Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: ugRJGzsYhx52RO89S/iQC0Hf+hTqsA8h0914zn+F2wg=
Subject key identifier: 54:08:39:EE:DF:10:50:5A:4E:8C:23:5A:43:C2:9C:9A:48:23:B2:83
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 019E1D9109AF0E02BB86F8C4DCF11DB3D057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 1156
Signing time: Tue 12 May 2026 19:01:44 +0000
Manifest this update: Tue 12 May 2026 19:01:44 +0000
Manifest next update: Wed 13 May 2026 19:01:44 +0000
Files and hashes: 1: kJ6-t_FAgoe7HphTqXyXgseS7_A.roa (hash: nmaaXT8wxyUyQofH+9fMDVryZ1mgAUYzWspK2/2I9As=)
2: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: pZKcOXg8tW/k5lhqs/ajig3N8dwOgK8DuHA9jk4nxfY=)
3: uBycyFV3HFO3Kaf85-1Yby5F7cI.roa (hash: UjOmW8dergl068O1JptPgYMNCbZKAckDjyhoBH2ZRDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:09:af:0e:02:bb:86:f8:c4:dc:f1:1d:b3:d0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: May 12 19:01:44 2026 GMT
Not After : May 13 19:01:44 2026 GMT
Subject: CN=540839eedf10505a4e8c235a43c29c9a4823b283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:97:0a:2a:e8:92:08:4d:b7:8f:3b:f0:82:
0d:80:27:80:0c:a4:04:21:65:31:95:fc:39:c8:81:
c1:12:fc:95:4c:14:a4:73:bf:13:ae:52:31:12:39:
f8:40:57:38:cc:82:c5:80:2d:40:37:0e:57:cf:df:
b3:86:be:3e:7b:f9:91:55:a2:eb:f7:bb:5c:4d:d4:
1c:b3:c6:ea:dc:c1:89:8e:23:80:58:be:cb:8f:75:
b3:20:54:fc:95:9d:ea:5f:8f:2d:39:ce:6c:7b:4b:
81:c5:b5:06:58:13:c6:0b:b6:11:7a:b5:70:39:c2:
b6:60:d7:f4:ef:8a:0b:aa:fc:c5:94:95:0c:ec:ae:
0e:45:2c:b9:c5:9e:d9:fb:2c:99:3b:a3:61:27:d2:
01:0b:07:9c:64:d8:89:02:05:39:30:d5:7c:ca:59:
e0:47:15:ca:a6:56:17:1a:f4:c4:41:8a:61:0d:91:
77:c6:74:89:f2:50:e7:ae:70:a5:20:df:fc:99:95:
15:0b:b0:c3:ec:f3:e7:6b:01:25:cf:47:9b:b1:9b:
a4:27:92:b7:2f:0a:b0:ee:2e:ab:cf:64:17:3d:08:
50:3c:7e:ad:cc:08:0c:4a:58:f9:25:c5:99:f1:71:
76:85:ad:81:bb:d1:35:c6:69:14:8f:cf:54:d7:c0:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:08:39:EE:DF:10:50:5A:4E:8C:23:5A:43:C2:9C:9A:48:23:B2:83
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:62:8e:b0:b8:87:96:1e:9e:2b:21:20:7b:85:96:31:23:24:
c0:0c:5d:68:f6:48:e4:75:ab:0f:36:cf:dc:20:39:21:46:4d:
06:38:d7:fe:29:33:b7:06:52:42:69:af:d9:cc:1d:14:1e:18:
31:61:b0:84:3e:97:83:38:4c:f6:a9:16:32:c7:74:4a:c4:ce:
31:30:68:28:9a:e9:7f:03:54:df:89:6a:60:5b:25:0e:cb:00:
a5:ab:a4:0b:22:94:9d:ab:f9:31:93:d7:6c:ff:72:cb:a5:91:
c2:13:07:bd:b8:98:da:d8:14:32:e5:04:05:af:d8:a6:80:5c:
3a:26:ab:ca:45:01:09:33:22:72:86:29:1e:59:76:c6:c2:7d:
3d:c3:b2:5e:d7:de:db:62:43:40:c2:40:a3:fe:9b:ee:08:a7:
73:b6:eb:36:06:02:db:56:9a:49:9f:13:2b:97:c3:99:0e:c9:
23:8d:f5:45:66:dd:8f:15:9d:e7:60:6a:85:1a:5f:86:b2:b8:
8b:32:35:58:29:31:96:9b:32:38:76:c0:2b:6a:aa:5c:07:b1:
75:fd:30:d0:b1:2e:2b:d2:99:f9:77:ec:95:0f:92:4d:10:79:
de:00:b3:97:b6:bf:1c:b0:a0:fd:bb:c5:df:8c:89:ed:ca:0d:
6d:41:85:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:50:27 2026 by rpki-client