Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
File: RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft (raw, json)
Hash identifier: UyDd99k6JTnSHpYhyrUi4LsaVrjDotEMeJDuYHPX7l4=
Subject key identifier: 7E:32:6A:64:04:57:99:F7:B8:92:B1:A6:A2:63:AD:05:80:BF:3E:AA
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Certificate issuer: /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial: 019D2704ADAD367FA22E06FD8949C240B147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:01:51 +0000
Manifest this update: Wed 25 Mar 2026 22:01:51 +0000
Manifest next update: Thu 26 Mar 2026 22:01:51 +0000
Files and hashes: 1: RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl (hash: fwJajrxIjudf16ilXAgWYq/AZX2WBu8nFpDkiDkNKaQ=)
2: mQOpqLaDGvgovaJyvLyQ5sBrw84.roa (hash: MhfMc5IHy7Q2RpMmEQc+IAMBkW+5nzpl9I5JKbxrZ6A=)
3: vKfh_-tsEstDK_pHiwP3rsQ6SOk.roa (hash: UDcDB4CQNfkJ685xuZBpEtrUZDLT9OaVBo1hay5J/3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ad:ad:36:7f:a2:2e:06:fd:89:49:c2:40:b1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
Validity
Not Before: Mar 25 22:01:51 2026 GMT
Not After : Mar 26 22:01:51 2026 GMT
Subject: CN=7e326a64045799f7b892b1a6a263ad0580bf3eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:df:6c:54:7b:58:30:e2:72:d3:f9:85:10:
02:93:59:45:27:c4:f9:91:92:81:27:6b:b8:2a:7f:
5f:0c:11:e0:f6:3b:d6:6f:39:f0:d1:e3:a5:6b:17:
da:f3:7a:76:dc:eb:04:7c:dd:6c:ec:49:3b:cc:ba:
bc:51:40:62:11:96:46:10:2a:ea:62:b3:8f:55:b3:
3c:91:f2:f7:5f:be:01:99:86:da:e0:bd:ae:1e:aa:
d1:a9:31:92:a1:de:5c:5c:bf:00:8f:dc:b0:cd:bb:
6f:24:46:be:f0:78:06:28:9d:f8:5f:38:22:9d:10:
a2:73:60:6a:b2:4c:c6:3d:b1:82:08:fa:ee:fd:76:
0e:f2:f6:1c:21:35:d6:1f:c8:fa:d5:ee:e1:2e:83:
58:5e:8b:8b:c5:d5:0c:26:20:4e:61:19:12:36:f5:
99:44:d8:df:b7:7f:d7:ce:18:66:ea:db:a1:25:4c:
69:5f:42:e6:b1:b5:94:83:5c:03:75:2d:0d:38:f1:
b5:40:38:92:10:14:88:3f:96:d5:8a:3d:89:42:e4:
af:c1:3b:fe:94:65:08:b8:56:e7:d4:af:e9:49:f8:
75:66:b4:7d:99:6c:fa:9f:0b:db:58:9f:a5:35:30:
39:f9:22:95:e9:0f:d1:d9:48:e6:8f:ff:1f:3f:70:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:32:6A:64:04:57:99:F7:B8:92:B1:A6:A2:63:AD:05:80:BF:3E:AA
X509v3 Authority Key Identifier:
keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:05:34:ea:85:38:90:3d:33:95:a4:29:92:fa:f1:52:64:41:
58:b7:71:f5:8e:b6:10:db:32:46:9a:d2:4f:8c:f7:84:19:25:
39:f6:0d:e7:bd:1d:a0:b9:97:54:37:ca:e5:aa:67:ab:b3:55:
0d:4d:19:bc:83:28:a5:5b:47:78:ce:98:1f:0c:f3:8b:cd:77:
7c:b2:12:f2:47:c1:bd:52:09:54:94:b0:e1:ab:b3:fc:58:b6:
95:01:82:91:fb:ac:18:a3:58:1b:7a:5a:3a:65:71:91:51:9b:
b0:96:7c:16:7f:47:20:22:2a:d8:52:16:13:df:18:a2:b1:c7:
ce:d7:7a:e3:03:c1:fb:7b:05:ae:3a:dc:60:5a:9a:a6:78:29:
80:2e:5f:09:93:91:3d:18:3f:3c:b8:0d:9e:dd:71:c0:f7:a3:
5f:64:05:90:f4:04:b3:43:8b:92:b0:2b:4d:d0:35:18:03:c3:
c8:0a:3e:5b:5e:eb:62:94:e1:88:ba:97:24:70:6f:d1:72:68:
36:56:55:82:5e:db:94:7b:85:80:7f:71:ac:6e:cb:ef:41:d1:
f9:cc:ef:ca:81:46:e9:5e:df:7c:ea:44:86:9d:ed:23:3b:eb:
10:20:30:8a:5a:57:f9:87:87:cd:bb:37:ef:85:ed:78:07:2e:
fb:9f:e7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:35 2026 by rpki-client