Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: Xcxb2TxpubcdI1tG1JuLwVyAjlPUv+lknKO2fQV0JhM=
Subject key identifier: 42:49:D0:41:31:39:62:E1:91:77:FF:88:3D:2D:8D:AE:05:BC:67:2B
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 019DDD3196239C7C568958CFFDAD8A860C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 150E
Signing time: Thu 30 Apr 2026 07:01:47 +0000
Manifest this update: Thu 30 Apr 2026 07:01:47 +0000
Manifest next update: Fri 01 May 2026 07:01:47 +0000
Files and hashes: 1: 49TpwXNTbP9jREpz2sa2Jtt7mT4.roa (hash: 29rndF3r0S7bzK9ai7WqeiKlzm9ig1QMwR9Nz9BHg9o=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: 3uua99K4uX+JOU647lIth0wkHmGtN5/zB0CthpKknl4=)
3: dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa (hash: GnpPZWGTVcUqisrQyyHLCMNBiEUZ8MM+stWTYBQynzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:31:96:23:9c:7c:56:89:58:cf:fd:ad:8a:86:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Apr 30 07:01:47 2026 GMT
Not After : May 1 07:01:47 2026 GMT
Subject: CN=4249d041313962e19177ff883d2d8dae05bc672b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2e:b0:2b:2f:a6:15:03:fb:e0:72:de:3a:a7:
f1:4a:a2:b1:2d:9e:e3:94:01:05:1f:fd:74:3e:d7:
63:71:60:00:f1:0f:81:15:6d:27:2a:f3:9e:86:34:
f4:8e:42:02:f3:79:a9:9b:a7:5f:31:55:1e:88:29:
10:c4:cd:c8:fc:21:fa:65:b0:6a:22:18:6f:2e:fe:
74:61:06:53:d3:84:21:6e:34:31:68:e6:38:fd:9d:
63:69:ae:16:0e:c2:11:4a:8a:d6:3d:39:10:b2:4e:
7b:8d:a5:01:df:ad:4f:ec:ae:ed:a9:1c:85:4a:1b:
99:21:b9:fe:b6:be:3e:f3:17:fb:e2:06:b7:e4:b2:
50:81:19:29:8c:0b:78:75:c8:70:da:ee:dc:81:2b:
41:91:96:af:bd:d7:47:9a:98:ce:50:c5:8a:72:f0:
60:29:87:a4:66:67:97:b0:15:26:cb:85:63:33:2d:
4d:b3:d5:a7:5a:bc:f7:ee:2b:3e:12:f7:85:6d:70:
1e:14:19:56:67:b6:33:9c:0b:0d:5e:f4:22:0f:0f:
d4:95:ec:a9:b7:08:7d:57:37:51:3b:07:6d:c9:10:
c4:80:2b:a7:19:88:b4:f4:5c:e8:58:37:2d:46:3b:
c0:ef:46:b5:2d:93:38:55:03:67:f5:b9:88:eb:2c:
56:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:49:D0:41:31:39:62:E1:91:77:FF:88:3D:2D:8D:AE:05:BC:67:2B
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:98:d9:a5:b0:b0:a6:c6:6a:fd:f3:f0:37:f2:d7:2a:4e:8b:
e5:18:93:28:48:ef:2d:6e:45:99:be:60:26:87:ea:6b:ad:2d:
40:ab:bb:79:cb:4a:9e:fa:84:9d:a9:0f:a5:40:17:14:35:36:
41:f0:fb:cf:aa:e8:7d:6c:35:20:5d:92:1f:15:d1:2a:0b:cb:
17:d4:a5:79:b3:79:cb:91:8e:1d:56:69:95:ce:61:de:17:8d:
62:3a:df:c9:b4:29:61:0a:ea:89:9a:fc:eb:63:c7:ec:54:06:
5f:52:30:5f:80:cf:61:af:a2:4f:7e:66:be:2d:27:ee:4f:7d:
c6:7b:b2:b2:f1:71:81:41:a2:52:6f:66:36:18:40:fd:1b:36:
5e:b4:79:ed:9a:5c:f4:bc:cd:00:2f:6e:3d:39:56:58:08:2c:
4d:23:2a:09:d0:11:22:da:0d:28:81:dd:00:03:06:f9:43:46:
84:4b:85:7b:d6:c7:4a:59:80:43:7f:09:2f:04:4c:07:9a:0a:
2d:fc:5c:03:7f:75:9a:b8:a6:fa:9b:88:d2:a0:9c:4f:9c:5d:
a7:57:bc:ae:b4:cd:cc:b3:86:78:8e:f6:ef:50:39:86:82:4b:
5a:77:23:9f:e2:36:25:66:82:06:b9:1b:be:84:88:7f:4a:d5:
a3:dc:0c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:38 2026 by rpki-client