Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
File: sM7BwXmc5hUD-QithJCSD7iYlCo.mft (raw, json)
Hash identifier: eMgJdXEJml74YHxFl1Das1ktM1ilPyNRL74iMFR17xg=
Subject key identifier: C8:9E:44:84:BC:D0:3B:77:E5:0F:34:17:BD:EC:D9:05:CA:8E:D3:A7
Authority key identifier: B0:CE:C1:C1:79:9C:E6:15:03:F9:08:AD:84:90:92:0F:B8:98:94:2A
Certificate issuer: /CN=b0cec1c1799ce61503f908ad8490920fb898942a
Certificate serial: 019D39410852D8F71BF92DFF7D415271FCF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
Manifest number: 12
Signing time: Sun 29 Mar 2026 11:00:56 +0000
Manifest this update: Sun 29 Mar 2026 11:00:56 +0000
Manifest next update: Mon 30 Mar 2026 11:00:56 +0000
Files and hashes: 1: YbvUchYoA_bu09aSOz-6tMAAuU4.roa (hash: bjKWT2iklnBdt7HvATs3TG/mYrHaacKRb0DiNP6GNP0=)
2: sM7BwXmc5hUD-QithJCSD7iYlCo.crl (hash: cO5vZw1nEk/8VOziRqLNgk+Ml15CW2E8JD1G/mDmMrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:08:52:d8:f7:1b:f9:2d:ff:7d:41:52:71:fc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cec1c1799ce61503f908ad8490920fb898942a
Validity
Not Before: Mar 29 11:00:56 2026 GMT
Not After : Mar 30 11:00:56 2026 GMT
Subject: CN=c89e4484bcd03b77e50f3417bdecd905ca8ed3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:85:52:39:4b:6b:b5:64:7d:9f:32:a4:6d:
b1:05:44:0b:e1:ee:57:73:5f:80:2a:77:2c:ac:b5:
66:70:d4:87:60:26:5a:68:43:27:61:ae:06:b5:02:
80:25:3f:a7:74:89:23:61:f9:42:86:14:93:09:4e:
b8:fe:37:0d:65:a5:c0:5f:95:ff:00:9a:fc:11:84:
b3:58:5d:cd:2d:50:ae:80:15:df:46:18:1b:c5:14:
da:98:62:c1:de:96:10:85:25:1e:3a:ed:f1:61:87:
ee:79:76:bd:66:5e:83:d3:ce:91:d6:e0:a0:fd:15:
37:f8:92:ee:2b:7a:fa:74:1e:57:e3:83:b3:2d:d8:
29:d1:61:8f:66:02:54:75:b9:fb:cd:d3:50:e9:eb:
a1:a5:42:dd:31:99:51:c3:ec:c5:6a:62:4b:a9:d0:
38:b3:6b:32:fc:b8:83:91:09:54:80:2d:4e:89:5c:
f8:4c:90:df:af:f8:78:d4:0c:26:01:ca:9f:33:22:
f2:f8:f0:96:76:42:a7:80:b9:c3:1e:52:a5:22:9b:
3c:31:9b:e3:49:50:bf:1f:34:1e:27:56:a6:df:f5:
dd:54:cd:e3:0e:4e:9d:93:93:87:35:fb:43:32:b8:
00:6e:bc:4d:0e:61:e0:ed:88:39:78:26:23:8c:2c:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9E:44:84:BC:D0:3B:77:E5:0F:34:17:BD:EC:D9:05:CA:8E:D3:A7
X509v3 Authority Key Identifier:
keyid:B0:CE:C1:C1:79:9C:E6:15:03:F9:08:AD:84:90:92:0F:B8:98:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c0:81:16:ee:1d:33:6a:b8:f4:af:4c:6e:d9:35:56:e8:f1:
3b:a6:37:d2:a0:75:b6:57:a1:79:f3:8f:de:5d:7c:d7:a7:7b:
08:e3:c0:2d:68:6c:3d:f9:e8:c1:3d:a1:ba:6d:63:9e:01:fd:
07:ce:27:6c:94:73:4b:37:32:8b:c3:37:26:3c:0b:a6:d1:b3:
c8:3d:6a:b0:90:77:05:d8:0c:1a:19:5a:01:27:a4:48:ea:fc:
55:1a:6c:ad:a6:d3:d4:96:bb:5c:ab:c3:81:63:bb:3c:fd:e3:
64:96:1c:b7:23:3b:d2:1a:bf:fb:cc:6c:59:65:a5:03:fe:b6:
4a:be:ac:8a:7f:00:2b:13:29:a8:30:e0:67:ae:80:b0:b8:4d:
38:32:b4:88:2b:ea:c1:98:4f:1a:e1:26:60:06:44:03:df:23:
0d:d0:d9:3f:11:d0:52:c3:9e:9a:7e:75:bd:31:91:76:8d:b6:
b7:ff:10:7d:46:cc:e9:b3:53:e9:22:1a:0e:52:02:a5:00:b8:
9e:17:b1:46:4c:c1:8a:35:f1:a7:13:53:ce:c2:f0:04:d5:98:
1c:bc:94:80:03:ab:10:9b:a6:7f:95:a0:3a:5b:3d:7d:3f:cc:
75:19:47:f3:da:58:52:06:7a:2b:d1:ee:46:8d:d2:fe:49:a6:
d9:7f:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:30 2026 by rpki-client