Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File: MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier: a2TPOUeUxM60yBx/+eUGb8HTPC2WRGGlFRgsRJu1IHI=
Subject key identifier: 3E:5C:FF:85:E4:28:91:33:D2:4E:59:81:ED:CB:CF:DD:1C:30:98:9B
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial: 019D265EC904D4FD8CB665EAFD86B118960F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number: 0901
Signing time: Wed 25 Mar 2026 19:00:39 +0000
Manifest this update: Wed 25 Mar 2026 19:00:39 +0000
Manifest next update: Thu 26 Mar 2026 19:00:39 +0000
Files and hashes: 1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: uDC9yzr+VD6RJD7GdewWSfz4OY/8ywYVEhBB1xLTOFQ=)
2: zlryn4mko1wRxoOR9PxP0fcxrmE.roa (hash: AIH8NLSlPfR8dAuRGSz5mVvImvbLrLk/0uPHSLREnZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:c9:04:d4:fd:8c:b6:65:ea:fd:86:b1:18:96:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Validity
Not Before: Mar 25 19:00:39 2026 GMT
Not After : Mar 26 19:00:39 2026 GMT
Subject: CN=3e5cff85e4289133d24e5981edcbcfdd1c30989b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f1:55:22:f5:d4:6f:e3:8d:0d:f4:61:22:80:
43:5f:b6:27:64:b4:0a:94:7a:a2:9f:5b:fc:f0:1f:
a0:a3:88:32:16:ab:a2:47:cd:8a:7b:cf:52:a0:c9:
ee:81:df:ef:38:bc:70:a4:0c:70:7e:a5:81:50:69:
ec:7e:df:3c:77:56:d9:c1:59:13:f4:9e:e2:88:6d:
c5:ec:d9:aa:26:47:d7:33:a7:1b:a8:93:44:1f:5b:
93:6b:40:a6:57:14:b4:af:2a:5e:f4:24:08:a4:4b:
30:a9:c9:e0:cc:56:ef:67:17:eb:18:71:94:59:5f:
c0:f8:f0:1c:54:af:f4:42:d9:3c:d8:5d:01:15:ae:
fa:1e:60:7b:74:86:1a:26:d8:d3:38:f5:1a:00:82:
57:9f:d3:76:02:c8:44:12:5f:ba:73:b0:2a:32:61:
50:e6:0b:25:cc:92:ea:9f:4e:f8:37:ca:fd:c2:36:
ca:e7:09:1b:5f:ac:a8:fa:2e:50:f9:1b:d9:9b:43:
29:f5:a9:70:52:70:e1:77:c9:f2:a8:f3:ea:f2:17:
60:a2:a4:92:1d:6b:73:7a:f1:ff:d6:79:b4:62:3a:
53:58:7a:e9:33:02:6c:be:a3:17:69:36:4a:5e:64:
d5:f0:8f:3f:fd:96:d2:90:a1:b1:4d:3a:68:00:a3:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5C:FF:85:E4:28:91:33:D2:4E:59:81:ED:CB:CF:DD:1C:30:98:9B
X509v3 Authority Key Identifier:
keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:4d:1d:96:71:06:d7:4e:4d:01:22:bc:bb:f7:8a:50:43:a0:
2a:db:03:0b:32:49:72:bf:da:e1:1e:80:c0:eb:56:15:df:20:
e4:53:09:c0:33:ea:95:eb:dd:2c:4e:4a:f8:d0:b0:1a:81:dd:
31:8a:8a:61:be:9b:8a:7e:c2:9b:e2:bc:fc:44:31:36:ed:7a:
a7:84:5c:18:5f:28:75:0f:cd:b7:a6:df:33:c6:ec:22:8e:62:
b1:ce:a2:26:5f:20:4a:c6:de:71:f3:4a:67:56:60:1c:42:66:
3e:6f:8b:48:0c:62:e9:f7:d8:1d:51:de:97:0a:d8:fb:24:00:
39:17:5b:4d:a4:07:53:fd:a0:86:cd:95:f7:f4:a5:d2:5b:ac:
fc:c2:9b:63:c1:fe:e9:9c:b5:6d:da:d8:61:a4:f9:93:fe:35:
0e:28:f7:1a:f9:0f:21:14:cf:44:a8:58:96:fa:a1:60:15:41:
13:c4:a9:94:76:df:ff:61:b9:a3:47:5a:29:45:d1:33:0a:08:
43:b7:69:fd:c9:f3:b5:ca:a6:9c:f8:ae:9c:b2:74:a0:05:e8:
fb:21:78:3a:b5:a9:29:db:e7:e0:23:30:04:cc:4f:ce:07:d8:
3f:a8:61:79:bc:16:89:4c:ce:99:04:02:12:13:c7:ec:52:5a:
ce:0f:80:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:31 2026 by rpki-client