Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
File: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft (raw, json)
Hash identifier: Hi/IqPNXzX5lV1vZTvmm1Rp03SIFhW5Y9ELLlsEtKQQ=
Subject key identifier: B2:1C:E6:5C:5E:D7:61:FD:0B:FB:C0:A8:E3:19:48:AA:EA:D0:EE:7C
Authority key identifier: 9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
Certificate issuer: /CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Certificate serial: 019DA34163FD21C8EBBBF55B5CA8582288BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
Manifest number: 0EDA
Signing time: Sun 19 Apr 2026 01:01:04 +0000
Manifest this update: Sun 19 Apr 2026 01:01:04 +0000
Manifest next update: Mon 20 Apr 2026 01:01:04 +0000
Files and hashes: 1: Q-ONeNtmD3ybAzTUMhGC9MjTNNo.asa (hash: okiWGqJS235fCpGNLndRTcJ9gZ0cQPFcyQUgRG2jzsY=)
2: SvxCrHRH9qtDgRtKCtLQ9Vh4GMg.roa (hash: hh/DbdPPGnpvcaZfF2CgRTxk6vKo3UGb19IP1Aj8Lm0=)
3: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl (hash: KLCq+bCyID0mU1oC51R+uBTcEW6s9JKpmccJ/I6n940=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:63:fd:21:c8:eb:bb:f5:5b:5c:a8:58:22:88:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Validity
Not Before: Apr 19 01:01:04 2026 GMT
Not After : Apr 20 01:01:04 2026 GMT
Subject: CN=b21ce65c5ed761fd0bfbc0a8e31948aaead0ee7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:07:b3:cd:ae:35:55:7d:cd:7a:f0:e9:00:
9d:95:7b:15:e0:2c:e6:71:c9:33:0f:ad:c9:bb:22:
6e:f2:c4:7d:34:3c:3d:83:f8:5c:b5:ea:5b:8d:83:
a8:94:80:ad:4a:12:ef:01:82:dc:60:32:ba:d2:4c:
77:e4:04:d7:81:0f:7f:89:6d:7c:11:ec:4a:fd:87:
95:c4:0f:ae:14:54:73:59:dd:2d:28:f7:53:50:e4:
3f:31:7e:8b:46:b7:fd:51:fb:b1:a8:f2:5d:d5:0f:
64:cf:d9:db:89:d4:e7:22:21:e6:bd:70:95:b4:7a:
3c:c8:0b:0b:7a:22:38:d9:1b:3e:76:f8:08:18:06:
46:8c:1a:40:8d:f4:56:dc:73:3f:b8:59:f5:a7:23:
d9:8c:21:54:34:5e:bf:57:40:e1:47:c2:71:03:1f:
13:5f:0e:ef:5f:49:33:29:83:e2:a8:2b:45:9d:7d:
09:8c:00:27:2c:bf:40:9c:f7:5f:d5:cc:7a:89:57:
a8:68:d0:74:9b:4f:a0:d5:55:4a:11:19:c9:75:9a:
16:cd:19:a7:bf:0a:01:f7:0b:34:38:5d:ec:c0:5c:
e6:6d:f8:80:55:e3:42:20:9e:73:0c:f5:c8:1c:92:
63:db:7c:7b:a6:8f:4e:0c:59:16:4c:48:09:53:67:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1C:E6:5C:5E:D7:61:FD:0B:FB:C0:A8:E3:19:48:AA:EA:D0:EE:7C
X509v3 Authority Key Identifier:
keyid:9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e8:51:93:c8:e3:c6:bd:5e:dc:35:2a:53:e1:b3:29:c9:b3:
9e:75:fb:97:55:26:43:9c:c5:c7:22:c2:36:d9:3f:53:04:0c:
ec:d6:80:b7:c5:a7:e0:86:e3:9d:2d:1c:70:c4:e4:99:7a:ef:
23:31:0f:f6:07:a3:79:12:0f:11:72:06:3e:53:b4:ef:02:b5:
e6:c7:bd:88:f6:19:c0:4c:c8:1f:81:83:07:41:77:91:87:46:
ab:f3:e2:d9:61:b1:79:c9:78:87:8f:b6:48:e4:ed:d0:d4:22:
b2:a4:dc:c0:84:78:31:1d:14:5b:48:2f:4b:3b:44:ed:24:f7:
60:15:fc:c7:d4:95:22:77:7d:82:15:97:66:39:25:c2:83:47:
24:61:fa:cc:f5:77:7a:9b:19:74:a0:df:38:45:15:35:40:d1:
65:5e:2d:3e:3b:33:42:ce:1d:1b:20:7b:1c:92:56:10:85:14:
27:ec:9d:54:87:3b:89:ba:33:83:14:1d:08:70:49:cf:14:53:
1b:03:b0:bb:54:3a:20:5c:07:7e:70:33:d9:7f:e8:79:db:a5:
83:f7:7f:b5:46:91:82:06:eb:b9:b1:ed:e6:ab:78:7c:79:85:
52:c2:e9:0a:92:7b:cf:d1:8e:ca:92:b7:90:7b:81:56:d7:16:
77:19:a3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:40 2026 by rpki-client