Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File: MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier: jOn0iBI3/dBj+uM4AwEnTPj7ixKy1cNwTOezm/eLeVY=
Subject key identifier: 7A:F5:94:61:CD:6C:68:74:F6:62:09:93:CE:FD:6C:53:7A:AD:B0:E6
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial: 01A0F1C3182EAE664AA1F611F9CD81ADA7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number: 0AF8
Signing time: Wed 30 Sep 2026 10:01:29 +0000
Manifest this update: Wed 30 Sep 2026 10:01:29 +0000
Manifest next update: Thu 01 Oct 2026 10:01:29 +0000
Files and hashes: 1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: Mi/eFc+Ju7+lEYnxr5c7i8oQk9jHIF8t+BLo/ucPeg0=)
2: zlryn4mko1wRxoOR9PxP0fcxrmE.roa (hash: AIH8NLSlPfR8dAuRGSz5mVvImvbLrLk/0uPHSLREnZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c3:18:2e:ae:66:4a:a1:f6:11:f9:cd:81:ad:a7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Validity
Not Before: Sep 30 10:01:29 2026 GMT
Not After : Oct 1 10:01:29 2026 GMT
Subject: CN=7af59461cd6c6874f6620993cefd6c537aadb0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:e0:0e:78:f8:24:ce:92:6a:f5:17:ca:82:
b1:3b:fb:c8:1b:e8:14:c9:d7:36:a3:18:7b:f7:df:
c5:d8:fd:53:8f:88:94:9a:c0:4d:62:d3:ea:6b:b4:
90:75:97:4e:06:c6:e0:5f:52:5b:f1:25:5a:b9:d0:
d6:8f:14:d2:5b:70:34:94:26:bb:87:88:2b:b0:c2:
ab:3b:5b:db:7a:e4:8e:08:25:74:23:e3:a4:9a:43:
5d:52:b6:db:7b:27:52:8a:80:42:3f:aa:0f:b6:d9:
d9:c7:bd:e6:09:0d:f1:0a:d9:67:b1:03:f2:06:ac:
73:ce:cb:e3:ac:c5:b4:e2:1a:d3:50:f2:7e:88:23:
a0:3b:5d:d3:b7:d9:dc:23:94:eb:4d:dd:88:2e:a1:
19:c6:34:06:a2:80:4a:2d:d8:7b:85:76:97:76:70:
1c:22:8e:c5:ff:e5:df:4e:55:be:05:69:de:8e:f5:
0c:70:f9:1b:8a:f8:98:9f:1f:41:41:6f:d6:97:c4:
b9:07:10:b8:43:a9:ab:a5:db:e6:83:48:cc:5b:a1:
70:87:40:26:73:a6:b2:b8:c4:cb:10:43:f3:27:15:
21:69:a0:d0:18:ec:9b:c4:00:36:90:56:bf:89:fd:
94:13:2d:5e:94:63:be:b9:16:81:11:81:19:c6:c2:
a8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F5:94:61:CD:6C:68:74:F6:62:09:93:CE:FD:6C:53:7A:AD:B0:E6
X509v3 Authority Key Identifier:
keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:02:e8:d7:cb:bd:09:2e:63:f4:ca:27:fd:5a:58:a1:2b:5d:
bd:5c:32:2f:fc:cc:8b:c5:08:75:58:01:a7:7b:a9:0c:0b:76:
51:3a:08:95:95:fc:4a:9f:d6:b7:da:63:8d:63:82:a4:ab:9a:
57:bb:4c:31:3b:c9:0e:60:ae:ff:21:0d:88:6e:5b:d1:c3:22:
a2:74:7f:b6:84:5b:cd:c9:94:04:21:7b:89:70:8b:11:28:8c:
a6:82:f3:36:67:0f:7d:01:28:6e:4c:4c:37:c3:1f:4e:56:c1:
56:fd:7e:0f:76:5a:7a:a3:17:29:70:c4:c6:5c:d0:3b:2b:e3:
f9:42:15:a9:b8:51:6a:50:cd:00:45:68:94:41:b7:75:54:0e:
51:f5:ba:98:c4:92:50:2c:9e:96:7c:81:8e:f2:bd:54:4f:ca:
15:78:46:3f:9f:31:df:c3:10:cc:08:b5:cf:b8:72:74:73:ca:
8a:f5:c2:f8:d8:42:66:6c:50:45:52:47:ca:ac:94:50:d4:ff:
96:a7:a8:86:2e:3f:dc:ac:b7:69:9f:39:5b:e0:9b:2b:15:49:
41:be:31:b4:19:3c:05:02:31:12:f0:aa:6d:5e:3d:4b:27:77:
3e:69:bc:d3:0c:4c:1d:2a:0b:59:2d:76:d2:e2:02:10:68:76:
30:bc:ba:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:10:39 2026 by rpki-client