Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
File: moBTvNLE2KeioyXit0ZBZqXkjd0.mft (raw, json)
Hash identifier: kRxAuAWZa9XxCtE9b0G2qgGghTjqQxSAam3cVvfqKM4=
Subject key identifier: 02:AA:72:30:23:13:8E:46:06:CF:A1:B0:48:AD:C3:61:A6:FA:48:24
Authority key identifier: 9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
Certificate issuer: /CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Certificate serial: 019D2703E47534980A3BA3EC1A37C4C148D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
Manifest number: 1312
Signing time: Wed 25 Mar 2026 22:00:59 +0000
Manifest this update: Wed 25 Mar 2026 22:00:59 +0000
Manifest next update: Thu 26 Mar 2026 22:00:59 +0000
Files and hashes: 1: Eh8M9ZVEjYr91zbyjbSRX3Je80k.roa (hash: BvnUBjZ0Rmp8dq9AlybMB3qp6U0u9VozkYMYIwmfNCc=)
2: moBTvNLE2KeioyXit0ZBZqXkjd0.crl (hash: CpYvpSzqsLycef/XnSaFCIiq1TGdwP+QOo/DR9x9Gko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e4:75:34:98:0a:3b:a3:ec:1a:37:c4:c1:48:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Validity
Not Before: Mar 25 22:00:59 2026 GMT
Not After : Mar 26 22:00:59 2026 GMT
Subject: CN=02aa723023138e4606cfa1b048adc361a6fa4824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:29:c2:f9:25:c1:50:9e:e2:5a:9b:e3:c4:f5:
9b:d6:c0:01:7f:b5:f7:ab:24:20:e0:af:be:fc:d5:
bf:d9:9a:05:1b:5a:a5:43:ca:a7:2c:2e:18:3b:21:
61:1c:22:58:a5:4e:89:d9:b3:86:77:c4:db:ef:fb:
3e:47:ff:81:06:4f:2f:e6:cb:ae:94:3a:b9:1b:be:
84:1a:0e:b1:8c:5a:ca:65:7a:4e:e1:ef:33:1d:67:
f4:68:32:ad:47:08:3b:3d:50:32:8a:4c:31:fb:73:
3d:76:a3:64:e7:52:5e:c4:e0:b6:f7:5c:81:1e:4e:
1b:ff:34:59:b3:94:bf:aa:04:4b:e8:e9:63:03:44:
03:ce:6a:45:da:78:28:3c:09:63:90:ff:b5:6f:dd:
57:01:62:52:2f:51:fd:c8:4e:43:cf:0d:ef:47:ea:
71:23:57:60:69:2a:8a:1c:31:a5:d8:ad:c1:03:7a:
aa:96:c0:54:ac:d4:fd:7c:af:8c:0f:50:1c:fb:93:
6b:72:20:cc:11:e0:ee:1f:bd:6e:4e:29:63:c5:f5:
c5:a2:12:1d:3f:f4:bc:d6:e4:c5:34:7e:75:16:a0:
b9:fc:96:00:18:fc:dd:63:29:40:36:ec:5b:ea:83:
f9:65:b4:de:76:ba:dc:af:82:68:c7:aa:e0:f6:bc:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AA:72:30:23:13:8E:46:06:CF:A1:B0:48:AD:C3:61:A6:FA:48:24
X509v3 Authority Key Identifier:
keyid:9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:05:59:3e:09:4f:6f:de:79:18:e6:72:e1:e5:0f:c7:b7:a6:
f3:5d:3e:b9:21:c3:60:1b:9c:1b:21:5c:ff:4c:34:7a:f2:16:
d3:05:c2:c0:22:84:39:70:a9:e7:b1:c9:5d:ab:f8:d0:6b:da:
de:17:1b:14:aa:3c:af:1f:21:f6:89:79:90:75:f2:0f:2e:56:
a1:60:89:93:f2:bb:98:b6:ea:28:28:c9:00:03:d7:0f:de:8a:
25:fa:0f:9a:55:55:ed:ac:0f:3a:33:da:78:dd:14:53:bd:ea:
df:eb:cc:05:48:f9:0c:68:63:d6:43:d1:ae:5f:41:d7:e2:97:
e3:70:67:b7:0c:62:49:a5:b6:cd:71:e6:e8:51:8d:a8:30:fb:
ef:a1:73:5a:81:0f:88:a8:3b:47:7d:d9:0f:a0:41:cd:a3:5b:
86:38:ca:db:04:54:d8:72:ec:eb:9d:3c:9f:1f:da:eb:ae:f2:
1b:f8:78:fa:86:9e:a0:39:68:b4:21:c9:ba:95:ca:7d:e9:02:
38:27:bf:5a:92:e3:15:b5:a4:c3:60:d3:fe:47:ee:d0:24:d2:
df:99:d3:b1:4c:33:d2:64:be:e6:a2:3b:ab:9a:d6:26:2f:37:
e6:f1:eb:db:7e:e4:89:43:3a:91:f3:e2:2c:f6:1a:db:06:a4:
b5:7c:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:30 2026 by rpki-client