Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: mrllWubLS2MeZ4szGXBk7uaQSrdiiUBiomnywiTLreU=
Subject key identifier: 7A:64:5D:88:F8:9E:21:32:28:02:4E:76:DB:4A:4B:C7:72:E4:78:37
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 019F958066C9FA5238C141D3933E0BEE6931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 15F2
Signing time: Fri 24 Jul 2026 19:00:47 +0000
Manifest this update: Fri 24 Jul 2026 19:00:47 +0000
Manifest next update: Sat 25 Jul 2026 19:00:47 +0000
Files and hashes: 1: 49TpwXNTbP9jREpz2sa2Jtt7mT4.roa (hash: 29rndF3r0S7bzK9ai7WqeiKlzm9ig1QMwR9Nz9BHg9o=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: WVa+7bKGcdB+rQwY4lx8W7QaoNyWYTJzm1p22MOLT00=)
3: dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa (hash: GnpPZWGTVcUqisrQyyHLCMNBiEUZ8MM+stWTYBQynzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:66:c9:fa:52:38:c1:41:d3:93:3e:0b:ee:69:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Jul 24 19:00:47 2026 GMT
Not After : Jul 25 19:00:47 2026 GMT
Subject: CN=7a645d88f89e213228024e76db4a4bc772e47837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:f5:92:37:98:69:e5:13:61:ae:bf:84:08:
83:9d:3b:df:b8:63:bc:e9:50:0b:2d:ed:1c:0f:ab:
b0:1c:14:00:33:6f:4b:31:29:e9:4a:f8:56:36:0e:
22:d2:cc:f1:5e:f0:b2:a8:61:32:e1:e8:eb:1a:68:
dd:67:85:74:5a:ab:07:2e:1c:e6:d2:2a:80:01:6c:
21:a5:24:fd:71:14:de:e6:6c:5c:13:9f:3c:76:d4:
01:d2:3d:0e:c5:74:71:6c:26:f4:19:fb:25:7c:0b:
99:5c:53:56:b0:b1:b5:d1:0b:42:6c:3f:8f:29:ba:
12:35:73:03:59:ea:98:f6:35:4c:ed:c4:3f:b7:7c:
f9:c4:68:7d:e7:78:2b:08:e2:02:84:52:27:6c:2d:
9b:65:2a:44:29:88:99:61:8a:ca:71:83:63:a3:c1:
9a:67:5e:c3:ab:6c:d6:92:53:5d:47:df:51:74:7e:
fb:43:fa:ff:2b:b2:68:00:58:ff:d9:42:e4:a7:95:
aa:3e:13:8c:b8:86:9e:7e:a0:2d:ff:2b:37:2a:97:
7d:64:7f:fc:c6:df:73:bc:28:33:0e:c0:85:05:0d:
13:e5:2e:e6:6b:ba:8c:7e:b9:8a:ad:40:01:43:c0:
20:a7:03:86:e5:f9:84:ec:2d:58:23:3e:8d:cd:3e:
e0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:64:5D:88:F8:9E:21:32:28:02:4E:76:DB:4A:4B:C7:72:E4:78:37
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2b:72:60:7a:52:2e:f8:06:d8:2d:86:d2:10:3c:95:cc:76:
ec:f1:3a:40:e5:0a:0f:90:18:f8:f9:83:6a:c5:eb:b4:77:fd:
16:b8:db:c0:5c:d5:d6:6a:ec:a3:9c:e7:82:02:63:8e:4c:86:
c4:b0:42:cd:bb:4f:6f:3f:5d:95:2f:50:08:e6:ae:97:9e:41:
95:de:43:1e:41:46:e0:cd:c8:86:e8:d3:fe:b7:55:bd:c6:59:
75:ed:9e:c0:ab:0a:49:f5:de:4e:65:82:40:2f:66:76:79:af:
1a:ce:97:7c:ef:28:04:d0:eb:ed:d9:ea:83:a2:1e:5b:40:aa:
0e:a5:20:24:ab:fa:0f:cf:e1:cd:7e:84:0c:06:a8:39:33:e4:
7f:63:de:a3:03:84:d0:42:45:88:b8:7d:d2:9d:e6:e3:49:e6:
24:a6:3e:3c:f0:0f:64:e8:0a:fa:19:3e:e0:95:4d:c2:5e:20:
b9:13:49:cd:cf:17:d8:0c:42:1f:3a:c6:8b:73:85:e3:02:ee:
95:30:dd:f2:b5:1f:c4:db:01:ee:54:03:cc:40:5a:06:7f:fc:
4d:6e:43:0e:3b:54:9b:08:62:d3:8f:b4:10:d2:b3:c5:f6:db:
c2:96:84:c3:d8:8c:57:52:cb:4c:88:f5:02:a1:99:bd:42:33:
ad:de:fc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:12 2026 by rpki-client