Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: TYvXojI0cQ9pz3QFUz8mMi2UKW+7mEAnUg3mFIZcpZ8=
Subject key identifier: AA:60:92:80:47:7A:E0:59:73:E1:A8:AC:57:F3:AF:2A:7B:DD:5D:B5
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 019E1EDA2981BE8A42FD0EC60D5C6671D0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 1530
Signing time: Wed 13 May 2026 01:01:14 +0000
Manifest this update: Wed 13 May 2026 01:01:14 +0000
Manifest next update: Thu 14 May 2026 01:01:14 +0000
Files and hashes: 1: 49TpwXNTbP9jREpz2sa2Jtt7mT4.roa (hash: 29rndF3r0S7bzK9ai7WqeiKlzm9ig1QMwR9Nz9BHg9o=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: t0WbmwgmEBs2BcmgG4Qj5JVmDMrFfexIBFg3bo8nitI=)
3: dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa (hash: GnpPZWGTVcUqisrQyyHLCMNBiEUZ8MM+stWTYBQynzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:29:81:be:8a:42:fd:0e:c6:0d:5c:66:71:d0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: May 13 01:01:14 2026 GMT
Not After : May 14 01:01:14 2026 GMT
Subject: CN=aa609280477ae05973e1a8ac57f3af2a7bdd5db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:b3:c1:66:9a:f3:bc:69:3c:eb:9a:de:cf:
d1:16:a0:f3:0c:02:fe:d4:71:d3:a8:07:07:1a:a8:
3b:70:81:db:17:6d:79:85:6b:8e:7a:08:8c:d1:61:
96:bc:35:e1:6b:ad:e1:f7:1d:a0:12:c7:f7:94:cf:
7a:ef:65:f0:20:7e:d9:52:9c:1a:e8:c6:f8:0a:87:
6b:f7:a1:c6:5c:20:38:78:85:58:cd:fc:f9:33:12:
ed:12:99:9a:90:72:ae:f1:d0:a5:4d:2a:9e:de:b3:
43:25:d2:9d:ea:28:cd:2f:fc:18:4f:21:39:53:d5:
c2:30:37:2e:3e:c4:b5:c0:2d:80:d5:8b:6d:5d:19:
ff:40:01:56:a2:a2:5d:c2:82:43:3c:a4:ab:10:1b:
52:11:d9:55:c8:36:4a:9d:40:e5:18:fe:4e:a8:02:
ed:93:6a:b5:f8:26:d8:30:61:35:8a:e8:45:71:df:
a3:bb:08:7e:fe:6a:39:36:2b:4c:f4:90:2e:05:a0:
48:41:cd:16:c3:f9:13:72:d1:72:01:a8:11:04:b8:
97:d4:93:53:ad:61:f5:60:78:b5:37:75:0a:61:6f:
a7:a8:f7:bc:5b:e6:c5:05:8c:db:39:1b:07:89:df:
22:f5:f5:ef:b6:43:98:37:b0:18:c2:b7:d0:a9:e8:
95:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:60:92:80:47:7A:E0:59:73:E1:A8:AC:57:F3:AF:2A:7B:DD:5D:B5
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a7:44:d3:eb:62:4e:ba:6a:92:9f:f2:6e:b6:0d:ee:11:41:
10:68:80:06:e4:6e:00:4e:8d:97:9c:5e:2a:07:23:98:49:44:
b8:bb:5f:09:0d:b9:91:fe:71:36:c7:65:d4:35:9e:93:38:c7:
f5:18:ab:48:1d:a8:99:0f:cd:e5:dd:bc:24:49:81:9c:c0:98:
03:3a:18:df:1c:7f:6a:c4:b9:7d:8b:14:22:7e:ea:cf:ac:ad:
ab:8c:97:11:0d:57:81:19:27:64:f5:6e:ee:28:31:fc:1e:96:
75:21:cf:2e:73:a3:ac:a5:94:31:07:dc:30:52:33:9e:83:04:
0b:22:d3:b9:18:7d:c2:62:c9:bb:66:dd:1c:0d:83:eb:cb:11:
e0:11:cd:d2:91:bf:08:7a:48:7d:00:36:79:e9:10:7f:9b:c6:
7e:78:98:ba:9e:f8:fb:2e:57:af:f2:ee:dc:27:09:c4:99:59:
26:df:89:b3:b1:60:af:22:91:e4:f0:f8:10:9b:af:42:7f:22:
4a:3f:4a:52:98:48:5c:f2:d3:bb:fd:af:49:75:a1:7b:eb:11:
47:83:19:01:1c:b2:3b:44:d1:e7:3e:87:b2:b4:6f:2c:42:84:
1f:c7:f3:00:9d:7f:03:73:ce:47:78:9a:64:2a:76:79:ba:79:
a6:c5:c8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:26 2026 by rpki-client