Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: v4YfOtEgKY7u2dHbfVOZ0lfer7iIMuUZ8FW/DA6sE6g=
Subject key identifier: BA:F0:06:EA:82:FD:CF:E1:39:03:4E:09:FF:CA:9A:AF:E3:65:7F:EB
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 01A0EBF8D7577EAEAF6D77C7841233E890EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 12CA
Signing time: Tue 29 Sep 2026 07:02:28 +0000
Manifest this update: Tue 29 Sep 2026 07:02:28 +0000
Manifest next update: Wed 30 Sep 2026 07:02:28 +0000
Files and hashes: 1: kJ6-t_FAgoe7HphTqXyXgseS7_A.roa (hash: nmaaXT8wxyUyQofH+9fMDVryZ1mgAUYzWspK2/2I9As=)
2: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: ApCUd5+KklzmNDKuyDIVk29ciu62cux6USRn40vriiU=)
3: uBycyFV3HFO3Kaf85-1Yby5F7cI.roa (hash: UjOmW8dergl068O1JptPgYMNCbZKAckDjyhoBH2ZRDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f8:d7:57:7e:ae:af:6d:77:c7:84:12:33:e8:90:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Sep 29 07:02:28 2026 GMT
Not After : Sep 30 07:02:28 2026 GMT
Subject: CN=baf006ea82fdcfe139034e09ffca9aafe3657feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c0:77:66:62:9e:b4:a3:6b:01:79:49:44:aa:
b8:da:1b:5f:b2:3b:fa:da:b5:61:ef:32:fe:97:0d:
d0:53:ae:f3:a0:af:cb:d3:cd:4b:05:a2:ae:de:e8:
eb:4f:db:d6:33:a9:bc:c9:c6:bb:a1:25:c1:4a:d8:
db:71:86:92:14:cd:e1:b6:84:70:7d:6a:db:fd:33:
eb:dd:51:fa:89:2b:c3:3f:7a:ca:e3:5a:31:df:f3:
9d:ae:5f:d9:77:6f:9a:ba:a6:29:8c:4f:60:46:5a:
e0:de:52:98:1d:52:40:c0:4b:17:b5:99:d8:8a:81:
f2:d0:33:57:a3:08:74:43:6b:26:4c:e5:ed:72:eb:
7b:f0:bc:e8:43:ec:82:16:c9:0b:c7:be:fe:7b:a5:
40:0c:47:3b:11:34:b5:eb:4a:1d:bc:08:7f:c3:e0:
d5:db:e9:06:47:7b:7f:63:a2:30:56:cf:a5:06:48:
cf:c6:3b:bd:c0:2c:fa:f5:ec:37:37:25:25:a4:d2:
f4:88:6b:47:59:4e:5d:22:da:50:68:03:48:3f:3a:
85:fa:9b:ac:8a:31:d4:66:ec:c1:83:bc:80:9a:89:
bc:0c:a0:4b:7c:52:cc:04:6b:d0:61:19:1f:19:01:
37:f9:a6:a9:bb:d3:7f:53:ae:01:1c:47:6a:bd:c5:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F0:06:EA:82:FD:CF:E1:39:03:4E:09:FF:CA:9A:AF:E3:65:7F:EB
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6f:ab:65:aa:39:b9:89:c3:cb:81:02:d1:6e:19:c4:c9:82:
4e:0d:88:ae:6e:39:7d:c7:02:15:68:03:23:ac:70:67:8a:1d:
fa:0e:34:25:ba:00:87:5d:ec:c5:96:b5:f2:4f:1b:81:79:b3:
0f:ae:6e:b5:3b:0e:51:d5:70:62:65:d6:35:e7:88:5a:d0:34:
56:ea:06:3f:08:cf:0e:25:ef:0a:b7:d3:0b:46:f3:02:1a:f6:
50:f3:d5:4d:86:86:b3:0b:b4:12:6b:8b:40:e7:ba:04:90:96:
dd:98:7a:4d:d4:90:30:f5:af:18:61:d9:7a:52:9b:7e:7e:9b:
dc:0a:8f:ce:01:45:db:e7:29:75:d4:0c:24:2b:1c:88:e6:22:
30:d9:da:bd:90:6a:73:4e:96:3f:2f:61:c0:26:ea:22:3b:d1:
99:7d:59:d5:14:df:20:df:50:cf:40:1d:c9:84:3d:1b:1e:c5:
50:c2:5d:ab:48:ea:11:ca:98:49:91:e2:54:17:38:e1:db:fb:
08:7c:67:db:15:1a:6a:bb:0e:68:bb:41:b5:6b:59:cb:fc:15:
35:d1:c8:d5:e2:ff:6e:82:2b:11:0a:98:b3:49:6b:e3:1d:03:
8e:82:e0:98:ee:f0:68:44:a0:5d:f1:a0:b2:1f:d6:5b:5b:15:
5f:ff:02:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:48:29 2026 by rpki-client