Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
File: moidBLkf1wkovxGCfAlEQhytSjQ.mft (raw, json)
Hash identifier: b+gKNQiKJvxvk5DEv+xaC4At9D+gtuRf0fft+dPNqQA=
Subject key identifier: 86:C1:90:41:27:A5:5D:B8:08:79:18:9A:6A:3D:73:86:65:A4:C5:7C
Authority key identifier: 9A:88:9D:04:B9:1F:D7:09:28:BF:11:82:7C:09:44:42:1C:AD:4A:34
Certificate issuer: /CN=9a889d04b91fd70928bf11827c0944421cad4a34
Certificate serial: 019FA93DCC2C6D9B8FBD9B5AA8C9F85EF76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
Manifest number: 1D
Signing time: Tue 28 Jul 2026 15:00:27 +0000
Manifest this update: Tue 28 Jul 2026 15:00:27 +0000
Manifest next update: Wed 29 Jul 2026 15:00:27 +0000
Files and hashes: 1: moidBLkf1wkovxGCfAlEQhytSjQ.crl (hash: GbPmOtc69VapNuYQDpHgdmATA5aMzLDXWz8PIr8I3i4=)
2: syeK9CuRFEI8WMGC-N6sOcltkCY.roa (hash: KOrLoavn62KKYkUh98qE+rNDjdVH+vCnvaVDIjJnLg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:cc:2c:6d:9b:8f:bd:9b:5a:a8:c9:f8:5e:f7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a889d04b91fd70928bf11827c0944421cad4a34
Validity
Not Before: Jul 28 15:00:27 2026 GMT
Not After : Jul 29 15:00:27 2026 GMT
Subject: CN=86c1904127a55db80879189a6a3d738665a4c57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:71:27:b0:fc:ab:cd:43:c4:01:cf:5e:ac:49:
87:66:9a:50:d1:bf:a5:2d:80:7f:fa:41:f2:f0:5e:
14:84:a4:43:05:49:b2:26:2c:c9:4d:48:7b:4c:c0:
d4:e2:4e:41:ef:2b:8c:01:52:38:d6:40:03:99:75:
0c:fc:20:ed:39:3d:3c:ca:d3:8e:23:9a:65:d8:0b:
3b:4c:3b:a8:75:c6:e4:1d:ac:11:c4:a0:21:5e:f6:
25:ec:b8:e9:d1:85:f2:87:8c:93:5d:ef:a0:48:8a:
88:f8:cc:92:4c:89:27:a1:fb:30:5c:26:6c:86:71:
29:80:26:87:41:f8:78:0d:7c:4e:0f:ac:f0:3c:4c:
b7:c9:b0:6b:30:ee:51:2b:e6:4b:8e:b2:ff:75:9b:
e3:72:58:f0:42:8e:7f:cd:76:20:ce:79:cf:7f:9f:
d2:97:af:2e:2d:56:48:9e:51:c7:38:85:a4:b0:d4:
72:c5:cc:49:30:fd:0d:23:36:05:b5:3e:71:cc:02:
9f:a3:81:27:f5:ca:73:2e:58:01:8a:7a:bb:d0:74:
3f:1f:50:89:f8:0c:0f:42:f1:cf:c1:35:63:9d:6b:
0d:c8:e7:7d:b2:fa:83:23:d6:37:66:4c:ed:d3:8a:
31:97:7c:2d:13:42:f8:f4:83:e6:93:3f:21:6f:32:
2d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C1:90:41:27:A5:5D:B8:08:79:18:9A:6A:3D:73:86:65:A4:C5:7C
X509v3 Authority Key Identifier:
keyid:9A:88:9D:04:B9:1F:D7:09:28:BF:11:82:7C:09:44:42:1C:AD:4A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:48:e4:b2:78:80:1f:df:49:2a:71:10:c7:af:42:3b:ca:38:
66:76:47:a1:31:97:bd:86:65:b4:f3:63:28:5c:f1:07:ff:e9:
c5:df:a4:ce:6f:4c:49:0f:ca:55:ff:67:2a:bf:f8:c7:62:16:
b0:06:93:6c:e9:ef:db:9b:71:9b:b1:36:cd:78:4c:60:f6:f6:
91:8c:fe:97:0f:50:bb:1b:9c:a7:9b:68:eb:39:a2:5f:c9:1e:
85:49:80:15:32:55:09:69:83:93:f7:16:3d:22:11:10:0d:14:
69:3f:dc:f8:27:27:4f:74:9a:f5:70:fb:b7:71:2e:0b:d7:be:
e4:93:a8:4a:bb:5b:ad:e2:c4:57:74:8e:5c:9d:0c:c7:c1:0c:
d7:4d:53:e6:ad:30:4a:61:57:99:d7:85:a4:13:20:c0:28:95:
2d:85:58:8b:aa:d2:43:11:1c:ab:c8:e4:c5:2d:eb:19:08:04:
e6:c1:f8:55:e4:a8:c0:81:4f:41:11:09:b5:bb:79:eb:ac:1b:
88:00:ad:4d:4e:39:96:03:29:33:19:de:af:8c:da:b0:a0:09:
64:3c:e8:7f:c9:3e:99:fa:04:59:dc:12:67:83:f8:c1:e5:09:
2c:a6:47:a3:df:e4:dc:32:6d:b1:80:04:14:a0:ab:84:00:64:
9c:7c:57:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:21 2026 by rpki-client