Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
File: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft (raw, json)
Hash identifier: JKV9q8AqY031SHsEjZfj7vpAPb23qMYdkSD4heq+oyE=
Subject key identifier: F9:C0:91:FD:B3:A3:BC:04:DD:83:DD:43:90:31:3B:E0:51:17:EF:68
Authority key identifier: 9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
Certificate issuer: /CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Certificate serial: 019E1CEC050DC147740606A480F177EB0E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
Manifest number: 0F19
Signing time: Tue 12 May 2026 16:01:30 +0000
Manifest this update: Tue 12 May 2026 16:01:30 +0000
Manifest next update: Wed 13 May 2026 16:01:30 +0000
Files and hashes: 1: Q-ONeNtmD3ybAzTUMhGC9MjTNNo.asa (hash: okiWGqJS235fCpGNLndRTcJ9gZ0cQPFcyQUgRG2jzsY=)
2: SvxCrHRH9qtDgRtKCtLQ9Vh4GMg.roa (hash: hh/DbdPPGnpvcaZfF2CgRTxk6vKo3UGb19IP1Aj8Lm0=)
3: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl (hash: 5C1SzToC8eFKRruV3UmBGyUCyFyv4rSurnfEYC5Rruc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:05:0d:c1:47:74:06:06:a4:80:f1:77:eb:0e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Validity
Not Before: May 12 16:01:30 2026 GMT
Not After : May 13 16:01:30 2026 GMT
Subject: CN=f9c091fdb3a3bc04dd83dd4390313be05117ef68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:64:2b:bd:7c:05:a2:15:d2:5f:10:dc:66:
25:1b:09:53:bf:2b:7f:cf:a4:49:5a:e1:9f:05:14:
36:df:9a:0b:67:35:74:74:50:6e:5b:b2:df:0d:55:
fd:da:c7:b4:55:20:d6:7a:1f:c5:99:12:44:54:a1:
7a:78:c1:eb:4e:f5:b3:fa:92:1d:3b:bf:3c:ad:03:
33:c4:82:fb:c9:ec:93:1e:ef:d1:f1:96:51:bc:db:
8d:9c:23:75:94:c7:87:64:01:38:72:b0:c6:6e:16:
71:d4:38:10:9a:f1:d9:7d:46:17:01:f7:85:52:33:
43:33:5b:3d:dd:5a:1a:e1:c0:75:e3:f8:8e:15:26:
31:21:be:42:92:0d:45:15:c9:81:fd:d9:2e:f4:ca:
d9:d7:93:b1:fb:1a:d7:86:dd:2e:64:1b:f7:05:ee:
88:39:c9:12:f9:63:b5:66:53:58:f3:83:cd:4e:0a:
30:db:1f:35:e8:d8:0f:f5:26:78:33:85:74:5f:1e:
f7:f0:cd:96:77:63:17:65:36:92:17:90:3d:e2:bf:
9f:c0:45:62:40:7f:e6:c2:01:67:88:61:1b:08:00:
ec:eb:17:92:0b:3e:98:0f:9c:d4:d2:6d:8b:2f:f5:
17:a2:97:9c:76:2f:ba:9d:a9:d2:d6:1d:c1:25:ec:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C0:91:FD:B3:A3:BC:04:DD:83:DD:43:90:31:3B:E0:51:17:EF:68
X509v3 Authority Key Identifier:
keyid:9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:16:f9:5e:66:06:fb:40:d9:3d:58:59:ca:25:cc:07:79:75:
b0:30:ad:5a:d0:f8:0a:39:d1:42:62:84:50:ee:95:2d:6b:f1:
76:68:b0:29:7a:e3:b5:0c:f3:87:07:ba:46:56:c1:ff:7a:e1:
77:60:7f:e2:ec:a2:7e:cb:3c:78:ad:cf:a9:b8:a9:b3:16:16:
74:4a:eb:92:22:67:73:f9:17:7d:c5:d7:e7:9d:1f:16:1d:68:
fe:ae:fa:67:ec:bb:84:37:c8:d2:f3:03:22:03:14:ca:12:0c:
73:6d:65:09:f9:a2:b1:98:94:ad:58:2f:c0:0c:02:ad:b7:3b:
a5:f3:04:d5:15:c6:10:a5:36:46:0b:79:86:97:2b:8c:39:07:
49:35:b2:18:ed:34:98:ae:2f:c6:12:fe:ea:0b:07:eb:db:a8:
bd:e2:99:95:11:2b:55:5f:c7:46:e8:be:ff:e7:13:f2:01:a8:
88:87:be:8d:01:0c:46:4d:55:71:05:02:35:c9:2f:80:60:00:
0e:46:57:74:71:fb:69:8a:9c:96:1f:6c:d8:ce:4d:a5:fd:a8:
f9:44:17:d4:40:38:f5:1d:9e:6a:94:3a:4b:42:9a:29:77:a2:
65:6f:3f:28:cb:77:85:6b:ec:6f:a7:cf:36:6b:21:5f:c5:6e:
16:c5:79:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:29 2026 by rpki-client