Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: tSMxaI+8QZY3wb2B7hPL8lJwMT0aB+XMNDewQDBuzPE=
Subject key identifier: FE:4D:D7:BD:C3:72:16:5B:12:8D:3A:6F:FE:A4:0F:05:E6:16:39:FE
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 019F9436ADD54CDA577D3925CCF77DEF6495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 1218
Signing time: Fri 24 Jul 2026 13:00:39 +0000
Manifest this update: Fri 24 Jul 2026 13:00:39 +0000
Manifest next update: Sat 25 Jul 2026 13:00:39 +0000
Files and hashes: 1: kJ6-t_FAgoe7HphTqXyXgseS7_A.roa (hash: nmaaXT8wxyUyQofH+9fMDVryZ1mgAUYzWspK2/2I9As=)
2: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: 6LzgbIn/lUcqwtW3tDvhVPTEz5A5UazHhJqJwDulQ4E=)
3: uBycyFV3HFO3Kaf85-1Yby5F7cI.roa (hash: UjOmW8dergl068O1JptPgYMNCbZKAckDjyhoBH2ZRDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:ad:d5:4c:da:57:7d:39:25:cc:f7:7d:ef:64:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Jul 24 13:00:39 2026 GMT
Not After : Jul 25 13:00:39 2026 GMT
Subject: CN=fe4dd7bdc372165b128d3a6ffea40f05e61639fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:08:6e:60:eb:33:40:1b:01:ef:b4:47:d8:
e4:d0:ea:69:05:33:54:15:a9:d9:d9:7a:01:07:77:
e8:a7:2f:97:43:e9:4c:d0:62:01:d8:68:fc:b3:e4:
ac:bd:03:8c:42:45:35:ee:d6:21:60:ff:95:15:1b:
c3:32:a2:64:19:06:0e:15:1c:2f:0d:e2:76:06:0e:
ac:43:76:80:28:17:13:fb:ca:51:a6:15:1f:c1:15:
75:7d:62:ce:cc:bf:a1:1a:1f:88:fe:c8:f9:6b:b4:
05:c9:8d:b8:6e:6c:4d:ba:9b:ee:54:dd:b5:1a:c3:
27:6e:7c:7b:71:17:41:6d:19:42:51:85:6d:9b:6b:
00:cf:10:02:87:52:02:15:48:bb:c7:1e:45:82:6c:
87:77:61:6f:f5:2d:eb:b2:9d:f3:9f:7c:bd:26:59:
d9:15:21:c6:d2:55:c6:1e:b6:f2:0b:6f:b6:b1:92:
a3:f2:63:82:15:0a:ec:55:65:dd:b4:0d:2d:0c:ce:
f5:8a:eb:6c:38:f9:fe:0a:c5:af:76:01:75:30:c4:
4e:1a:de:80:be:4b:b0:7e:e6:9f:c9:59:03:99:e1:
d3:69:fc:31:81:e2:55:09:e2:dd:46:4d:2f:6e:7e:
34:d8:b0:ec:08:ba:ed:37:cc:76:d8:5c:ac:e5:72:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4D:D7:BD:C3:72:16:5B:12:8D:3A:6F:FE:A4:0F:05:E6:16:39:FE
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6e:84:76:22:4c:c9:f5:60:5a:fe:13:b7:d0:b4:02:6b:de:
03:02:91:28:8d:70:61:fd:6e:fe:53:0c:f9:23:22:e5:a6:4c:
d1:8e:3a:0f:70:e9:38:09:87:e5:1c:e0:17:78:9e:83:84:61:
73:5e:2d:1d:93:ae:e3:4c:67:e4:01:93:d0:d5:79:63:44:6e:
89:bc:a4:8e:ab:44:03:27:d8:73:84:5a:fe:6f:55:0f:ea:0e:
21:4c:8b:1c:2a:1b:4d:05:cc:a9:d6:16:cc:cb:4c:8b:9c:1c:
1e:15:2d:ef:92:48:2e:b6:8b:9d:7f:52:a2:20:f6:c2:f3:19:
60:b0:64:57:94:04:f8:87:a7:f9:d2:ce:e1:a1:52:4f:10:11:
31:c9:44:24:54:4c:45:13:51:ae:a1:fe:c1:2d:53:d8:ef:22:
07:f9:3b:ba:da:5a:04:f1:54:ea:2c:42:95:19:c7:f1:0d:4b:
09:5a:ed:21:dc:cf:69:0e:01:2b:a4:a5:78:d1:42:22:88:14:
e9:09:77:ab:80:70:e5:e7:1f:7e:10:2d:c9:30:ba:09:36:63:
b8:67:9c:fc:50:bf:c6:6e:5a:10:cf:cd:2d:07:00:cd:74:ad:
05:f8:04:64:4a:06:79:1e:ea:1a:59:8e:43:45:dc:c0:59:3a:
75:23:0b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:37 2026 by rpki-client