Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
File: moidBLkf1wkovxGCfAlEQhytSjQ.mft (raw, json)
Hash identifier: PUVrdZiYKKKd++DNm5ulzGCRZqFelmwu5rElvv+LC9Y=
Subject key identifier: C4:19:A7:91:47:D3:8A:70:72:47:1E:6A:A0:84:A0:9B:66:79:18:7E
Authority key identifier: 9A:88:9D:04:B9:1F:D7:09:28:BF:11:82:7C:09:44:42:1C:AD:4A:34
Certificate issuer: /CN=9a889d04b91fd70928bf11827c0944421cad4a34
Certificate serial: 01A0C33227BE9D976168EC07F1E480FD1B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
Manifest number: AF
Signing time: Mon 21 Sep 2026 09:00:39 +0000
Manifest this update: Mon 21 Sep 2026 09:00:39 +0000
Manifest next update: Tue 22 Sep 2026 09:00:39 +0000
Files and hashes: 1: moidBLkf1wkovxGCfAlEQhytSjQ.crl (hash: XbDqRCoPWTwWGNo+GqZ30yOibWrpSdpVoy1rEZQX6HQ=)
2: syeK9CuRFEI8WMGC-N6sOcltkCY.roa (hash: KOrLoavn62KKYkUh98qE+rNDjdVH+vCnvaVDIjJnLg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:27:be:9d:97:61:68:ec:07:f1:e4:80:fd:1b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a889d04b91fd70928bf11827c0944421cad4a34
Validity
Not Before: Sep 21 09:00:39 2026 GMT
Not After : Sep 22 09:00:39 2026 GMT
Subject: CN=c419a79147d38a7072471e6aa084a09b6679187e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:94:64:b2:67:31:b5:35:16:7c:17:d3:28:
4d:63:06:f7:ad:7a:27:3a:15:71:7e:89:c0:89:73:
4f:3e:72:d5:7a:35:71:99:cc:a6:3d:07:c6:49:73:
9a:0d:3e:13:fe:a4:31:f3:d5:63:4d:26:40:5a:b0:
fd:3a:1c:d0:68:5d:5c:e7:d0:12:ee:db:fc:e6:7f:
c6:e5:2a:c1:1d:83:e5:42:ec:b1:8c:ff:6a:ba:cb:
cb:8d:6f:99:1c:06:c4:d7:d2:b4:c5:89:93:01:6b:
9a:7a:a5:7b:45:10:4c:59:35:2d:6a:27:cf:c6:92:
57:04:9f:a5:d3:91:9e:85:60:40:74:8a:d5:dc:47:
5e:ff:cc:52:d0:c1:11:cb:25:51:0c:23:b5:7b:04:
7a:c5:76:7e:50:51:c1:25:e4:46:02:56:51:3b:79:
48:83:78:f0:9f:49:96:62:90:7f:ec:54:17:9a:63:
d8:70:0a:01:ae:82:b7:50:0b:63:2e:f6:ed:c0:08:
f3:84:1f:95:d3:9a:48:0a:be:eb:61:24:bc:58:2f:
10:ce:c0:9b:2f:99:4f:94:9b:84:24:3b:bc:20:60:
32:88:50:9b:50:67:fa:6b:e5:ae:a8:3a:f8:dc:61:
9b:0a:01:80:3d:d4:17:3c:68:8f:37:dd:4b:a2:44:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:19:A7:91:47:D3:8A:70:72:47:1E:6A:A0:84:A0:9B:66:79:18:7E
X509v3 Authority Key Identifier:
keyid:9A:88:9D:04:B9:1F:D7:09:28:BF:11:82:7C:09:44:42:1C:AD:4A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c0:9e:8a:c3:30:31:df:4b:67:f7:87:8e:ed:4c:57:d9:13:
aa:bc:38:b3:33:e2:12:fb:58:95:f0:97:0c:06:fc:a3:61:ff:
dc:d3:b1:86:c0:b1:5b:56:ea:c2:12:09:32:b1:5c:84:e7:91:
8b:ab:46:bd:14:1c:67:d9:b9:2a:1e:6a:f1:2c:96:4a:52:7d:
ca:d3:1d:f9:b6:e9:7e:6b:ca:ca:e1:4a:74:db:c9:75:81:6f:
ab:36:76:82:f5:d0:a9:d4:aa:c0:2d:d1:60:ba:8e:46:1e:bc:
ae:03:a5:4d:95:f6:f0:33:6a:de:7c:09:ed:91:a2:8b:ad:99:
4e:1f:1b:06:af:9c:29:97:b2:d4:d9:7c:4d:d1:6a:67:31:8e:
2f:d1:25:1c:8e:81:bf:89:9a:bd:07:2b:36:4d:2e:cc:44:02:
46:39:39:f4:54:21:68:81:45:c2:79:bc:20:e8:c1:a8:73:8e:
df:2a:fc:74:da:24:c9:80:19:54:2d:48:6b:58:d8:ba:f4:97:
8d:70:6a:66:04:86:95:7b:ac:6c:4a:35:60:f8:44:d9:eb:0b:
2d:d8:8d:0f:d9:6f:de:4f:5e:fc:2b:ed:47:5f:22:80:89:99:
cf:70:41:ea:58:53:aa:7a:1f:38:d2:96:dc:6a:0e:6d:08:c0:
89:9e:aa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:40:32 2026 by rpki-client