Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
File: RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft (raw, json)
Hash identifier: h1gk7uFe8pUCjIKDN9InJKo5/btHouOT7/+aFvx+WRM=
Subject key identifier: D4:BD:35:14:A7:04:07:94:89:E1:59:F1:F2:68:52:AC:93:BF:E6:29
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Certificate issuer: /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial: 019FAC0862152DCB119C9105A1B815DBDC74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 04:00:58 +0000
Manifest this update: Wed 29 Jul 2026 04:00:58 +0000
Manifest next update: Thu 30 Jul 2026 04:00:58 +0000
Files and hashes: 1: RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl (hash: Mc37dHvaqzuXSpW18oDHCS1I+4QAYA/tr8PRM8p4fS4=)
2: mQOpqLaDGvgovaJyvLyQ5sBrw84.roa (hash: MhfMc5IHy7Q2RpMmEQc+IAMBkW+5nzpl9I5JKbxrZ6A=)
3: vKfh_-tsEstDK_pHiwP3rsQ6SOk.roa (hash: UDcDB4CQNfkJ685xuZBpEtrUZDLT9OaVBo1hay5J/3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:62:15:2d:cb:11:9c:91:05:a1:b8:15:db:dc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
Validity
Not Before: Jul 29 04:00:58 2026 GMT
Not After : Jul 30 04:00:58 2026 GMT
Subject: CN=d4bd3514a704079489e159f1f26852ac93bfe629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:cc:3e:b2:d2:94:ba:21:cb:14:f8:57:f7:
2f:ae:e4:6b:58:be:61:85:2f:96:e3:1d:8c:33:23:
ee:75:15:a8:a8:88:f3:9d:5f:27:f1:1c:be:82:dc:
ce:86:fd:75:02:01:01:2e:71:8f:4f:57:15:8c:95:
32:21:9c:8b:5d:1e:a5:37:24:bd:ed:9d:8a:23:e6:
2a:13:d1:a9:de:ad:86:35:79:db:09:3f:df:0e:8d:
32:8d:f5:c7:c6:49:34:4d:4c:9b:af:f0:c6:0d:02:
6e:04:15:ed:37:56:1b:20:1a:4d:cb:e8:98:a1:95:
ab:88:27:c3:46:89:bd:6c:28:c3:13:32:a1:ca:b1:
92:53:f0:c3:21:a0:0b:5d:bb:51:f0:fd:94:b9:04:
41:14:dc:a3:b3:1c:9b:b9:ba:75:2c:6d:e5:fd:36:
31:18:d9:44:c3:27:9d:10:26:55:25:c1:af:83:25:
f3:0e:f1:3c:58:8c:5a:cd:5e:2e:06:10:03:bc:11:
b6:7f:fe:93:af:d1:12:8a:e8:17:06:21:f6:d3:51:
31:f1:07:d7:ee:4c:d5:37:40:49:7e:32:64:b0:85:
9f:bf:d8:01:4c:bd:53:31:9b:94:27:f3:00:c2:20:
31:98:80:7d:c3:74:c3:05:aa:96:5d:6b:e6:59:4f:
81:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BD:35:14:A7:04:07:94:89:E1:59:F1:F2:68:52:AC:93:BF:E6:29
X509v3 Authority Key Identifier:
keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cc:d5:e5:84:2a:b5:1f:df:97:7f:14:9c:03:3b:33:dd:31:
42:9e:e4:1e:69:7a:fe:86:ff:36:fe:41:80:27:70:a6:1e:30:
07:7c:1a:02:c6:79:b3:ac:74:71:40:18:5a:53:3c:d1:50:77:
d6:67:f4:3f:ab:3b:f9:6d:59:ff:14:ec:16:bf:44:43:b6:19:
73:65:ee:7a:b2:90:72:61:86:e6:ef:7b:ff:7f:15:08:cd:e9:
d4:ef:3e:71:02:00:d1:7a:67:e9:3a:d7:b5:77:e6:cb:c1:f4:
13:bc:42:81:66:8f:bd:8e:57:21:94:28:35:2e:bc:fb:18:fb:
aa:43:45:fd:71:c8:e5:05:b5:b4:29:e7:d4:d2:2f:50:f9:e3:
8e:05:fc:7c:eb:35:e0:c9:11:e5:17:b9:36:71:c8:0b:81:a5:
21:96:83:60:69:ce:d2:60:d2:54:a6:96:f5:a2:36:98:f2:e5:
92:df:e6:fe:5d:97:04:c5:d0:b9:74:df:30:80:89:c5:46:e1:
cf:0f:6a:cb:0f:18:81:b9:e5:22:95:55:ad:11:d7:44:9b:a5:
93:89:8b:53:e6:80:cb:4b:cd:6c:8a:70:6c:10:ba:42:f5:93:
9b:2b:fe:a0:7d:4c:cc:28:47:3e:fc:f0:93:1a:77:79:a0:2a:
2a:96:05:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:18:13 2026 by rpki-client