Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File: MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier: YtI5qUWR36MaEWBMRirquCZWyJdH+/uKPs7rrqtwo2Y=
Subject key identifier: F3:74:BF:CF:DB:66:5C:4D:F7:5F:B7:BB:11:56:9F:C8:6C:A0:AD:B6
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial: 01A08B687B6A5A39C0F0E6497F8EC7DBE416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number: 0AC3
Signing time: Thu 10 Sep 2026 13:01:15 +0000
Manifest this update: Thu 10 Sep 2026 13:01:15 +0000
Manifest next update: Fri 11 Sep 2026 13:01:15 +0000
Files and hashes: 1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: pjmGQyGUHkgITuivKxvo9QDQ3jm4zO4cjxB8tMpIyCg=)
2: zlryn4mko1wRxoOR9PxP0fcxrmE.roa (hash: AIH8NLSlPfR8dAuRGSz5mVvImvbLrLk/0uPHSLREnZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:7b:6a:5a:39:c0:f0:e6:49:7f:8e:c7:db:e4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Validity
Not Before: Sep 10 13:01:15 2026 GMT
Not After : Sep 11 13:01:15 2026 GMT
Subject: CN=f374bfcfdb665c4df75fb7bb11569fc86ca0adb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:b4:0f:9a:70:5c:22:32:80:78:54:54:7c:
ed:12:f9:a6:69:4e:7a:8f:3f:b2:b7:13:9a:15:a9:
83:66:f8:60:82:a6:a1:0e:56:21:c4:df:e6:52:36:
55:20:c4:8f:8a:9e:02:b1:fe:ff:03:d0:cb:75:d8:
1c:77:6a:c0:fe:86:14:d2:b3:c3:d1:c5:65:5f:f9:
22:b1:09:76:8b:15:7e:3d:83:3e:54:44:0a:b8:61:
b2:a2:13:ed:e3:73:04:29:9b:f5:06:a4:15:f3:98:
0b:90:33:8f:26:df:cb:f0:c7:60:70:61:2d:74:fb:
a7:10:3e:74:78:77:33:1f:e2:1f:ee:b3:72:31:d1:
f0:4c:91:79:ac:d6:dd:d8:6d:30:0a:54:3a:96:4f:
f2:da:2f:da:ae:e2:7b:cb:4c:84:e8:f5:22:31:72:
0f:9a:33:23:90:07:28:b7:89:8b:d2:d9:52:1c:73:
c2:59:5e:60:8c:d3:60:64:9c:67:81:e7:61:ab:cc:
f3:c5:48:bb:62:87:6a:4a:7b:e0:91:1e:c6:61:74:
98:7f:87:74:df:77:3c:60:5a:c1:5e:81:99:07:4a:
1b:24:2a:22:17:45:af:07:fe:a1:b5:89:d0:ad:31:
dd:08:99:d8:1e:b6:88:12:da:2f:6b:58:90:5f:70:
c2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:74:BF:CF:DB:66:5C:4D:F7:5F:B7:BB:11:56:9F:C8:6C:A0:AD:B6
X509v3 Authority Key Identifier:
keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0a:e2:cf:75:3b:0c:44:b3:2c:80:54:73:7e:6c:0d:75:61:
11:97:83:9c:20:f7:e2:24:51:96:c9:d6:74:42:e3:fb:06:41:
0d:d9:55:0b:e5:4c:b7:c9:92:93:70:76:db:b0:4e:c7:4d:f9:
e2:8b:87:4f:58:b0:98:f5:11:59:a0:b7:d0:2e:75:f1:b8:b2:
d2:5f:0f:9c:a6:0d:fb:49:98:a5:03:71:c4:89:d8:d6:9d:5e:
06:90:6b:fa:d3:a0:44:e8:95:33:e2:35:a6:38:63:6e:32:39:
48:05:a5:17:c9:f3:a7:3c:b3:a8:97:69:d3:07:89:13:65:1b:
fb:8b:95:fc:8c:6d:d8:08:a8:9c:bb:44:8e:f8:02:5c:37:b8:
c4:3d:0c:50:74:68:00:47:12:03:bd:12:3b:90:87:6e:41:81:
0b:7f:67:23:a2:6d:9f:a5:24:82:43:a7:73:14:3d:2b:23:ec:
a5:11:34:ac:11:91:76:d7:a4:ba:85:a6:42:64:34:02:bb:38:
bf:0d:90:c3:38:9d:42:a4:8a:a3:92:0f:77:68:1e:88:46:95:
4c:6f:a6:cb:e5:f1:0a:69:03:29:b0:9a:65:2a:38:84:17:93:
a4:2d:2e:59:ad:fd:27:50:c6:2d:16:fa:6a:0f:db:c2:63:d1:
6a:e4:56:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:58:59 2026 by rpki-client