Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
File: m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft (raw, json)
Hash identifier: 3LaSxARMcPwD2SVcmlGrRVGqI96dkay0F8ASRykijEg=
Subject key identifier: 3F:01:5D:E1:0C:3D:3C:51:75:27:29:8F:87:71:AD:C0:BE:DC:BB:EC
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial: 019D3A53F2C62D81C94C9381EF10161995BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
Manifest number: 0CD5
Signing time: Sun 29 Mar 2026 16:01:13 +0000
Manifest this update: Sun 29 Mar 2026 16:01:13 +0000
Manifest next update: Mon 30 Mar 2026 16:01:13 +0000
Files and hashes: 1: YNGfrZvagg4O4FGkVhnBiiruLx0.roa (hash: /ltwcx7I+h2VdXqUCtGZD3WsmcEgqxtyYnfei2/3ZlQ=)
2: kVcl-lsZR6xyXsxO8aWh944dJv8.roa (hash: wO+8xB9lCvBU2gIRiYR9ejf9p/0a0RGT/tmuLIRs2LY=)
3: m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl (hash: Luv2CaOvJO6F8XvHqD9Sv33wzxt868hSSVNq5utGHao=)
4: oK8DgClRz_oA4VjYTOJycO25RE8.roa (hash: HL0prlO8v1UmrZWNdBDiYE7Jz5klWeZulY7cNTFYDKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:f2:c6:2d:81:c9:4c:93:81:ef:10:16:19:95:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Validity
Not Before: Mar 29 16:01:13 2026 GMT
Not After : Mar 30 16:01:13 2026 GMT
Subject: CN=3f015de10c3d3c517527298f8771adc0bedcbbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:52:af:76:48:4b:91:33:32:c3:de:7d:82:
c0:0e:17:85:1c:dc:1c:f3:1f:34:e0:18:fe:82:9b:
63:5e:87:0e:e8:e0:b0:dd:a8:f9:8b:72:b1:87:92:
13:48:f6:5d:36:44:b4:99:1d:25:af:ba:75:66:da:
2f:4a:56:b2:47:64:7e:88:4d:f2:b5:12:52:a2:f2:
48:6c:b5:91:a3:96:3f:0b:45:8f:94:29:a2:ee:53:
4d:31:23:a2:5f:48:31:47:ae:b8:e6:74:a1:4b:aa:
d3:dc:27:21:70:c6:27:b2:4a:c5:ca:cd:9a:84:d4:
c6:85:ef:88:e9:06:3d:ac:e5:07:6d:f8:dd:4f:8a:
5e:a4:f4:85:2e:a7:89:f4:b7:c4:7b:4b:5a:c7:45:
00:c9:66:39:e3:b0:4f:4b:d8:4d:e2:2e:9a:4f:b5:
f9:69:ae:4d:92:fd:b1:94:91:40:88:05:2e:6c:d1:
d1:88:1c:72:0a:e2:f6:08:cb:d6:44:c4:7b:16:0a:
76:f4:d8:9f:f5:36:5f:9f:b2:a5:f8:99:3c:6e:7e:
be:ac:73:bc:0f:32:50:fb:d5:2a:b0:6f:cb:79:7f:
4c:a7:68:72:a2:70:0a:5b:91:fd:37:fc:42:fe:fe:
71:9e:e8:b0:1b:b5:47:7d:87:78:dd:ee:b8:6b:9e:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:01:5D:E1:0C:3D:3C:51:75:27:29:8F:87:71:AD:C0:BE:DC:BB:EC
X509v3 Authority Key Identifier:
keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:eb:aa:78:6c:34:88:12:80:78:97:8d:08:67:83:50:0f:0d:
d1:59:b3:e9:a5:6e:48:8c:4d:22:25:85:d7:7e:47:6c:d0:6c:
80:40:19:68:06:ca:98:ce:73:09:cb:68:b8:f1:d4:76:12:67:
70:55:1e:b3:0e:b8:fb:ed:1c:15:4a:99:79:d5:3b:42:1d:62:
14:ea:a4:9b:2e:70:80:f2:e3:94:46:15:18:cc:a6:1b:e9:6f:
eb:f4:95:5f:77:03:c3:28:11:9b:21:21:a3:fc:93:03:88:2c:
e0:12:f1:33:ac:cf:e6:43:7a:3e:d6:4a:f0:cb:f8:4f:b1:13:
ff:a3:78:15:6d:84:5b:55:e2:b3:a1:d0:61:c3:62:39:79:a0:
9d:63:e8:19:32:2b:21:b8:a4:14:cb:4b:25:f2:52:7e:58:8c:
3e:ec:68:a8:fa:dd:8e:5c:a0:bf:b2:ba:9a:34:0e:9e:a9:00:
3b:e6:07:05:67:a5:ba:c5:3a:5f:e2:38:a7:05:66:26:ee:ba:
1e:b6:b4:c7:4d:88:24:63:84:cd:f6:8a:e3:9e:f0:02:fb:9b:
0f:63:6e:6b:e0:fa:bf:2d:83:55:6c:e7:d0:4d:e9:07:b0:87:
b3:db:f9:a9:0c:2e:3b:f6:d0:8a:55:ff:a0:47:6d:a5:64:07:
ef:f9:d1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:00 2026 by rpki-client