b1:2a:
70:58:b9:30:03:6e:74:9d:27:a6:2d:9d:c5:6c:f6:55:0e:db:
c0:95:4c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:07 2026 by rpki-client