Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
File: bMacPXAwzsGfj7ZuVDveZVlXCKI.mft (raw, json)
Hash identifier: KLt8/zfF3Oc3FSqNTMTWi6yz09QdJaNaT812EnxWWS0=
Subject key identifier: 7D:2B:1D:D8:4A:24:1F:76:B4:8E:04:85:48:F7:A4:34:BF:02:EB:DE
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 019F8F7F9A74E04095FAC79CCE63DD537C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
Manifest number: 0AC6
Signing time: Thu 23 Jul 2026 15:02:12 +0000
Manifest this update: Thu 23 Jul 2026 15:02:12 +0000
Manifest next update: Fri 24 Jul 2026 15:02:12 +0000
Files and hashes: 1: 1-rh5cQILjFfbLEs23MyIQmyJVyQ.roa (hash: cy/25YJD+0xNPHLeegsn8NowYywyoOpwQdx6/S7h4V0=)
2: LFDAvqd5xb9FRRe2yM-W79ogPLY.roa (hash: kgpiAD7VzIWymrLBR33coCOY8GXE7q973+jeIW77I1A=)
3: MtkMFeCwdMHY3TrtSqt90faUdo0.roa (hash: l0UeOKu9JpK0NnRYAC+4ynQckxHuoZ5fWDKY6dAiR4g=)
4: bMacPXAwzsGfj7ZuVDveZVlXCKI.crl (hash: CQq2oEkubx5x5AHq3Bdx5BqeGftuIS/QAKa2lLdcCWM=)
5: kS6P0-FBRVMuVdEEV02vD8TDiUc.asa (hash: Xqodnxc0/+vizlkl7MttnkM6knf6ZdTRjpzArx0o9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:9a:74:e0:40:95:fa:c7:9c:ce:63:dd:53:7c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Jul 23 15:02:12 2026 GMT
Not After : Jul 24 15:02:12 2026 GMT
Subject: CN=7d2b1dd84a241f76b48e048548f7a434bf02ebde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:10:0f:0e:7b:3b:a7:84:1a:eb:dd:30:23:
b3:83:96:17:f2:48:1b:4d:57:90:89:9a:d5:dc:80:
c6:c4:3d:6e:9e:82:e8:9f:1d:be:f3:92:c0:f1:3c:
eb:fc:7b:20:d8:93:af:91:45:1f:22:f9:3d:cb:b9:
f7:72:9d:04:d4:5e:f6:d4:53:5c:36:d0:ed:0f:44:
00:36:f5:67:a8:53:d0:d8:d3:bb:f3:40:3c:77:84:
89:1b:38:72:ba:e5:d0:0e:d0:a4:96:19:87:80:2a:
13:96:20:7e:11:ae:6f:9d:c1:85:a0:5a:60:d9:c1:
a2:1a:7b:b6:ed:67:17:cc:79:59:cf:bf:a5:45:e8:
02:e8:59:9a:16:d3:bb:20:2a:64:97:6a:cf:f2:fc:
21:d1:a4:8e:ec:bd:24:e9:56:6f:73:ad:b8:bc:aa:
91:03:06:61:b7:0d:f9:d3:66:d7:77:11:35:81:2c:
d9:c3:f6:c4:7d:86:12:e3:0f:4f:ca:c1:30:f6:e1:
dd:d9:34:96:f0:ee:59:96:94:0b:4e:c2:a4:28:f8:
59:26:f8:b1:66:cd:42:31:5a:09:d1:fe:e6:25:c2:
67:d5:26:c8:c2:1e:cc:e9:0b:c0:e7:40:80:fa:40:
09:db:5b:b7:5c:55:8d:f3:45:77:bd:e9:c6:c5:e1:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2B:1D:D8:4A:24:1F:76:B4:8E:04:85:48:F7:A4:34:BF:02:EB:DE
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2c:19:be:4e:1f:5e:6b:48:a9:b2:8b:be:5b:c1:58:c1:01:
0f:1f:71:6f:53:a2:af:69:33:76:67:8b:a1:e6:45:39:bc:98:
72:62:dd:e1:65:91:87:28:1b:29:87:b6:8e:cf:d6:48:24:81:
71:b4:d4:bb:f7:52:cc:ec:46:94:c1:fc:12:a4:ce:72:1f:0c:
cd:09:29:93:06:89:fa:e1:a1:0a:97:ae:4b:ee:c8:f6:d1:d8:
3d:40:16:25:d9:64:61:4d:90:36:40:aa:81:c1:17:13:6c:af:
ca:e9:62:2f:84:b9:e1:3c:75:4c:c0:64:fc:8c:6e:f2:5c:1a:
b9:84:3e:f9:69:eb:a3:47:88:0e:0a:f4:0f:47:97:5b:13:2a:
be:c6:82:f9:5e:d3:1e:4a:e3:1a:10:cf:dd:e5:f4:a7:7f:4e:
1c:72:bf:84:43:f0:fb:68:5c:ec:77:da:0f:d4:1a:cb:c1:78:
1f:d9:0d:70:33:d1:f9:2c:3a:5d:fe:db:a5:48:80:56:d0:b4:
7a:20:56:22:77:8b:34:10:52:e0:5f:a5:00:6e:1e:a8:26:24:
6d:1d:1e:5b:a8:90:5a:02:2f:b7:39:64:27:fc:9d:68:f2:33:
d4:87:22:69:8f:a8:a0:04:76:67:22:15:eb:7c:9b:b3:13:6c:
cc:5d:08:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:39 2026 by rpki-client