Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: nkwXTgorf2VtlLoJ9ngL/6esyLHPXWwl+ftRnSY6XHc=
Subject key identifier: 79:EB:9A:13:59:5A:C1:4C:D1:2C:34:89:89:7B:97:34:5C:F1:25:37
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 01A0D9F14C375D552E508F7277D65EAB3A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 169A
Signing time: Fri 25 Sep 2026 19:01:04 +0000
Manifest this update: Fri 25 Sep 2026 19:01:04 +0000
Manifest next update: Sat 26 Sep 2026 19:01:04 +0000
Files and hashes: 1: 49TpwXNTbP9jREpz2sa2Jtt7mT4.roa (hash: 29rndF3r0S7bzK9ai7WqeiKlzm9ig1QMwR9Nz9BHg9o=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: IlMUmFEViBafQ4RoIPqVOh6Oqorvb+rMdVyM+F0EaRE=)
3: dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa (hash: GnpPZWGTVcUqisrQyyHLCMNBiEUZ8MM+stWTYBQynzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:4c:37:5d:55:2e:50:8f:72:77:d6:5e:ab:3a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Sep 25 19:01:04 2026 GMT
Not After : Sep 26 19:01:04 2026 GMT
Subject: CN=79eb9a13595ac14cd12c3489897b97345cf12537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:88:89:bc:b5:67:7d:98:26:b9:73:7d:90:
bd:15:9e:c4:9c:f6:57:99:38:9c:4c:c9:98:4b:df:
ba:37:83:da:32:83:cf:ce:9e:95:a3:73:cf:71:46:
46:74:61:db:44:f6:74:51:46:e4:9c:02:03:d8:db:
c9:06:dc:67:04:a4:78:e2:43:d9:11:3c:f1:2f:b6:
f1:c2:59:4d:6c:6f:45:fe:1d:59:a3:80:f8:e4:4b:
46:b0:41:95:72:12:78:a4:f1:5b:fd:ac:aa:0d:cf:
8a:bb:fb:66:1a:40:5d:e8:21:12:3e:b2:aa:81:21:
d2:3a:c5:55:33:e8:ab:67:fa:31:54:0a:08:d3:98:
44:d3:5e:fd:3b:25:91:65:05:e7:2b:ca:4a:54:55:
47:c9:7d:22:d1:bf:00:30:1e:14:17:2d:d3:8d:57:
90:97:60:53:e1:f2:a8:22:02:f6:52:93:e6:4c:30:
c8:c0:18:1c:03:c7:a9:54:f6:a0:8c:5c:c6:90:58:
cb:b7:40:d2:ed:15:7a:fe:e6:ef:42:fc:71:43:58:
8c:af:82:7f:79:74:6f:fd:4c:76:fe:62:48:68:c9:
5e:af:7f:03:5c:01:ca:ae:3f:18:ae:6f:5a:83:4c:
2c:d1:6d:c9:51:90:38:be:fc:c7:30:e2:0c:57:0c:
7e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EB:9A:13:59:5A:C1:4C:D1:2C:34:89:89:7B:97:34:5C:F1:25:37
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:19:26:2e:a7:b3:16:28:70:a7:d5:95:13:51:23:c3:3f:b1:
f3:11:07:c4:88:52:e1:d8:a4:ce:e1:a4:89:9c:fe:4a:80:35:
7e:19:0a:9e:b5:d0:b5:ab:5e:fb:b3:dc:07:10:ee:7f:02:9b:
40:4e:5a:cb:24:07:63:4f:38:fc:85:62:29:41:04:4f:4f:6d:
f7:99:64:c1:06:86:15:5f:a3:3c:84:74:79:89:b5:47:ca:66:
07:90:59:ad:78:04:6a:e1:85:e3:2c:8f:ee:60:2e:d4:95:9d:
89:87:17:ec:9b:21:a6:1f:52:a9:67:e3:7d:90:22:aa:70:4c:
68:fe:c3:b3:43:2c:5f:d1:23:f6:e6:53:19:41:81:5b:f3:04:
ce:bc:41:47:9f:12:95:83:89:b1:fd:7d:c2:31:cc:f9:a0:fa:
9a:a3:0c:9d:71:1a:96:a2:42:4c:f3:ae:f1:0e:7c:52:fc:e0:
e5:81:35:18:f4:6c:85:c6:9c:57:52:3d:8a:4a:9f:36:af:8c:
24:f9:38:80:3d:a7:6e:1e:54:d8:9f:c5:9c:ba:3d:2e:c2:ae:
48:d1:f2:6b:44:f1:60:71:60:96:9e:dd:97:18:d8:c8:7d:b1:
06:2d:ad:3d:cb:61:15:85:fd:e5:1c:72:a1:3d:3e:81:38:8c:
39:1f:6c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:19:15 2026 by rpki-client