Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
File: mpdRVlcXWpRsyNthlsobIVTjgRQ.mft (raw, json)
Hash identifier: vfbXghfiNj/znwkmED8X7MsQIkQPdursiSUv1ODTywI=
Subject key identifier: F8:42:3E:26:88:99:73:17:B1:2E:6B:56:E9:3A:8C:55:D8:4B:F5:2B
Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
Certificate issuer: /CN=9a97515657175a946cc8db6196ca1b2154e38114
Certificate serial: 019CAB6BAB7B0DD6B1D36F48EC149A973668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
Manifest number: 0774
Signing time: Sun 01 Mar 2026 22:01:25 +0000
Manifest this update: Sun 01 Mar 2026 22:01:25 +0000
Manifest next update: Mon 02 Mar 2026 22:01:25 +0000
Files and hashes: 1: FrWPsdIanKr1Sodt-qzdiaAKot0.roa (hash: MgcORKrAyQmVC5QqwfE0RufXlOwwg9f/50Q+8d4fy2E=)
2: mpdRVlcXWpRsyNthlsobIVTjgRQ.crl (hash: 0NZ4RmDR3RXXzoTUrFYqWyXB8Vt7rOh9G2/wPUqGWuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ab:7b:0d:d6:b1:d3:6f:48:ec:14:9a:97:36:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114
Validity
Not Before: Mar 1 22:01:25 2026 GMT
Not After : Mar 2 22:01:25 2026 GMT
Subject: CN=f8423e2688997317b12e6b56e93a8c55d84bf52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:f9:16:21:a4:87:bf:7a:68:39:8c:35:3a:
bf:c0:64:d4:1e:28:d8:8a:1e:f1:1e:22:31:c3:b8:
de:40:df:60:58:aa:4a:dd:b1:2c:5f:a8:90:23:14:
f2:f7:ec:c6:51:cd:e3:ae:6e:12:f7:54:c5:af:73:
97:38:e1:2f:74:3b:04:f9:81:f2:d6:2e:27:51:52:
0b:6c:c2:56:3f:9d:4b:92:4e:6d:c9:69:1f:ff:7f:
8a:b7:67:1e:0a:e1:0e:78:c0:f7:b1:35:cb:c7:77:
df:e9:72:ec:3f:78:67:e6:92:e4:54:4d:29:9c:ab:
0a:3b:3f:ca:44:d7:57:33:c2:70:3d:48:6f:17:f7:
49:87:61:d1:ed:c4:2b:70:0b:c7:ba:ce:22:9a:81:
c2:17:6d:db:81:7f:19:b4:ff:41:a5:98:68:54:46:
66:a5:b1:fb:86:23:f3:de:43:f4:b5:39:69:0c:08:
73:25:df:29:18:65:f8:fd:c0:a2:cf:69:49:92:d9:
02:1c:bf:c7:36:38:79:58:fb:c6:7f:fa:8d:ab:0d:
55:62:b5:f8:5f:4d:28:6b:d9:29:ea:03:37:6d:1b:
4e:d1:7e:ef:df:89:59:4a:1b:7d:9c:30:6a:91:13:
f6:3a:02:98:ab:15:0a:a3:23:29:c7:89:d3:1b:6e:
86:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:42:3E:26:88:99:73:17:B1:2E:6B:56:E9:3A:8C:55:D8:4B:F5:2B
X509v3 Authority Key Identifier:
keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:72:06:9f:02:82:b0:1a:b1:b0:aa:8c:2a:c2:99:50:e0:d1:
ae:03:77:e1:42:89:c6:bb:61:4f:34:23:78:bd:b2:28:2a:b6:
5e:79:88:d1:af:86:c9:ce:a1:bf:a7:be:01:58:04:2e:ec:7b:
df:8c:4a:36:0b:cd:b8:e3:54:bb:d2:b2:7d:f0:38:40:ca:52:
4c:c3:4b:59:c7:6e:dd:88:d6:8d:f5:ba:91:3b:20:49:e5:b0:
fc:c9:3b:b1:2a:2d:71:9b:80:6e:ee:3a:f3:7e:0e:ab:eb:04:
ec:b7:15:1c:f5:75:69:b8:a3:ce:06:fe:95:48:06:f1:81:55:
af:47:b9:c3:dd:2f:b3:be:e7:f5:99:7e:77:66:21:4a:2d:5c:
3d:2e:4e:24:97:c0:15:44:f1:ed:81:c7:0d:57:63:62:15:4f:
1a:4c:4b:94:a3:c3:34:0a:94:f0:32:89:55:ee:6f:dc:27:b1:
bc:22:00:f7:17:16:cb:43:f6:bc:2d:e5:4d:14:8b:17:5f:5d:
ad:2d:fd:c7:2a:8e:4b:89:19:4f:1a:60:2c:72:ab:f4:8c:b5:
dc:f8:2a:f0:27:f3:d1:1b:3c:73:5d:f7:ac:e4:31:ea:5d:04:
cd:53:df:86:c1:57:0f:5c:eb:49:d4:aa:40:06:ef:89:7e:f1:
0f:45:cf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:58 2026 by rpki-client