Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
File: RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft (raw, json)
Hash identifier: eBWgOTKxvFoHXja2+48HOc94aKSQOO4nApRoEQP0nQs=
Subject key identifier: AA:DD:65:B2:3A:9D:80:49:DE:8D:CE:C6:25:95:B8:6B:C6:FD:59:76
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Certificate issuer: /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial: 019CAD5990BDFCE2CD9CDF3E5C8E0767A8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 07:00:53 +0000
Manifest this update: Mon 02 Mar 2026 07:00:53 +0000
Manifest next update: Tue 03 Mar 2026 07:00:53 +0000
Files and hashes: 1: RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl (hash: Wvo3tZcP8XKnkjA8ZKQkIxT5oGJHhxuKUNd3MMs4mgs=)
2: mQOpqLaDGvgovaJyvLyQ5sBrw84.roa (hash: MhfMc5IHy7Q2RpMmEQc+IAMBkW+5nzpl9I5JKbxrZ6A=)
3: vKfh_-tsEstDK_pHiwP3rsQ6SOk.roa (hash: UDcDB4CQNfkJ685xuZBpEtrUZDLT9OaVBo1hay5J/3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:90:bd:fc:e2:cd:9c:df:3e:5c:8e:07:67:a8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
Validity
Not Before: Mar 2 07:00:53 2026 GMT
Not After : Mar 3 07:00:53 2026 GMT
Subject: CN=aadd65b23a9d8049de8dcec62595b86bc6fd5976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:6b:55:b6:b1:c2:4f:06:f6:d8:4f:f0:e3:
1a:c9:98:ad:c9:86:bc:09:10:00:7d:c8:52:84:a5:
27:33:0b:6b:f6:c5:72:5d:13:4a:b2:df:53:2a:15:
1f:4b:9a:06:89:90:35:10:59:b0:ac:91:40:30:76:
ee:49:59:2f:b6:a2:5e:6e:ab:12:32:4e:77:4f:f5:
0c:31:1d:de:09:bf:41:52:51:0f:04:50:43:5c:f4:
b6:af:40:f1:5f:4b:3b:19:89:e8:ed:9f:97:b3:77:
ff:5f:95:22:d7:4d:ff:be:33:a7:a3:76:76:54:cf:
e8:54:15:a8:f8:c3:ea:f3:22:71:3c:b0:ce:e5:c4:
50:5c:dd:8a:9e:9e:2b:8a:15:60:e8:aa:32:83:d9:
cd:67:20:2e:ed:ca:d7:90:54:ad:e3:fc:58:3f:3b:
84:a6:40:e6:8c:fa:2e:fa:83:54:4f:27:da:87:51:
eb:8f:03:35:d8:a4:aa:65:21:25:38:fe:b7:f5:80:
8e:16:7a:8c:d8:9f:63:e5:6a:57:ea:c9:10:97:18:
18:db:1d:40:05:96:23:b5:6e:82:32:6c:64:a9:25:
42:60:14:b7:33:d4:4f:32:82:f5:55:ea:1e:2b:4b:
f3:06:6c:7d:35:02:2f:42:8b:34:b1:67:26:13:f7:
5b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DD:65:B2:3A:9D:80:49:DE:8D:CE:C6:25:95:B8:6B:C6:FD:59:76
X509v3 Authority Key Identifier:
keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9a:de:55:40:01:fb:bf:bb:a1:70:c6:c3:fc:6b:dd:65:42:
78:e0:72:39:5f:d5:c3:8e:35:3d:0f:5e:ea:44:9e:9f:3a:67:
fb:ea:b1:cc:f8:55:ea:d4:6d:a5:fc:6f:e6:0f:ae:66:10:cf:
6e:aa:d6:0f:21:c2:7e:77:2b:36:84:ba:8b:47:c9:2c:7a:07:
20:b9:1e:0e:94:81:33:2b:8b:14:9f:12:07:98:16:d7:79:ae:
d4:47:a5:51:dd:32:dd:4b:d9:fe:90:d4:11:d4:4c:a9:81:99:
41:b8:4c:cf:2f:7f:70:2f:11:53:ed:9d:b7:ef:a8:84:f3:1a:
3d:48:c3:21:0d:bb:a3:a5:19:fe:8a:cd:ff:ed:01:ed:a7:96:
de:40:7b:34:00:ce:0c:d2:05:66:3a:a4:52:e7:3a:a0:48:04:
35:6c:59:7a:5c:61:f9:32:1e:a0:63:a4:d3:fb:24:3a:09:63:
55:5a:4c:b8:e1:d8:e0:a9:25:a9:d0:e8:ba:75:24:64:39:20:
59:b7:3e:24:74:d0:21:ae:fe:d3:61:ad:99:4a:55:f3:0c:52:
1e:b6:6d:95:a7:95:b0:f4:c6:8e:67:5e:49:91:c7:04:94:63:
52:66:6a:f0:46:bb:59:df:bf:bf:b6:a2:ea:4d:8b:0a:da:48:
00:c8:16:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:17 2026 by rpki-client