Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
File: bMacPXAwzsGfj7ZuVDveZVlXCKI.mft (raw, json)
Hash identifier: 0CXCcn5DpVduI/K2mVwFrDrtebOPJQpFdTbml4+F0kU=
Subject key identifier: A6:09:C0:E6:D0:5E:90:3D:A0:84:C1:EA:B3:16:A3:A8:94:66:AE:F9
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 019D25F16006CBA50FB22EAD47C67694D90B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
Manifest number: 0986
Signing time: Wed 25 Mar 2026 17:01:08 +0000
Manifest this update: Wed 25 Mar 2026 17:01:08 +0000
Manifest next update: Thu 26 Mar 2026 17:01:08 +0000
Files and hashes: 1: 1-rh5cQILjFfbLEs23MyIQmyJVyQ.roa (hash: cy/25YJD+0xNPHLeegsn8NowYywyoOpwQdx6/S7h4V0=)
2: EKOknUpftnx0Q7axH9neRzx4NSA.roa (hash: n+4PMTNbAHk9TtNsZ242IVt0Y1GiuJ2mxezao/gIwZc=)
3: _A6QNXxL5haXYGnIWjTWFpFJgfw.roa (hash: wBYoGVK+AJbrNsBKUYrwucKaBV6UAGbmCu6gl1XSKOY=)
4: bMacPXAwzsGfj7ZuVDveZVlXCKI.crl (hash: +gaZdaeAyJd5U8hv73eV7/4rj3w1qo2Ae8bPCYZ7XJU=)
5: kS6P0-FBRVMuVdEEV02vD8TDiUc.asa (hash: Xqodnxc0/+vizlkl7MttnkM6knf6ZdTRjpzArx0o9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:60:06:cb:a5:0f:b2:2e:ad:47:c6:76:94:d9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Mar 25 17:01:08 2026 GMT
Not After : Mar 26 17:01:08 2026 GMT
Subject: CN=a609c0e6d05e903da084c1eab316a3a89466aef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:6f:17:bd:b5:56:39:08:46:dd:aa:a4:49:
91:10:18:46:b3:c2:2d:66:bd:e4:1b:e7:e2:cf:ed:
80:00:45:1e:38:f1:25:60:18:ec:82:06:fd:15:10:
76:de:f0:d1:f6:60:26:31:70:68:89:b4:63:5e:b3:
20:16:0c:72:62:44:c6:80:f6:19:d9:ef:5b:02:03:
a9:c1:57:1d:c3:5e:5f:c3:bd:52:11:22:a6:9a:e1:
81:83:48:c5:90:af:b7:ac:a8:89:49:26:84:29:8d:
57:eb:5e:b1:16:e4:87:3c:8e:df:eb:2d:97:eb:a3:
a5:76:99:3c:12:e0:44:4d:a9:7c:41:4b:77:aa:21:
fe:5e:be:5c:5c:6c:82:98:58:f5:8c:ed:df:92:cb:
98:ad:be:25:2d:b2:be:47:f5:5f:49:5a:79:ae:ba:
e2:fd:07:19:3a:49:dc:8e:da:21:e0:b5:36:e2:73:
69:f4:b7:5a:04:9b:f3:a0:38:e6:7b:ae:a6:33:92:
2b:af:60:4a:0c:5d:5f:79:09:2c:1e:cc:9c:75:d9:
82:7b:8f:32:be:10:49:65:6b:81:ea:17:ab:b7:80:
fe:0d:4e:77:2a:66:b9:db:85:e1:f7:3e:0f:c7:10:
30:11:30:d0:62:b3:a9:e4:a8:aa:ad:12:d5:25:8b:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:09:C0:E6:D0:5E:90:3D:A0:84:C1:EA:B3:16:A3:A8:94:66:AE:F9
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ef:f5:11:f0:c6:f4:3e:a5:cb:9d:1d:63:ab:e2:d4:6d:f8:
c2:62:1c:6b:46:3d:a4:66:21:e1:27:fe:af:bc:ca:6d:a9:4d:
29:ed:e1:9b:0d:93:04:11:1c:54:4b:fd:23:c2:0c:52:e8:5c:
c5:50:dc:0d:a9:fd:72:47:77:88:b0:e9:1b:e4:ad:1c:3c:f7:
4d:e4:60:29:35:5e:34:e1:5a:0c:d0:e1:dc:bd:51:98:7b:2d:
48:db:71:37:33:22:d5:b1:21:7d:1a:8b:32:50:69:66:67:bf:
37:e0:c7:f6:89:3c:38:bc:f5:3e:95:a0:bf:25:54:18:c0:5a:
81:7a:95:ce:90:0c:66:b1:53:18:34:a8:93:0f:a0:e8:bb:06:
47:c5:77:dd:fc:51:34:1e:46:e2:90:30:92:c0:f3:4e:25:10:
7e:32:bf:78:20:42:8c:40:20:cb:ff:83:64:3b:ec:8d:01:57:
a0:40:19:63:35:2e:9d:78:f8:57:19:ee:a1:3e:b4:67:3f:41:
09:5e:d4:25:80:9a:ce:0f:6e:fd:1c:70:73:36:42:04:c0:16:
32:8a:c2:0b:26:af:bb:35:82:15:66:c2:dd:95:dd:d6:eb:f4:
53:a5:06:03:78:55:ce:a8:c7:34:11:40:59:04:85:ad:09:39:
df:f9:b4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:46:53 2026 by rpki-client