Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: b5TRK+WuhOrrBxGmT3M+Rea6iYy0xQvrFWcGtx0cR9g=
Subject key identifier: 72:CB:88:0C:F4:24:70:E9:86:2A:71:5C:69:84:FD:0D:3E:A2:09:03
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 019D27A8F9CE56B26CA77C328F4CD1B1547D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 14B0
Signing time: Thu 26 Mar 2026 01:01:18 +0000
Manifest this update: Thu 26 Mar 2026 01:01:18 +0000
Manifest next update: Fri 27 Mar 2026 01:01:18 +0000
Files and hashes: 1: 49TpwXNTbP9jREpz2sa2Jtt7mT4.roa (hash: 29rndF3r0S7bzK9ai7WqeiKlzm9ig1QMwR9Nz9BHg9o=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: ni1DMgdlnIQt3ljsBBGoRh6bKoCM9iTEnR2wdgXGX0o=)
3: dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa (hash: GnpPZWGTVcUqisrQyyHLCMNBiEUZ8MM+stWTYBQynzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f9:ce:56:b2:6c:a7:7c:32:8f:4c:d1:b1:54:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Mar 26 01:01:18 2026 GMT
Not After : Mar 27 01:01:18 2026 GMT
Subject: CN=72cb880cf42470e9862a715c6984fd0d3ea20903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:be:08:de:78:ba:fb:89:5f:42:a9:6f:2d:
aa:c0:7b:0a:9a:c5:e1:0e:cd:00:5c:41:2a:a3:1b:
bc:f8:54:ad:04:81:e2:61:41:d1:ea:62:60:66:b6:
2e:dd:fd:41:4e:7f:6e:a9:31:8e:cb:08:11:72:48:
13:90:17:67:23:5f:ff:24:bc:f6:80:69:18:88:92:
54:0b:11:97:34:1f:1e:a0:b1:8d:81:71:8c:8c:3f:
cb:28:46:4f:dc:f9:38:c7:4e:74:a9:20:92:06:6e:
02:60:f3:8d:61:27:c3:19:cc:86:80:a8:ed:66:d0:
c3:6d:31:9e:52:90:63:12:81:f8:c3:68:98:ad:3c:
bb:3a:87:32:79:3d:41:9b:cf:96:ed:67:fb:87:b7:
9d:64:e5:ad:91:10:50:17:d7:23:13:70:7d:80:7d:
65:ca:84:d2:3f:8e:68:61:6c:2c:7d:e1:81:73:6c:
00:86:16:24:2f:a3:13:36:5d:a7:27:7f:80:35:70:
e6:fb:88:06:05:a0:76:a2:e1:ae:54:48:35:f8:24:
8e:f4:db:cb:eb:19:1b:22:09:6d:50:c5:b9:70:8d:
4d:28:b0:90:78:75:32:f8:7d:d6:39:64:c0:56:e1:
46:e3:76:39:ca:e3:12:58:52:57:39:30:a3:c9:c3:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CB:88:0C:F4:24:70:E9:86:2A:71:5C:69:84:FD:0D:3E:A2:09:03
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f6:79:fb:22:1f:f8:6c:d4:13:9c:0f:55:d6:38:75:f2:53:
2e:ce:64:84:f6:25:88:bc:f1:04:6a:a4:f0:c6:b0:26:a1:03:
fb:ce:1b:1a:96:e9:30:81:e3:1b:bd:e3:f3:3e:f2:50:0e:79:
94:83:ca:82:58:08:63:96:96:57:ce:de:1b:94:e1:6b:bc:ef:
2d:3e:86:b5:43:14:57:80:8f:15:cc:f8:72:1a:d4:00:ae:db:
c0:d1:d5:96:83:bf:ec:2d:11:b1:08:d9:2b:c7:4c:95:7f:12:
f6:b2:da:39:3b:d0:f2:69:a3:04:39:3f:43:24:f0:e8:35:9c:
9f:63:88:f3:d2:31:21:6a:24:e2:d0:c8:e3:8c:64:f6:34:2c:
67:86:ae:c5:ad:16:b7:40:2e:08:7d:a2:4a:8d:57:bb:6d:57:
13:62:d8:1f:cf:c5:9e:0a:80:9f:8c:59:b1:11:db:78:89:85:
51:53:82:ad:fb:13:e0:aa:65:95:c1:b3:49:bc:e2:11:1a:0e:
93:ef:20:c9:e1:74:8c:d9:98:da:15:86:11:aa:9f:bd:1a:69:
b1:6d:8b:bb:b1:32:79:16:f7:9f:30:bb:09:dc:cd:3e:7c:c5:
73:34:85:d4:f5:f2:d7:05:ce:5f:00:67:53:be:5a:a8:dd:aa:
8b:25:f2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:44 2026 by rpki-client