Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
File: m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft (raw, json)
Hash identifier: NGocuHfqCJxAr625m088jCAsg0QAdJJ0/DjH0ONLfXQ=
Subject key identifier: B6:6A:9B:FA:BC:DD:79:B9:9D:ED:95:B3:EF:F6:9C:E9:87:2C:19:0B
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial: 019F1377DBD1545443DA9DEC37CE2B556086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
Manifest number: 0DCA
Signing time: Mon 29 Jun 2026 13:00:49 +0000
Manifest this update: Mon 29 Jun 2026 13:00:49 +0000
Manifest next update: Tue 30 Jun 2026 13:00:49 +0000
Files and hashes: 1: YNGfrZvagg4O4FGkVhnBiiruLx0.roa (hash: /ltwcx7I+h2VdXqUCtGZD3WsmcEgqxtyYnfei2/3ZlQ=)
2: kVcl-lsZR6xyXsxO8aWh944dJv8.roa (hash: wO+8xB9lCvBU2gIRiYR9ejf9p/0a0RGT/tmuLIRs2LY=)
3: m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl (hash: YavYt+p6NtF2DLQy50giJffC5BCl2iCVtE1cQ1GOF94=)
4: oK8DgClRz_oA4VjYTOJycO25RE8.roa (hash: HL0prlO8v1UmrZWNdBDiYE7Jz5klWeZulY7cNTFYDKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:77:db:d1:54:54:43:da:9d:ec:37:ce:2b:55:60:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Validity
Not Before: Jun 29 13:00:49 2026 GMT
Not After : Jun 30 13:00:49 2026 GMT
Subject: CN=b66a9bfabcdd79b99ded95b3eff69ce9872c190b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0a:48:8b:e0:2a:43:86:8d:cf:45:3a:29:5f:
b6:29:07:cd:73:e7:3f:27:b5:30:61:b6:c9:a1:74:
06:44:d0:46:f8:ee:62:31:e8:e5:f4:b8:30:4c:bf:
cb:18:d7:06:bd:2d:a2:4f:5b:eb:b0:4c:e3:2a:63:
af:ea:04:bb:5e:7c:85:9f:69:bb:32:e7:c6:09:38:
03:30:4a:d6:33:16:1b:c6:04:7b:25:c1:77:2a:84:
75:e7:d7:8b:c5:5b:de:c0:e4:9b:d4:61:fd:20:1c:
8d:1d:b8:ef:94:41:92:9a:59:ff:ee:98:99:fc:9a:
9e:ea:cf:db:c3:06:c2:45:b5:61:b7:d0:54:fc:7b:
24:2d:f7:4b:cd:bc:0d:e8:e2:ac:5c:da:10:af:95:
4f:d0:95:6e:1d:c2:bc:ca:31:55:89:26:d3:76:10:
70:45:59:15:03:4b:f4:c6:98:ba:bd:bf:27:5d:13:
49:c8:a9:48:02:d7:2a:ae:7f:c7:a7:b7:e0:94:f1:
54:73:ca:ce:71:de:0b:72:c5:9e:47:80:9f:83:9c:
bc:e3:25:0a:06:8f:87:fe:37:4d:71:e2:1d:5b:97:
d3:2e:99:9d:dd:9a:06:7d:c0:b6:6d:b0:50:e1:08:
81:c7:b0:8a:52:be:db:fc:d1:37:36:f3:28:f5:ba:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6A:9B:FA:BC:DD:79:B9:9D:ED:95:B3:EF:F6:9C:E9:87:2C:19:0B
X509v3 Authority Key Identifier:
keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:18:c4:e1:9c:38:44:8f:a9:b4:03:87:e8:d4:58:73:8e:75:
fd:00:42:e0:40:c4:a0:b0:cc:77:de:9b:3b:9b:8b:33:a6:a6:
2d:c7:88:95:94:7c:95:3f:48:b5:f6:ca:56:47:3b:c2:93:b4:
2a:79:a5:8a:1f:67:00:7e:0d:c9:2b:7b:4c:48:0f:2f:0d:bd:
20:f2:02:0b:ea:9c:57:e2:61:29:1e:c4:40:f8:aa:16:f3:ee:
cc:ff:7b:ce:37:e3:12:02:67:f4:cd:bf:2f:2c:00:b6:fa:e6:
c5:ae:28:8c:55:40:74:5b:57:4a:e0:59:98:89:c6:07:de:01:
e5:f1:a9:8b:26:38:99:ec:71:34:a7:5e:40:41:7f:a4:62:ad:
71:d2:7b:cf:e7:d5:8c:c7:41:17:6b:ca:18:ba:e1:0b:12:89:
22:62:45:fa:22:8f:89:0f:1c:b6:2c:1c:e8:46:83:05:5d:e7:
46:ed:1c:0e:55:46:ca:82:98:cf:47:d1:92:7e:e1:33:71:48:
49:62:82:c0:18:a3:ca:ef:f2:11:ec:33:d0:e4:08:e0:9a:8d:
d7:83:f2:4d:4d:62:e6:f9:e1:94:fb:e3:f0:01:51:aa:ea:c1:
70:8e:bf:a8:8f:9f:68:c1:6e:4e:cc:5e:86:c1:5c:ef:f4:49:
45:e4:43:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 19:26:46 2026 by rpki-client