Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File: MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier: SXrnH9I+G6uu8gUFQU//j7qWzMadtZr+52vrgmuqEi4=
Subject key identifier: C3:11:CE:E9:57:15:61:00:94:02:35:7C:57:73:63:5A:1F:D0:E1:B7
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial: 019FAB63224AC03516DC369ADEF6BAA1CA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number: 0A4F
Signing time: Wed 29 Jul 2026 01:00:28 +0000
Manifest this update: Wed 29 Jul 2026 01:00:28 +0000
Manifest next update: Thu 30 Jul 2026 01:00:28 +0000
Files and hashes: 1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: jAHmLPEVKGevpjpFoiLNPpNEyYCJgWdT58F552dYTDE=)
2: zlryn4mko1wRxoOR9PxP0fcxrmE.roa (hash: AIH8NLSlPfR8dAuRGSz5mVvImvbLrLk/0uPHSLREnZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:22:4a:c0:35:16:dc:36:9a:de:f6:ba:a1:ca:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Validity
Not Before: Jul 29 01:00:28 2026 GMT
Not After : Jul 30 01:00:28 2026 GMT
Subject: CN=c311cee9571561009402357c5773635a1fd0e1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:58:72:7c:ee:2b:62:01:4a:ff:51:b8:4f:
3e:21:00:05:07:45:4b:a2:08:19:22:31:4f:b1:a5:
d5:3c:74:bd:da:39:a5:19:dc:49:b0:07:70:89:e6:
46:10:0d:68:0d:c3:5b:3a:4a:69:38:7d:71:ec:4e:
d9:60:37:55:64:3a:f3:98:2c:2b:ef:a1:c4:0b:60:
34:a4:a6:b1:24:98:48:fc:f5:ad:da:99:c0:9d:d6:
6c:1a:7c:3f:a8:d5:22:1d:f5:ff:cc:85:64:9e:31:
b9:43:f7:4d:0e:49:4a:ae:fe:d6:60:1c:8b:ab:da:
05:af:fe:e8:7e:d6:86:04:e2:dc:ad:c6:aa:f9:33:
61:07:0f:96:94:0b:96:f8:e8:22:89:4c:d0:07:63:
cf:1b:fa:cf:30:54:d8:f7:33:ca:cb:20:1b:dc:26:
33:54:58:bf:ad:99:8b:07:02:19:77:46:0a:27:f5:
54:c9:24:ef:eb:03:9e:fc:1a:a9:af:c4:34:f1:69:
b4:cf:72:42:2b:83:c4:4e:d0:48:a0:a2:73:71:7b:
0d:67:61:77:df:85:e9:db:d7:17:90:c8:fa:5f:0b:
05:d2:cd:8f:4e:b1:da:32:28:49:53:06:de:99:f1:
ca:69:a0:f4:33:00:a1:a9:11:d9:76:dc:36:13:c2:
b3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:11:CE:E9:57:15:61:00:94:02:35:7C:57:73:63:5A:1F:D0:E1:B7
X509v3 Authority Key Identifier:
keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:27:67:9a:0a:6f:c9:ff:ff:64:ce:3d:49:f3:fc:02:06:85:
39:89:9c:b0:3f:b4:2f:53:46:8d:b1:ab:55:6a:b5:d0:a8:57:
44:cc:57:62:f0:3a:1c:92:66:29:90:96:16:1e:cd:4c:fc:19:
47:9c:97:c4:a4:7e:6c:35:58:1f:06:39:b8:9e:78:81:83:d2:
df:46:b5:94:9b:a6:eb:9f:34:e3:97:06:59:09:6f:64:db:a7:
cd:cd:39:7a:29:a6:02:a5:92:77:cc:99:fe:a3:32:8a:1b:ec:
b2:14:54:87:9b:4f:1a:35:f0:a1:35:f3:27:67:50:95:6d:39:
e0:25:74:77:2c:9f:97:0f:41:2d:9b:59:67:b7:cf:a9:c6:42:
89:6f:bb:22:a7:bc:a2:97:1b:53:a9:3f:fb:c7:60:47:6a:95:
18:9a:4a:36:04:f4:28:34:3c:cc:27:e3:23:1c:f4:2a:5c:ec:
8d:fa:9e:dd:27:c7:11:b0:07:e4:b9:5f:2a:cc:cb:8c:6b:b4:
e3:16:10:3f:7d:83:f1:0a:58:6c:3a:10:c4:c3:f9:59:b1:54:
53:55:a2:9c:8e:0e:af:e2:b6:73:3d:a8:08:05:bd:b9:a0:08:
81:0a:b3:cc:04:82:aa:f2:32:f0:fc:86:64:5e:dc:a4:e7:c0:
f6:09:fb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:57:18 2026 by rpki-client