Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: TQy2LnFrDfsv1+gYtr0yk74Zv6FrKtQkrLQPM2djDB8=
Subject key identifier: A7:D9:2C:82:6C:BD:CE:BD:20:97:0E:96:BF:DB:53:67:86:FC:94:28
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 019D284D3593DF353211A4627003379ECE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 10D7
Signing time: Thu 26 Mar 2026 04:00:41 +0000
Manifest this update: Thu 26 Mar 2026 04:00:41 +0000
Manifest next update: Fri 27 Mar 2026 04:00:41 +0000
Files and hashes: 1: kJ6-t_FAgoe7HphTqXyXgseS7_A.roa (hash: nmaaXT8wxyUyQofH+9fMDVryZ1mgAUYzWspK2/2I9As=)
2: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: 6tgEiB1Cux+6JBF4NTdy5m4rL1pWRLFxMu88bbqTFO0=)
3: uBycyFV3HFO3Kaf85-1Yby5F7cI.roa (hash: UjOmW8dergl068O1JptPgYMNCbZKAckDjyhoBH2ZRDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:35:93:df:35:32:11:a4:62:70:03:37:9e:ce:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Mar 26 04:00:41 2026 GMT
Not After : Mar 27 04:00:41 2026 GMT
Subject: CN=a7d92c826cbdcebd20970e96bfdb536786fc9428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:7b:70:a7:7b:b4:06:2a:2d:15:e9:e5:e0:
12:93:6c:68:06:8c:70:d5:21:c5:7b:1c:6b:90:c2:
c2:d9:54:c8:e6:d1:5c:5e:1b:f9:e8:48:5e:aa:f0:
aa:8a:68:14:cb:b2:d4:21:54:41:1e:f9:a6:25:98:
2d:80:93:2f:41:cc:f8:54:5d:ad:4d:f4:fa:39:82:
9b:d9:44:19:bf:d6:8e:13:e5:ff:65:d2:26:ba:fc:
f4:59:eb:23:0e:b0:4f:98:9e:8e:a7:f4:ca:0a:5e:
07:1d:25:7c:4e:ad:75:ee:54:7b:8b:45:d2:26:29:
c4:0d:72:b8:c5:82:41:a9:0f:05:8f:26:27:83:bb:
2d:f0:f4:7f:d0:46:99:c4:6b:b4:63:39:b5:54:fe:
a8:0a:39:4d:08:80:35:b9:a6:89:d2:cb:97:d6:e5:
ae:54:b0:1d:4f:5c:8a:93:d3:8a:74:5c:96:2f:11:
fa:c1:1d:02:a7:71:71:7d:21:1b:84:79:d2:03:7e:
95:1c:7d:f3:bd:24:bb:45:04:2c:9c:ec:11:36:9b:
ea:ea:46:6c:b3:cc:2b:8c:cc:28:2e:c9:f8:b1:db:
18:2d:8f:d4:f2:50:2e:b0:1f:b3:45:62:f3:5f:b1:
fb:c5:3b:16:21:de:c6:71:18:2e:d7:58:5b:c8:51:
98:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D9:2C:82:6C:BD:CE:BD:20:97:0E:96:BF:DB:53:67:86:FC:94:28
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fc:cf:5d:22:3a:6c:55:b1:55:83:98:9f:eb:64:69:ec:83:
39:a3:f1:d1:77:d1:d7:ed:a7:cb:cb:64:00:ec:52:91:ba:7c:
f9:17:ee:40:1a:08:42:64:ca:dc:f5:c7:9d:bf:f9:73:ee:70:
fa:24:c2:f7:1f:15:e9:f8:9b:ff:32:2a:8b:f0:2c:53:ea:89:
07:8f:a2:45:15:1b:37:01:1e:71:5f:a3:a0:23:8b:1d:3c:91:
2d:5c:50:44:13:c1:e7:10:d5:77:eb:33:b6:5e:2d:19:d8:d3:
e5:34:38:b4:ed:46:de:d5:ee:25:84:df:b6:8b:70:05:18:b5:
2c:cd:dd:49:50:92:70:b6:35:c6:2d:a1:88:cc:72:3b:7f:e5:
8b:48:5f:d3:f1:fa:fe:39:b3:1b:eb:ee:d5:16:5f:d6:96:de:
bc:77:05:12:96:f1:ad:fc:61:a2:05:64:bb:31:1f:5a:d2:bb:
21:7c:e6:e1:71:9b:ac:1e:b9:11:9c:fa:0e:7d:4e:73:14:d7:
d7:5b:e1:0b:17:d6:a6:9b:83:64:47:b4:52:32:28:45:ec:31:
f4:a3:7e:85:a8:bc:86:6e:75:ac:8f:cf:d9:ef:62:c0:1a:37:
2b:5d:de:24:64:f5:fd:52:f4:a3:07:6b:91:5e:9b:fd:9f:44:
b5:12:64:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTTWT3zUyEaRicAM3ns4uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYmM0MjM5YzljYjk4MWYxOWE0OTVlNjMzZDNiZWM4ODlm
Y2JlODkwHhcNMjYwMzI2MDQwMDQxWhcNMjYwMzI3MDQwMDQxWjAzMTEwLwYDVQQD
EyhhN2Q5MmM4MjZjYmRjZWJkMjA5NzBlOTZiZmRiNTM2Nzg2ZmM5NDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc97cKd7tAYqLRXp5eASk2xoBoxw
1SHFexxrkMLC2VTI5tFcXhv56EheqvCqimgUy7LUIVRBHvmmJZgtgJMvQcz4VF2t
TfT6OYKb2UQZv9aOE+X/ZdImuvz0WesjDrBPmJ6Op/TKCl4HHSV8Tq117lR7i0XS
JinEDXK4xYJBqQ8FjyYng7st8PR/0EaZxGu0Yzm1VP6oCjlNCIA1uaaJ0suX1uWu
VLAdT1yKk9OKdFyWLxH6wR0Cp3FxfSEbhHnSA36VHH3zvSS7RQQsnOwRNpvq6kZs
s8wrjMwoLsn4sdsYLY/U8lAusB+zRWLzX7H7xTsWId7GcRgu11hbyFGYLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfZLIJsvc69IJcOlr/bU2eG/JQoMB8GA1UdIwQY
MBaAFJu8QjnJy5gfGaSV5jPTvsiJ/L6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmIt
MDFhYTA1NmIxZjZmLzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmItMDFhYTA1NmIxZjZm
LzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvzPXSI6
bFWxVYOYn+tkaeyDOaPx0XfR1+2ny8tkAOxSkbp8+RfuQBoIQmTK3PXHnb/5c+5w
+iTC9x8V6fib/zIqi/AsU+qJB4+iRRUbNwEecV+joCOLHTyRLVxQRBPB5xDVd+sz
tl4tGdjT5TQ4tO1G3tXuJYTftotwBRi1LM3dSVCScLY1xi2hiMxyO3/li0hf0/H6
/jmzG+vu1RZf1pbevHcFEpbxrfxhogVkuzEfWtK7IXzm4XGbrB65EZz6Dn1OcxTX
11vhCxfWppuDZEe0UjIoRewx9KN+hai8hm51rI/P2e9iwBo3K13eJGT1/VL0owdr
kV6b/Z9EtRJkNQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:08 2026 by rpki-client