Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
File: m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft (raw, json)
Hash identifier: lsg68umYXh27xbzTZsN8EMiz2Sqjv6oPD0gHd/UGFN8=
Subject key identifier: 84:C4:6D:DB:FC:6D:4C:41:66:04:1E:25:F0:67:CB:DC:74:89:30:FE
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial: 019D28F28A110B03B7513C99A82CE1878685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
Manifest number: 0CCC
Signing time: Thu 26 Mar 2026 07:01:16 +0000
Manifest this update: Thu 26 Mar 2026 07:01:16 +0000
Manifest next update: Fri 27 Mar 2026 07:01:16 +0000
Files and hashes: 1: YNGfrZvagg4O4FGkVhnBiiruLx0.roa (hash: /ltwcx7I+h2VdXqUCtGZD3WsmcEgqxtyYnfei2/3ZlQ=)
2: kVcl-lsZR6xyXsxO8aWh944dJv8.roa (hash: wO+8xB9lCvBU2gIRiYR9ejf9p/0a0RGT/tmuLIRs2LY=)
3: m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl (hash: 2yUkgR7RV6C+h9t3xGLjpWybOh/j5A5KFJt74PwirHE=)
4: oK8DgClRz_oA4VjYTOJycO25RE8.roa (hash: HL0prlO8v1UmrZWNdBDiYE7Jz5klWeZulY7cNTFYDKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:8a:11:0b:03:b7:51:3c:99:a8:2c:e1:87:86:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Validity
Not Before: Mar 26 07:01:16 2026 GMT
Not After : Mar 27 07:01:16 2026 GMT
Subject: CN=84c46ddbfc6d4c4166041e25f067cbdc748930fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:7a:32:0a:b0:bd:9d:76:5e:db:5d:ac:1b:
0e:34:ff:b1:4e:0a:4b:ed:31:1b:13:0b:1c:93:b6:
aa:b2:65:7f:6d:cf:46:36:75:12:1e:7f:d0:c2:20:
8e:85:b8:0b:d5:0a:f6:4b:ce:04:29:ab:55:17:1e:
44:c6:a0:0e:4c:63:75:bc:ec:44:2e:bd:3d:e9:fe:
11:fa:95:d9:6f:e6:91:76:11:c7:32:9b:3f:9c:e4:
af:1d:b2:78:11:26:bf:38:ba:a9:36:1b:4d:2f:b7:
35:fe:b8:43:1d:4b:a5:a2:47:66:eb:2c:99:2c:62:
c6:43:d4:ed:8f:d2:7a:e3:1f:3a:16:21:73:12:36:
f1:e0:cb:13:db:0d:18:c1:53:ee:f7:e7:a0:76:40:
3d:0f:ac:1a:d1:af:95:16:96:76:d2:2a:23:77:e4:
95:2f:8f:8d:70:ac:af:c2:41:71:52:d4:48:54:cc:
fa:11:9d:b6:45:49:a3:c7:e1:38:b8:e6:de:6a:9f:
19:b3:81:31:9a:7e:3f:ca:3a:99:30:f0:36:32:c6:
fa:87:0f:e9:23:22:90:40:0b:53:c0:e9:09:d0:8b:
77:07:53:aa:07:79:c1:e4:f4:7d:3c:0a:18:21:d9:
a7:e2:3e:ed:a4:0d:5e:98:78:a7:e6:5d:be:56:fe:
4f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C4:6D:DB:FC:6D:4C:41:66:04:1E:25:F0:67:CB:DC:74:89:30:FE
X509v3 Authority Key Identifier:
keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:20:40:89:d8:c0:51:c3:d1:f1:21:08:83:7a:f5:bd:bc:b8:
38:11:d4:bb:20:c0:90:6f:a5:9a:44:b4:08:a3:70:95:6f:48:
a3:77:0d:f0:f7:22:08:b7:64:cc:7b:35:2c:a8:96:f0:05:56:
fc:ae:77:23:84:80:97:e2:6b:75:1e:af:7d:6a:77:f5:d2:c3:
3e:39:8e:89:c8:0f:ac:6a:f7:3a:68:c7:75:65:ab:7b:b2:3d:
8b:e7:14:31:ee:05:5c:ab:38:64:11:66:d1:5b:b6:4d:e2:96:
d4:c3:87:ac:cd:84:a4:28:44:cf:8e:18:d1:d8:c1:8f:39:f7:
a9:a5:d3:0a:98:69:27:c6:e3:63:13:7a:32:38:fd:e4:2c:6e:
a7:2b:06:7d:ec:ee:44:ec:c9:e9:4d:32:3f:a1:e3:23:f0:a8:
ee:9d:bd:00:19:0e:55:46:fe:5d:41:51:8d:34:10:43:bb:54:
b6:15:7e:ff:ba:04:46:b3:e6:2c:ba:92:68:a0:3e:73:32:d0:
09:69:f9:f5:01:31:2a:bc:59:57:11:a3:91:c7:f4:ad:8d:e7:
f3:7a:40:d4:83:2f:db:48:23:38:cb:2f:11:7a:dd:a7:b5:49:
80:bd:07:33:0c:ea:a7:9f:b4:a0:09:b2:f5:92:1d:75:e9:30:
6e:71:d7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:03 2026 by rpki-client