Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
File: sM7BwXmc5hUD-QithJCSD7iYlCo.mft (raw, json)
Hash identifier: Tb4usZXBZqcMCYIVgAvkmAM3suLeYrEHVuK0LRzLooI=
Subject key identifier: 4A:18:4F:85:2E:4F:F4:1E:91:9B:85:F1:41:D2:22:6F:B9:02:19:6E
Authority key identifier: B0:CE:C1:C1:79:9C:E6:15:03:F9:08:AD:84:90:92:0F:B8:98:94:2A
Certificate issuer: /CN=b0cec1c1799ce61503f908ad8490920fb898942a
Certificate serial: 019D33767777774FCE7D110D81733759BBBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
Manifest number: 0F
Signing time: Sat 28 Mar 2026 08:01:34 +0000
Manifest this update: Sat 28 Mar 2026 08:01:34 +0000
Manifest next update: Sun 29 Mar 2026 08:01:34 +0000
Files and hashes: 1: YbvUchYoA_bu09aSOz-6tMAAuU4.roa (hash: bjKWT2iklnBdt7HvATs3TG/mYrHaacKRb0DiNP6GNP0=)
2: sM7BwXmc5hUD-QithJCSD7iYlCo.crl (hash: 3exXw8M2xOo2pTn988+MWuOIy/82+U9L5pwB7DLMXeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:77:77:77:4f:ce:7d:11:0d:81:73:37:59:bb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cec1c1799ce61503f908ad8490920fb898942a
Validity
Not Before: Mar 28 08:01:34 2026 GMT
Not After : Mar 29 08:01:34 2026 GMT
Subject: CN=4a184f852e4ff41e919b85f141d2226fb902196e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:84:ea:fc:53:11:02:27:b2:b3:9d:c0:e9:
4d:d5:a8:6e:ce:db:60:7c:60:ae:c7:40:03:b8:cf:
69:fc:b9:61:e0:c9:ac:0f:6a:ff:91:58:f8:b4:62:
13:a4:6d:c8:36:38:a3:32:19:62:1f:9c:f0:1c:c6:
29:58:e4:0e:31:10:87:f7:13:7e:84:93:2f:d8:51:
85:ce:6e:29:9c:8e:84:c8:0a:02:af:10:79:6d:2b:
2d:a2:fe:f7:e6:21:e9:04:8c:d5:cf:02:a7:67:b5:
ac:29:80:58:2c:81:9e:72:9c:12:ab:b6:48:8f:2a:
6f:a6:6b:ae:d2:f5:67:f0:0d:67:ea:15:f3:dc:47:
a6:14:3c:80:50:2f:e9:f8:1e:e4:61:eb:16:cd:4a:
49:3e:25:81:43:0d:ee:05:85:e7:b8:37:77:8f:62:
0f:0b:80:7c:cd:0e:61:f4:95:07:f9:c9:86:de:50:
f5:6f:b7:99:b0:08:b7:04:23:f1:96:91:2b:42:04:
c5:bd:31:2d:68:61:08:59:a8:1c:be:5f:fe:89:30:
db:97:dd:33:81:33:a5:ba:f9:e6:5b:9b:0b:1a:d9:
5d:01:cb:f8:4f:3a:67:0b:27:c6:ca:6e:f8:f7:ba:
79:42:08:06:7f:9b:3d:79:12:e1:22:0f:ca:d5:e4:
e2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:18:4F:85:2E:4F:F4:1E:91:9B:85:F1:41:D2:22:6F:B9:02:19:6E
X509v3 Authority Key Identifier:
keyid:B0:CE:C1:C1:79:9C:E6:15:03:F9:08:AD:84:90:92:0F:B8:98:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sM7BwXmc5hUD-QithJCSD7iYlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/635888-6957-4bde-b158-4fe6727e9b25/1/sM7BwXmc5hUD-QithJCSD7iYlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:15:64:48:66:45:0f:96:4e:e9:8c:5e:b2:ff:0a:9e:a8:bd:
3d:55:fe:59:33:c0:39:23:ef:49:31:af:d9:f6:1c:d6:5f:de:
f9:24:39:d0:ce:2d:1f:a9:25:da:fb:a3:db:4f:ce:2f:56:64:
f2:a1:9f:5a:38:62:fc:d7:dc:68:b7:54:3b:0a:05:86:f8:4a:
66:f7:09:e1:74:28:e6:b0:ab:5d:74:17:f3:61:f4:21:26:03:
8e:49:56:60:9f:1d:dc:73:1c:cc:95:4f:9e:74:ab:42:72:f0:
0d:f1:1c:ad:7c:32:b8:23:77:f6:67:ce:82:86:cb:53:9c:49:
da:3c:20:38:c0:d2:58:8e:34:fc:22:e4:8c:8e:a7:bf:2c:39:
95:9a:a9:ae:e4:f4:83:1a:ff:cd:f7:78:0a:aa:ca:fb:e1:71:
3a:d7:49:30:e3:3d:33:c0:48:8c:35:b3:4e:e7:e9:5a:44:04:
57:e7:6b:b4:42:5f:22:2b:e3:0b:ed:62:ce:bc:0e:5d:f1:dd:
dd:78:ea:ab:39:fa:dd:5c:fe:d0:4a:86:1d:fc:ed:8c:ab:97:
b4:e0:fe:75:20:83:85:17:53:60:fd:f1:12:9b:e5:23:9f:fd:
81:dd:f0:9c:80:0c:c4:f2:ce:6b:59:9d:42:65:13:5f:9f:b9:
e4:1b:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:02 2026 by rpki-client