Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
File: mpLTBwi51OjHwoyX-AN8gCcUTEc.mft (raw, json)
Hash identifier: QiyiV9r81YoSKYl+uLk4K9n9HUIalu7KV038bC8wrH0=
Subject key identifier: CA:7A:EC:D7:E8:A5:8D:22:20:EA:FB:A8:CA:6A:07:03:F1:00:14:2C
Authority key identifier: 9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
Certificate issuer: /CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Certificate serial: 019D273ABB8D9BC7B65A0BB77CD292B6A5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 23:00:53 +0000
Manifest this update: Wed 25 Mar 2026 23:00:53 +0000
Manifest next update: Thu 26 Mar 2026 23:00:53 +0000
Files and hashes: 1: _2TkYZ6m9S4gzCbJ7FSAH-2Y0_4.roa (hash: 29lPquUVvEOM2I/tYNxFjViie9vfaQqvcMnqW/106ho=)
2: mpLTBwi51OjHwoyX-AN8gCcUTEc.crl (hash: YjmKYHzL//SJHNJjBobvB9v/9VrinpmddojK6s/9A7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:bb:8d:9b:c7:b6:5a:0b:b7:7c:d2:92:b6:a5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Validity
Not Before: Mar 25 23:00:53 2026 GMT
Not After : Mar 26 23:00:53 2026 GMT
Subject: CN=ca7aecd7e8a58d2220eafba8ca6a0703f100142c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:3b:5a:15:c2:09:c7:9f:c0:f9:20:59:65:
07:88:a4:6c:d8:43:0e:51:58:17:1e:84:57:4a:14:
13:be:d0:21:b3:68:66:ad:4f:30:fd:37:dd:b7:59:
a0:f5:6d:c1:95:9f:a2:dd:30:5b:be:23:4f:57:fe:
22:ad:a8:8f:94:28:74:f4:a2:95:e8:02:71:49:4e:
0d:45:18:5d:fa:95:5f:fe:b1:55:d2:c3:89:17:63:
17:18:d6:0f:15:90:47:0e:85:5a:52:a9:0f:1d:db:
9e:8d:79:81:c5:b3:d6:01:e4:a4:49:48:c0:43:2a:
8c:33:d5:69:b6:95:8f:37:19:43:40:c7:db:61:c6:
0b:23:1b:e2:71:57:d8:b3:f2:83:3c:4c:a5:42:35:
a8:ee:57:3e:cd:84:a7:19:4c:37:8d:86:90:8d:ac:
10:8a:b7:5d:a1:93:1f:5e:32:73:78:5f:33:1d:85:
0b:e9:52:0e:b8:46:ce:d9:59:0e:b2:19:15:54:49:
76:f5:d7:ee:2a:3e:af:c0:bc:33:b6:24:9d:5b:5c:
ac:14:db:94:4d:fb:70:e2:18:ab:ea:cb:54:94:c6:
4b:7b:c8:05:d7:93:cc:55:7d:9d:4c:62:4e:04:02:
44:1f:ee:dc:7d:16:3a:2c:5f:b7:e7:30:14:3a:ad:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7A:EC:D7:E8:A5:8D:22:20:EA:FB:A8:CA:6A:07:03:F1:00:14:2C
X509v3 Authority Key Identifier:
keyid:9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:42:be:db:a0:5c:37:16:c5:0e:33:8f:6d:1d:10:f1:91:e6:
42:70:f6:75:54:cd:2a:71:36:0a:47:ba:76:33:da:0c:18:ef:
02:b6:2e:d5:ec:25:63:21:7d:68:ce:47:44:07:79:06:7a:d3:
82:14:29:0a:4c:01:fd:15:e8:6e:cc:ac:48:6b:c5:e8:5a:92:
13:ed:7f:48:48:de:b0:b8:b2:1f:0c:e9:ab:6c:c4:ae:9e:79:
79:6c:41:fd:e1:cd:e7:94:56:9c:ba:08:a2:a7:fb:b2:24:37:
e5:98:9c:bc:bc:ba:19:bd:34:e4:8a:d9:8b:de:ad:8a:3f:b7:
81:71:1b:d0:47:88:a9:9f:f9:e4:2c:67:a8:6b:89:18:8e:9f:
24:be:b0:5e:8b:4e:13:d5:65:92:60:d7:bb:77:d8:3e:76:f7:
8f:b1:fc:78:d3:1d:05:eb:34:48:db:63:4e:63:89:65:05:d5:
e8:61:c4:d8:29:53:37:df:78:d1:8f:03:c9:64:ec:30:68:e9:
50:f9:d6:77:e4:0c:9b:d0:8d:70:0c:e8:df:f0:60:07:57:9d:
44:49:ae:ab:46:21:b0:0a:1d:54:d2:7e:e4:6c:ce:06:b9:64:
3b:f6:6b:60:25:4e:bb:af:aa:28:30:7e:32:4e:90:52:76:89:
ea:fb:72:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:54 2026 by rpki-client