Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File: MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier: R4d0FCnTQJF0BLn3hEprviVR66M76jgwJa3pf1bO/kE=
Subject key identifier: 7E:0B:0B:B2:66:41:85:98:41:7F:94:30:6F:48:7A:17:7C:63:A7:A8
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial: 019D37C02471F0F2F3D5BA9F46AE08B4AE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number: 090A
Signing time: Sun 29 Mar 2026 04:00:32 +0000
Manifest this update: Sun 29 Mar 2026 04:00:32 +0000
Manifest next update: Mon 30 Mar 2026 04:00:32 +0000
Files and hashes: 1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: Qh18xc/Sh0zCjl+w7vpL7Fh01m/UmDqBbgH+f3M/1c0=)
2: zlryn4mko1wRxoOR9PxP0fcxrmE.roa (hash: AIH8NLSlPfR8dAuRGSz5mVvImvbLrLk/0uPHSLREnZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:24:71:f0:f2:f3:d5:ba:9f:46:ae:08:b4:ae:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Validity
Not Before: Mar 29 04:00:32 2026 GMT
Not After : Mar 30 04:00:32 2026 GMT
Subject: CN=7e0b0bb266418598417f94306f487a177c63a7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:a2:43:61:01:ca:e5:b2:43:6d:c1:58:83:
ea:41:48:f7:08:01:2c:6b:02:d5:96:dd:f0:55:9c:
a0:46:75:0f:65:63:38:f6:04:9c:0b:8f:22:d8:36:
17:8e:bd:20:e5:41:8b:1c:2a:60:62:f0:86:35:78:
4c:75:d5:50:ef:e4:ab:2c:7b:6c:56:f3:01:32:c9:
2b:c3:07:5d:ba:2a:14:aa:cd:7b:85:0a:1b:2a:f2:
e9:94:07:e0:fc:03:95:12:e3:e5:ff:ad:17:e0:0f:
17:1c:8e:91:7a:2d:5a:e7:6f:19:1e:8a:5a:4b:c8:
5b:2c:c5:83:14:c3:bd:b6:d2:f1:42:c2:69:80:ae:
3f:9c:14:89:80:35:96:62:46:32:f2:a6:0d:4a:32:
ae:b1:40:2f:78:f1:62:6b:aa:60:60:ca:9a:7f:e6:
71:d8:49:8f:0e:43:31:ec:7a:1f:ad:0b:46:e5:1f:
33:49:74:75:b9:d9:76:cc:9a:bf:c3:1b:38:ad:94:
b6:31:0d:08:14:cb:8f:9a:64:8a:40:29:2c:65:2f:
12:a1:3c:6f:5d:ff:63:ee:a3:36:ff:a1:83:64:2e:
fe:60:00:62:5a:1b:3a:38:2d:fe:b5:e8:98:e4:a5:
21:7f:b2:2b:d2:79:29:31:cc:c3:27:23:92:2e:e7:
5f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0B:0B:B2:66:41:85:98:41:7F:94:30:6F:48:7A:17:7C:63:A7:A8
X509v3 Authority Key Identifier:
keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f3:37:f1:f2:c2:4a:63:7b:4c:6c:ea:a7:47:a4:1b:84:b6:
d7:9d:fc:d0:16:b6:2b:f3:73:ff:2d:f0:0a:2f:2c:00:f4:d9:
90:37:a3:e9:8f:a7:74:d0:11:e2:8c:f5:1e:a5:71:c7:b2:ac:
b9:d0:63:d0:ec:39:6f:08:44:4c:86:1d:29:76:96:83:77:a3:
10:00:98:5f:ef:ff:60:b5:1a:ad:a0:7c:44:79:c1:7f:f0:9f:
51:93:7e:96:a2:2c:2f:0e:7e:fb:11:7e:14:de:75:f4:64:00:
25:f7:30:f3:e7:57:61:fb:c9:2a:32:9c:56:d7:87:2f:91:70:
2e:eb:4a:37:57:e4:34:01:8d:1b:b6:ae:61:70:22:65:ba:04:
94:b3:33:d1:b2:68:3c:bd:38:50:d3:51:79:50:c4:3d:bd:2e:
9d:7f:dc:bb:04:a6:fb:10:4a:00:09:9a:26:85:8e:64:04:fc:
4d:6a:29:9e:d9:8f:5d:13:90:86:3e:31:c7:a9:21:28:3f:e5:
7e:86:27:19:3a:02:c6:23:7a:82:11:d4:f5:90:68:bb:49:c8:
2e:f2:d1:2e:f8:fa:38:b5:76:84:ea:ea:7a:c8:0f:19:2d:99:
71:c4:16:a4:4e:e4:6e:63:19:cc:9c:b2:ff:c2:21:a6:1d:33:
10:15:2b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:58 2026 by rpki-client