Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: R8UTVlNAtIGCTB0S4mYrskRgKMcX5JPQqX93doOyO/g=
Subject key identifier: 9C:C0:42:37:7C:80:88:1B:F7:A6:22:92:43:9C:00:73:45:7C:3B:00
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 01A0B53FA8EC1D05AFD9D8393F33DF35C1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 1687
Signing time: Fri 18 Sep 2026 16:00:43 +0000
Manifest this update: Fri 18 Sep 2026 16:00:43 +0000
Manifest next update: Sat 19 Sep 2026 16:00:43 +0000
Files and hashes: 1: 49TpwXNTbP9jREpz2sa2Jtt7mT4.roa (hash: 29rndF3r0S7bzK9ai7WqeiKlzm9ig1QMwR9Nz9BHg9o=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: ugUcK/zFq67ZYUrH7JPhEQNGVYmhpDW+oMtgMvXM8ZE=)
3: dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa (hash: GnpPZWGTVcUqisrQyyHLCMNBiEUZ8MM+stWTYBQynzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:3f:a8:ec:1d:05:af:d9:d8:39:3f:33:df:35:c1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Sep 18 16:00:43 2026 GMT
Not After : Sep 19 16:00:43 2026 GMT
Subject: CN=9cc042377c80881bf7a62292439c0073457c3b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:a4:16:de:be:f8:57:a9:86:df:4e:56:0c:
bd:8e:96:87:bf:9f:ec:51:b3:99:7a:af:02:e5:db:
43:3c:c8:56:c0:f7:98:f0:8a:74:5c:e5:e2:93:11:
d6:a3:f0:c6:1f:81:c2:1b:74:b7:e0:0e:c6:70:da:
86:0a:f4:5e:a7:1d:a7:db:11:7a:f7:af:8f:dd:64:
e1:b9:ce:e3:19:f1:f8:a8:8e:0b:4f:25:f2:d3:13:
db:3b:47:b0:a0:51:4f:60:0e:02:b2:5b:97:a0:90:
e9:81:f1:e2:97:54:83:e2:b1:16:5d:d9:d3:43:75:
c9:a6:df:1a:26:fa:41:64:a7:1e:66:bb:05:75:42:
1f:93:e1:67:2f:ee:48:f6:55:8c:67:2c:8b:09:b8:
3e:da:30:f9:79:ca:ba:90:de:3c:22:30:7d:58:2b:
7e:16:64:16:f5:e9:e2:1c:e3:8d:a2:9d:91:63:63:
9e:89:a6:76:1e:50:4f:aa:eb:6a:42:a9:d3:97:c3:
6f:84:76:0a:25:87:2f:56:4e:50:1d:c3:e6:65:2d:
ae:c2:06:b5:23:f8:96:b9:0a:1f:5c:3e:74:b5:4c:
f5:15:59:76:a1:f1:70:29:bf:19:63:8e:a5:30:95:
c6:cd:55:7c:43:be:03:ad:ff:79:81:3a:f6:fd:73:
a6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C0:42:37:7C:80:88:1B:F7:A6:22:92:43:9C:00:73:45:7C:3B:00
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ca:c8:74:98:4e:98:90:5c:aa:73:28:ad:6e:6f:62:93:d0:
9c:2d:7a:df:2e:06:49:9a:4f:a7:e9:e7:6c:ea:f3:11:9a:93:
8e:f2:5e:e1:61:5d:35:2d:ef:e3:07:34:3c:e7:92:58:52:69:
a9:fb:8d:55:0e:f9:bb:cc:90:40:50:16:df:4a:b6:c3:0c:6c:
18:3f:11:bb:28:e4:11:df:70:8d:86:fe:5f:f0:22:01:ee:b2:
87:9a:c5:1f:9f:9e:61:26:b1:ad:0c:8c:56:0a:33:9e:cc:a4:
03:ea:bb:50:e8:85:4a:a1:a9:13:9a:e4:2a:f9:e7:ce:0e:2d:
c8:f2:94:d6:d6:d5:b3:32:01:5b:e2:ac:db:e9:d0:4a:c0:5b:
5e:e6:b4:a5:c8:59:e2:9b:d8:58:ee:14:0c:b1:91:46:3e:55:
d6:14:95:ba:19:64:06:a9:0e:cd:67:3a:0e:9c:4e:a3:c5:20:
50:f8:d0:45:1f:a8:7b:8e:2d:b3:17:85:2c:e3:be:a4:a9:42:
aa:62:d2:3b:89:f5:e7:ce:75:82:7b:9f:30:12:3d:ba:fe:e2:
1e:8b:5e:4c:df:42:16:b3:c1:9d:76:af:8c:09:f6:91:57:e9:
5d:d6:86:b1:77:9b:bc:72:c9:ea:4a:2c:cf:40:05:25:99:aa:
56:81:5b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:59:57 2026 by rpki-client