Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: Vo/F2ClgWuJWbUu8KEvGK14UjVH5QEk85zKciZYq7Wc=
Subject key identifier: C9:CD:84:85:A1:30:40:40:E1:F0:37:80:B3:21:19:6D:75:08:18:65
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 019CF384926E209EB08D218E0ED2BCDD795E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 1495
Signing time: Sun 15 Mar 2026 22:01:17 +0000
Manifest this update: Sun 15 Mar 2026 22:01:17 +0000
Manifest next update: Mon 16 Mar 2026 22:01:17 +0000
Files and hashes: 1: 49TpwXNTbP9jREpz2sa2Jtt7mT4.roa (hash: 29rndF3r0S7bzK9ai7WqeiKlzm9ig1QMwR9Nz9BHg9o=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: 88/RPwkbNc+JWxgkKcES9zJVBh9+GctK6dSMI6X2azU=)
3: dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa (hash: GnpPZWGTVcUqisrQyyHLCMNBiEUZ8MM+stWTYBQynzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:84:92:6e:20:9e:b0:8d:21:8e:0e:d2:bc:dd:79:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Mar 15 22:01:17 2026 GMT
Not After : Mar 16 22:01:17 2026 GMT
Subject: CN=c9cd8485a1304040e1f03780b321196d75081865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:76:ee:71:9a:ee:a0:8b:7f:0f:14:e9:54:
a0:ca:84:44:48:36:a0:8b:af:ed:bd:c4:e8:e0:1b:
94:ce:05:cb:b9:bb:83:d6:b1:95:95:0e:ec:f0:29:
f6:87:82:70:37:0f:32:5f:c9:06:5c:0a:35:e3:1f:
82:4b:cf:22:73:a7:39:db:d2:bb:b5:b2:12:ca:26:
43:1c:92:9f:87:5a:bf:f4:f7:27:e0:18:cf:53:22:
e1:ba:30:6e:51:0a:8a:58:d3:68:f6:d5:72:7e:49:
24:df:19:b7:6d:4c:fb:ea:3a:97:2f:c9:a8:ba:f6:
ca:ee:06:13:8b:0d:1a:25:4e:6c:89:c3:8b:f4:f7:
ae:9e:af:78:c5:c1:b8:0a:15:e1:91:aa:b2:ee:fc:
2d:1e:43:7c:d7:5d:4e:07:e0:83:27:2b:cf:f8:bc:
71:4e:81:dc:f9:22:82:40:c6:31:c1:92:d0:f0:f4:
e9:ac:2d:23:94:d8:47:bc:8c:8b:82:08:89:e6:b7:
67:6a:a8:8b:78:72:9a:00:a2:87:fb:88:5c:67:31:
13:10:34:bd:56:86:ec:fa:77:18:7c:e8:8f:93:1a:
f1:ab:bf:a6:1e:46:6b:82:da:21:0d:30:53:81:ec:
c3:85:14:85:89:fd:81:2d:56:df:36:6d:64:41:8f:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CD:84:85:A1:30:40:40:E1:F0:37:80:B3:21:19:6D:75:08:18:65
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:72:f0:2d:55:b7:9d:12:48:19:ec:aa:8e:31:9e:cd:db:49:
49:62:43:06:4f:0a:9d:97:79:13:af:4b:7f:7f:70:67:ff:b9:
94:c4:48:fa:e9:37:15:14:3d:a9:dc:9d:8a:d1:bc:01:38:01:
78:c5:b2:cf:b8:1a:8d:6b:35:2c:21:a4:4a:e6:64:b2:d1:6c:
3d:46:26:9b:45:92:e2:b0:1c:26:62:cb:7f:23:94:98:5d:c2:
8c:fd:a1:93:13:99:a4:82:63:d9:26:03:e1:f8:5e:d6:c2:9e:
b5:01:7f:c6:b7:80:ad:bf:ed:0a:76:ca:03:c0:9d:a0:ee:bf:
14:15:83:4e:d0:e5:80:a8:37:4d:6e:61:e4:73:bf:f0:df:a8:
06:74:4e:a2:04:bd:17:6c:46:43:1b:f6:6d:e8:ee:a2:8c:22:
55:8e:6a:f0:21:45:16:7c:b9:48:be:17:ac:d1:a7:94:80:db:
bf:aa:f8:77:15:e2:56:3d:f7:24:62:e5:68:b6:48:1d:51:56:
8e:34:98:fe:58:45:d0:89:38:8f:80:bb:16:8d:87:43:5a:7a:
e0:26:4f:15:c2:11:00:c6:5b:87:ff:6d:c3:3c:89:25:9a:9f:
c4:af:10:7e:dc:53:2a:12:78:e4:a2:93:a9:fe:6e:2c:68:c8:
68:5c:99:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzzhJJuIJ6wjSGODtK83XleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYzZiYmFmNDA5ZjVmZDZkNzA5YzRkN2QyNDM0NGEyOTJh
M2NhYTUwHhcNMjYwMzE1MjIwMTE3WhcNMjYwMzE2MjIwMTE3WjAzMTEwLwYDVQQD
EyhjOWNkODQ4NWExMzA0MDQwZTFmMDM3ODBiMzIxMTk2ZDc1MDgxODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLh27nGa7qCLfw8U6VSgyoRESDag
i6/tvcTo4BuUzgXLubuD1rGVlQ7s8Cn2h4JwNw8yX8kGXAo14x+CS88ic6c529K7
tbISyiZDHJKfh1q/9Pcn4BjPUyLhujBuUQqKWNNo9tVyfkkk3xm3bUz76jqXL8mo
uvbK7gYTiw0aJU5sicOL9Peunq94xcG4ChXhkaqy7vwtHkN8111OB+CDJyvP+Lxx
ToHc+SKCQMYxwZLQ8PTprC0jlNhHvIyLggiJ5rdnaqiLeHKaAKKH+4hcZzETEDS9
Vobs+ncYfOiPkxrxq7+mHkZrgtohDTBTgezDhRSFif2BLVbfNm1kQY+RlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnNhIWhMEBA4fA3gLMhGW11CBhlMB8GA1UdIwQY
MBaAFDHGu69An1/W1wnE19JDRKKSo8qlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMt
NDFjM2NmOTA4ZTk3LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMtNDFjM2NmOTA4ZTk3
LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHLwLVW3
nRJIGeyqjjGezdtJSWJDBk8KnZd5E69Lf39wZ/+5lMRI+uk3FRQ9qdyditG8ATgB
eMWyz7gajWs1LCGkSuZkstFsPUYmm0WS4rAcJmLLfyOUmF3CjP2hkxOZpIJj2SYD
4fhe1sKetQF/xreArb/tCnbKA8CdoO6/FBWDTtDlgKg3TW5h5HO/8N+oBnROogS9
F2xGQxv2bejuoowiVY5q8CFFFny5SL4XrNGnlIDbv6r4dxXiVj33JGLlaLZIHVFW
jjSY/lhF0Ik4j4C7Fo2HQ1p64CZPFcIRAMZbh/9twzyJJZqfxK8QftxTKhJ45KKT
qf5uLGjIaFyZxA==
-----END CERTIFICATE-----
Generated at Mon Mar 16 03:22:14 2026 by rpki-client