Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File: MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier: mLnj0C5pSKLZAnI12PdmKAa/Qv9npsjNb1D5iOPEtAY=
Subject key identifier: BE:17:4E:A4:C8:4C:90:91:7E:4A:05:ED:3D:6C:97:64:1B:77:ED:CC
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial: 01A17CCE454ED6914F4C6B40EAECA689E340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number: 0B40
Signing time: Tue 27 Oct 2026 10:00:55 +0000
Manifest this update: Tue 27 Oct 2026 10:00:55 +0000
Manifest next update: Wed 28 Oct 2026 10:00:55 +0000
Files and hashes: 1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: zNl6/XaxH+X6P7q58yPZ2WsXmnhWvlp5B+hpFvAMQic=)
2: zlryn4mko1wRxoOR9PxP0fcxrmE.roa (hash: AIH8NLSlPfR8dAuRGSz5mVvImvbLrLk/0uPHSLREnZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:45:4e:d6:91:4f:4c:6b:40:ea:ec:a6:89:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Validity
Not Before: Oct 27 10:00:55 2026 GMT
Not After : Oct 28 10:00:55 2026 GMT
Subject: CN=be174ea4c84c90917e4a05ed3d6c97641b77edcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:0c:7f:38:0e:b3:ad:d7:cc:48:a9:f0:67:
9a:b9:49:ea:78:ee:09:17:6d:6e:ae:70:ed:bc:8b:
1c:e7:41:42:d0:ad:00:82:66:73:86:c1:e5:f4:29:
15:a9:5c:28:74:c8:32:91:86:6b:55:6a:41:ae:37:
0d:13:ba:82:9d:59:2f:8b:46:37:6e:f7:1e:8f:4d:
32:7c:72:3d:26:ca:42:ee:fe:81:7f:c6:91:88:ae:
5a:04:ec:42:06:a8:36:35:8e:a7:cd:70:a1:ca:6a:
55:37:0f:9a:c6:44:3b:87:8b:31:1f:9d:ef:02:78:
96:ea:8a:00:8d:d1:e7:be:fb:1a:7c:cd:c0:ec:2b:
0d:7c:d3:b8:39:8f:4c:c5:ff:d5:74:7e:da:2d:e8:
02:e8:f2:f4:fe:f6:f6:c6:8f:03:57:4e:21:e9:ea:
81:8b:29:5f:e5:70:e6:13:03:09:de:47:4f:d4:d7:
aa:a2:e2:cb:3d:e3:5d:86:00:c8:f1:e6:5d:62:4d:
38:37:41:1a:a0:4d:4f:0c:2e:c8:9a:2c:05:19:63:
c5:cf:89:80:84:5c:95:a9:cf:66:b5:d8:73:f4:43:
d5:0a:71:b8:ca:8f:b7:a5:c3:d8:1b:70:68:70:e6:
12:3e:39:36:83:9f:e2:c4:8b:97:29:38:8c:7a:eb:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:17:4E:A4:C8:4C:90:91:7E:4A:05:ED:3D:6C:97:64:1B:77:ED:CC
X509v3 Authority Key Identifier:
keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:22:e1:be:fb:6b:a0:b6:db:b1:82:9b:7e:d4:02:3d:9f:4b:
c4:dd:65:89:1c:ed:fa:59:84:e1:fb:08:2d:d4:ac:12:89:70:
a9:c4:1e:90:6a:bb:5f:f9:08:cb:ea:9e:95:b0:c1:6a:94:f2:
82:15:1b:1e:96:31:87:20:d9:64:3c:3f:5b:25:55:32:37:7c:
3d:b7:74:b1:09:d7:f2:c1:d5:f4:be:75:a7:55:d4:55:de:0c:
76:6e:46:df:a1:7f:aa:3f:11:c2:0c:d8:ad:27:f9:24:eb:b1:
92:23:bd:a9:65:3f:6f:41:ca:07:39:b3:e7:21:02:e6:19:ac:
59:b1:c7:c1:ba:c8:63:93:1c:76:d9:05:35:6c:31:65:a2:3f:
4b:2f:82:68:bc:d8:35:f4:fb:61:b5:b2:23:f8:ab:ff:5a:4d:
eb:4e:e7:0b:70:13:40:38:ab:e9:71:2c:5b:11:8c:9e:c8:9c:
81:74:01:00:c1:b8:0a:d5:dd:c8:d9:6a:8d:f6:34:32:8d:dd:
43:af:4f:df:e8:4c:de:68:bf:a1:90:21:d6:86:7f:d1:cc:0f:
69:db:70:f4:d9:13:1b:55:6a:e7:dd:73:9a:9c:92:f8:b4:a8:
e6:d0:e6:7a:33:74:34:d6:b6:7f:16:bb:e3:8f:4f:9d:b5:51:
9a:39:cd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:29:47 2026 by rpki-client