
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File: MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier: 0W6onu3KhlElJ2LWWFFRzrrzbV5PFcPrQQ+a2hED8Ew=
Subject key identifier: 83:74:FF:FE:02:EA:F1:EF:A2:74:A9:54:55:58:E8:CB:7E:CD:B9:02
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial: 019CACB49D80DBCF18063CAEA54B2577DAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number: 08C2
Signing time: Mon 02 Mar 2026 04:00:43 +0000
Manifest this update: Mon 02 Mar 2026 04:00:43 +0000
Manifest next update: Tue 03 Mar 2026 04:00:43 +0000
Files and hashes: 1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: KuCuoS/sKWrmmsXKjN3Z/NUCxOn5XMxxCX1ZH028v50=)
2: zlryn4mko1wRxoOR9PxP0fcxrmE.roa (hash: AIH8NLSlPfR8dAuRGSz5mVvImvbLrLk/0uPHSLREnZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:9d:80:db:cf:18:06:3c:ae:a5:4b:25:77:da:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Validity
Not Before: Mar 2 04:00:43 2026 GMT
Not After : Mar 3 04:00:43 2026 GMT
Subject: CN=8374fffe02eaf1efa274a9545558e8cb7ecdb902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:79:06:3c:17:00:61:ea:22:b9:0f:67:b8:
b0:c5:3b:bf:68:1e:eb:2c:c0:8c:49:eb:67:db:2e:
ed:00:38:89:4c:65:fb:3f:c0:61:7f:79:06:a6:37:
1e:97:40:bc:16:8c:9b:1c:dd:78:59:a1:78:39:0b:
b2:6b:c8:e6:75:93:bb:8f:a4:55:55:0f:6b:e8:8b:
73:cc:5c:30:0c:4f:0d:4e:b4:7d:4f:71:78:be:15:
ae:20:69:fa:f5:a1:24:43:15:48:43:a1:93:9f:78:
22:da:41:96:1c:2b:e2:47:f3:ca:53:d1:c5:10:ac:
f5:19:da:32:bf:47:a2:3b:e2:2d:00:d2:62:e4:9a:
42:ff:33:91:8d:fe:a3:b0:2f:56:20:2a:e4:51:a0:
e1:13:3f:af:ff:fd:18:99:10:da:99:20:95:44:d2:
13:6d:bc:a0:2e:3f:6a:a5:b0:d1:43:da:8a:18:fa:
1b:89:8b:05:e5:86:6f:43:85:92:9f:b4:ab:8f:68:
90:4b:ab:30:f2:e2:e5:c6:a5:30:25:a8:54:ce:20:
e5:06:df:f5:50:2f:7d:63:8e:af:79:ff:5f:cf:e5:
48:b8:77:18:9d:fe:e8:ca:59:60:0c:72:c2:79:36:
6e:d8:7c:bb:6e:e1:b4:c8:ac:c6:53:31:eb:a6:d1:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:74:FF:FE:02:EA:F1:EF:A2:74:A9:54:55:58:E8:CB:7E:CD:B9:02
X509v3 Authority Key Identifier:
keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:71:c2:c6:bc:ab:cd:e4:ab:1b:fa:ed:12:d7:b0:40:37:b6:
83:17:b0:93:f1:be:73:72:f7:e2:91:67:3d:a7:88:41:9d:60:
23:aa:1d:c5:cf:a4:e7:7b:43:3c:62:63:59:c0:90:ce:f0:73:
89:27:2f:b0:5e:d8:5d:68:2c:65:28:e7:17:62:b3:99:ac:4e:
57:d3:4e:89:16:0d:82:d4:1a:8a:a5:0e:6c:61:de:b8:e6:8b:
47:f3:5b:f4:b9:29:1f:9e:26:c3:2c:2d:f8:93:59:3f:6e:de:
a1:0f:63:7e:9c:97:8f:35:27:b7:ad:3d:c4:4d:d6:e3:95:a0:
f5:b9:3b:70:60:90:ed:af:60:98:36:1f:31:39:4e:7c:d4:22:
1b:d2:ba:01:9e:c9:c1:ee:7c:ab:fa:52:c0:b2:ab:f9:95:e2:
86:cb:40:40:f1:43:11:87:16:d6:0c:2b:45:cc:53:73:a3:77:
23:de:db:2c:d3:46:f6:4f:39:9f:2f:4f:c2:9c:af:2b:03:87:
c7:17:60:b1:75:c9:e1:a4:2e:31:61:b3:11:bb:31:da:d6:60:
05:07:49:ef:f5:89:92:41:6a:45:0b:bf:cf:1a:5d:5b:4f:bf:
ba:eb:a8:e0:42:51:10:ab:ab:66:31:4f:50:ca:50:cd:6f:e7:
f9:74:62:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:37 2026 by rpki-client