Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
File: RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft (raw, json)
Hash identifier: +oasEx8ckGxHrZYaV1RRQ01KRQXS27CiRaWJDyuCJJw=
Subject key identifier: 4A:C0:39:82:87:5B:59:36:A9:B8:FA:DE:FA:70:E2:5D:0E:6C:51:25
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Certificate issuer: /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial: 01A0D382E8BF3DA2B21D4C4EC441E63D0BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 13:02:46 +0000
Manifest this update: Thu 24 Sep 2026 13:02:46 +0000
Manifest next update: Fri 25 Sep 2026 13:02:46 +0000
Files and hashes: 1: RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl (hash: yRffpNcSfMGr4hiBh6wvs6FcwMaVgR4RG/XbIO8d1c0=)
2: mQOpqLaDGvgovaJyvLyQ5sBrw84.roa (hash: MhfMc5IHy7Q2RpMmEQc+IAMBkW+5nzpl9I5JKbxrZ6A=)
3: vKfh_-tsEstDK_pHiwP3rsQ6SOk.roa (hash: UDcDB4CQNfkJ685xuZBpEtrUZDLT9OaVBo1hay5J/3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:82:e8:bf:3d:a2:b2:1d:4c:4e:c4:41:e6:3d:0b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
Validity
Not Before: Sep 24 13:02:46 2026 GMT
Not After : Sep 25 13:02:46 2026 GMT
Subject: CN=4ac03982875b5936a9b8fadefa70e25d0e6c5125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:3b:d9:1b:cc:eb:be:cb:9a:53:6d:5b:99:
cc:93:ad:12:34:9d:f0:92:13:e0:29:65:e8:13:f1:
03:2f:f8:49:42:06:e8:ca:95:1a:87:c8:61:f6:06:
a3:8d:72:eb:86:e0:61:40:04:6b:1f:2b:a1:0c:0c:
d6:79:4a:41:78:07:de:9e:5a:20:e2:f3:02:bb:f8:
90:64:de:e4:4f:af:40:a3:cf:0c:ac:6a:97:ad:ed:
68:c3:2a:1f:ad:76:55:5a:5f:42:54:92:5f:1e:3c:
d6:20:89:20:d6:50:20:f6:b2:2d:62:61:63:59:69:
92:6c:f6:bc:a8:b9:fe:62:9d:06:4d:33:10:3a:fb:
c1:48:e6:c7:fc:4e:3f:6f:73:a3:e3:33:7d:04:38:
8c:c2:5a:d9:27:ec:ef:63:a2:0f:b5:96:17:42:f8:
35:b9:47:06:8e:88:6d:66:ce:d1:ef:0b:c9:2b:63:
89:0e:2f:1a:a2:84:b8:f3:d7:0d:cf:7f:a9:85:c9:
20:eb:37:4e:9a:c4:40:88:8d:5b:33:a5:09:52:3a:
d9:1c:a3:43:f6:45:78:cc:54:98:ac:e1:e2:97:34:
44:44:a8:43:19:82:e0:63:94:fd:ab:3a:5a:e8:35:
b5:e1:dd:f4:4a:74:7a:d7:61:bb:78:ff:17:02:e1:
b7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C0:39:82:87:5B:59:36:A9:B8:FA:DE:FA:70:E2:5D:0E:6C:51:25
X509v3 Authority Key Identifier:
keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f1:de:89:1a:06:4b:83:7f:33:0d:82:6b:21:11:8c:01:0c:
95:ab:72:7c:2a:c2:87:8a:e7:9b:5e:08:da:99:7d:37:a3:c8:
49:5f:2c:1d:3f:74:f5:28:8d:30:7a:44:90:a2:ae:b3:fe:93:
fb:3f:d5:fd:63:47:28:46:58:f8:84:89:f1:45:e1:8b:ee:79:
49:59:1d:90:4d:2e:84:61:c3:36:dc:76:95:7e:91:fb:5f:fd:
15:75:f1:5f:0c:14:dc:f3:35:a0:bb:e3:64:ca:9b:83:1e:6c:
1f:f3:91:98:9d:0c:b2:14:55:08:ad:84:b4:a7:b0:b0:b1:96:
73:45:83:e9:8b:40:5c:9f:36:6c:f5:ef:5e:9d:f2:b7:02:2a:
fc:e4:25:87:12:70:b5:17:a5:f7:ec:34:05:a0:4b:7f:52:62:
99:d3:3b:3b:b9:a7:b6:08:be:61:3b:65:0a:07:60:23:78:ef:
53:bb:87:52:90:96:4d:84:c3:47:01:87:51:be:12:0b:fe:fa:
54:20:cc:9c:05:6c:b1:45:a9:e5:64:55:9e:73:f8:dc:7c:07:
c6:22:cf:43:c9:46:eb:3c:1e:c5:e3:92:5e:44:84:c6:26:71:
7d:44:4f:19:2e:6e:df:77:a4:91:b2:0a:74:19:a1:3f:c2:16:
4a:12:15:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:12:43 2026 by rpki-client