Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
File: RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft (raw, json)
Hash identifier: aMG7gf7Ea2bxUt11rSwP3tOTPbE228DoQ9qdW494mfU=
Subject key identifier: D8:6C:94:16:C0:E6:94:A2:5D:7D:9A:9A:B4:5D:3E:39:53:40:3B:16
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Certificate issuer: /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial: 01A0DB3AED86C7B0ADA89280C15D31B62ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 01:01:07 +0000
Manifest this update: Sat 26 Sep 2026 01:01:07 +0000
Manifest next update: Sun 27 Sep 2026 01:01:07 +0000
Files and hashes: 1: RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl (hash: kpALYt/FEc1VeHlu6HuZbYYz7qjeqGWL1VNMBu8qX98=)
2: mQOpqLaDGvgovaJyvLyQ5sBrw84.roa (hash: MhfMc5IHy7Q2RpMmEQc+IAMBkW+5nzpl9I5JKbxrZ6A=)
3: vKfh_-tsEstDK_pHiwP3rsQ6SOk.roa (hash: UDcDB4CQNfkJ685xuZBpEtrUZDLT9OaVBo1hay5J/3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3a:ed:86:c7:b0:ad:a8:92:80:c1:5d:31:b6:2e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
Validity
Not Before: Sep 26 01:01:07 2026 GMT
Not After : Sep 27 01:01:07 2026 GMT
Subject: CN=d86c9416c0e694a25d7d9a9ab45d3e3953403b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:36:30:76:96:1f:49:83:a0:94:1b:d5:08:
30:8a:7f:e1:36:5a:c1:4a:26:b2:93:70:49:e9:55:
b4:40:11:6d:52:10:76:0b:3e:cd:42:3e:82:44:c0:
62:e4:f7:f8:55:5c:bf:35:23:7f:18:21:b7:b0:e2:
99:68:fc:df:c4:7b:66:61:fa:99:6a:69:1c:e7:86:
c8:a8:63:8a:c2:be:71:38:25:ab:27:37:64:67:e7:
22:d5:0c:78:5b:67:d2:01:ef:df:fa:19:72:9c:e4:
43:a7:29:2e:2b:d1:b0:96:68:00:79:f5:07:81:64:
51:76:e3:c4:11:e4:8e:f1:04:56:c7:18:06:00:b2:
bb:de:ed:d3:cc:e7:3f:0d:60:e1:c2:83:17:d6:9f:
ee:c2:96:32:3c:89:4b:1c:03:c4:3b:08:74:ca:75:
a4:e7:2e:64:26:7f:3b:31:84:9e:8d:01:5f:cf:ed:
92:70:61:3c:4d:ee:37:bf:42:52:29:af:b0:9c:25:
d1:9c:6e:f9:87:13:a4:6f:a8:8e:00:b3:00:72:a6:
44:a0:32:38:1d:ec:89:55:31:b8:47:19:f6:1b:ca:
33:fc:b5:97:f3:36:ba:a6:07:18:f7:bc:8f:f4:bc:
f5:4a:c8:50:42:70:dd:b9:12:52:2a:06:98:92:0a:
6d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6C:94:16:C0:E6:94:A2:5D:7D:9A:9A:B4:5D:3E:39:53:40:3B:16
X509v3 Authority Key Identifier:
keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1b:56:f6:26:8a:00:e9:d5:d5:9b:9a:52:f7:6f:2f:67:ea:
f9:3b:b6:91:17:11:72:51:25:28:d9:30:26:88:45:dc:7c:46:
6d:92:10:07:ce:dc:52:89:ae:8e:78:5b:19:76:5e:a1:c8:c3:
4b:d5:1a:a8:10:ea:1f:63:41:05:8d:72:d3:e7:06:e0:67:05:
ba:3d:fb:8e:0b:bc:24:bc:9f:e3:9e:c7:43:cf:9e:f1:fd:fd:
86:c1:b9:e6:ef:e3:ef:24:d6:89:7c:e9:b2:eb:c1:62:b4:0a:
83:28:87:7a:df:57:7e:5b:86:cd:0d:4b:dd:1d:e9:9a:97:e0:
ba:35:07:ab:25:7a:01:e1:b5:3b:b2:84:12:0c:fa:ff:f5:4a:
7d:7d:42:d9:5b:7a:e9:04:28:0d:3e:d3:8c:6c:67:9c:71:c6:
3a:ec:d3:a2:70:90:6d:83:6e:03:f9:67:06:1e:0f:49:f0:02:
d1:d1:94:76:c0:0b:bb:12:d0:d3:82:93:a7:9b:eb:75:49:67:
a8:b3:94:57:89:11:a9:9b:74:c4:85:b0:93:f1:55:35:7e:45:
5e:52:05:57:5d:4f:ce:e7:97:24:15:a0:95:e5:66:9b:25:12:
79:91:8c:d0:15:f7:2a:47:c9:e1:64:6c:a3:04:d3:bd:76:8f:
ed:02:33:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:39:08 2026 by rpki-client