Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
File: moBTvNLE2KeioyXit0ZBZqXkjd0.mft (raw, json)
Hash identifier: sp76UKJcUx8PDRH6Hfr15nBYeBpIXWXUEgVLEk7S/So=
Subject key identifier: 30:DB:CB:42:C1:A9:43:80:5D:A2:9B:95:F9:C9:D0:1A:19:9F:2D:9F
Authority key identifier: 9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
Certificate issuer: /CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Certificate serial: 019D85A58A1D5891336C99FCFDAAD2546659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
Manifest number: 1343
Signing time: Mon 13 Apr 2026 07:01:51 +0000
Manifest this update: Mon 13 Apr 2026 07:01:51 +0000
Manifest next update: Tue 14 Apr 2026 07:01:51 +0000
Files and hashes: 1: Eh8M9ZVEjYr91zbyjbSRX3Je80k.roa (hash: BvnUBjZ0Rmp8dq9AlybMB3qp6U0u9VozkYMYIwmfNCc=)
2: moBTvNLE2KeioyXit0ZBZqXkjd0.crl (hash: svoDflnnM2TH7Cjj2OUpgmpnC98NXzNKVeSMbtAB4E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:85:a5:8a:1d:58:91:33:6c:99:fc:fd:aa:d2:54:66:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Validity
Not Before: Apr 13 07:01:51 2026 GMT
Not After : Apr 14 07:01:51 2026 GMT
Subject: CN=30dbcb42c1a943805da29b95f9c9d01a199f2d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:52:ef:70:e0:86:24:37:c9:9f:f0:27:59:
82:ce:2e:5a:7d:d1:76:b3:28:19:d4:b6:7c:83:7f:
a2:30:ce:11:6a:b4:63:22:15:e7:e6:51:bb:70:0f:
5f:5e:b3:8f:33:30:f7:5b:71:77:36:6c:1e:2a:32:
48:e1:b7:e2:c1:5c:97:3e:6b:a3:de:90:c3:3d:13:
b8:b1:18:17:c5:8a:a3:be:10:bc:51:7c:f9:40:3e:
23:4c:2d:e9:35:b7:83:e6:77:e4:69:19:e2:94:49:
28:79:d2:bf:df:36:f5:b1:fc:0b:13:f6:0c:fd:0e:
1c:8e:56:e8:d5:2c:3d:bc:84:26:fc:32:f6:e9:09:
e9:ad:64:97:52:0a:79:c1:9f:3f:9c:d3:98:2f:45:
a4:3c:2e:a7:bd:57:78:53:c8:9d:8b:0c:12:de:8b:
63:58:02:72:97:c8:e1:ee:7e:c4:e2:81:0a:6a:3b:
ac:88:be:68:92:b1:da:94:1d:4f:aa:c0:37:00:e6:
68:ec:b8:f8:cf:08:83:f9:30:16:cd:3a:18:fc:89:
8e:2f:3f:1c:22:6f:05:ee:42:d1:c7:54:a9:46:af:
f2:b9:a2:39:6c:13:1d:cb:3b:51:4a:8e:f6:63:2e:
f0:49:2f:34:de:2c:c6:48:9d:05:bc:16:22:9f:d8:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DB:CB:42:C1:A9:43:80:5D:A2:9B:95:F9:C9:D0:1A:19:9F:2D:9F
X509v3 Authority Key Identifier:
keyid:9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:62:ce:06:f6:2e:25:65:47:3b:fa:33:b1:10:62:31:38:75:
eb:a6:98:03:ad:e3:61:40:e5:06:fe:45:f0:e8:7b:1a:e9:90:
d0:27:81:38:87:e4:87:46:e5:20:37:ad:44:60:c4:4a:22:4b:
30:93:ab:d3:79:70:56:21:dc:ac:b7:b3:86:3e:74:83:98:ca:
81:7e:b2:e8:43:84:79:86:a1:7d:c7:c9:da:58:89:25:c8:d2:
19:4d:33:0e:30:4c:4c:e7:06:e4:04:2c:7f:68:90:88:ad:d9:
d4:26:20:15:16:10:74:98:bf:bd:e9:24:6b:ab:33:d8:af:b7:
70:07:54:33:06:4c:f1:51:65:38:2c:81:02:0f:70:35:a1:33:
f9:4e:c7:f6:bf:2b:30:23:b7:89:48:62:47:3f:01:c5:99:cd:
0a:56:46:6e:50:82:14:5e:60:ab:76:ee:a7:ea:48:53:c7:24:
39:7f:9a:54:7e:02:81:e5:bf:80:7f:6c:8f:ab:fe:07:ff:95:
2f:c7:be:ef:92:01:f6:c8:cb:49:bf:74:9c:f8:5e:67:0c:7c:
1f:a9:be:e3:0e:69:e3:7a:bc:18:68:da:a8:0f:53:58:22:8d:
0c:b3:ba:51:e7:b3:92:bf:be:27:5d:61:2f:a8:c0:ee:9a:2d:
bc:b7:1c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 10:46:49 2026 by rpki-client