Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
File: moidBLkf1wkovxGCfAlEQhytSjQ.mft (raw, json)
Hash identifier: NcactieAwRn0CpZHmkyZaZtUYLCZ9FHARfhEdAjQO3A=
Subject key identifier: 90:E1:25:CA:D9:EC:69:0B:E3:24:B4:D5:22:34:CE:20:C2:E1:CC:CA
Authority key identifier: 9A:88:9D:04:B9:1F:D7:09:28:BF:11:82:7C:09:44:42:1C:AD:4A:34
Certificate issuer: /CN=9a889d04b91fd70928bf11827c0944421cad4a34
Certificate serial: 01A024D6CEF8AEC6E22119977769964EABFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
Manifest number: 5D
Signing time: Fri 21 Aug 2026 15:00:52 +0000
Manifest this update: Fri 21 Aug 2026 15:00:52 +0000
Manifest next update: Sat 22 Aug 2026 15:00:52 +0000
Files and hashes: 1: moidBLkf1wkovxGCfAlEQhytSjQ.crl (hash: X1DQ+2DH+gMcmheRjzi5ejbrN/9baRUsE3byQywP8vI=)
2: syeK9CuRFEI8WMGC-N6sOcltkCY.roa (hash: KOrLoavn62KKYkUh98qE+rNDjdVH+vCnvaVDIjJnLg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:d6:ce:f8:ae:c6:e2:21:19:97:77:69:96:4e:ab:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a889d04b91fd70928bf11827c0944421cad4a34
Validity
Not Before: Aug 21 15:00:52 2026 GMT
Not After : Aug 22 15:00:52 2026 GMT
Subject: CN=90e125cad9ec690be324b4d52234ce20c2e1ccca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:cc:f6:73:d7:21:34:c5:ec:14:c5:64:29:
a5:33:a5:04:da:9b:7a:5f:f9:b4:95:77:47:cf:c9:
0d:fc:de:99:3e:d5:c4:99:eb:8d:cf:57:a0:ba:6e:
13:d6:ae:56:89:49:3c:41:ef:1e:99:1f:c8:11:bd:
18:0d:d4:82:f6:94:d2:43:82:c8:8b:3b:21:e5:ff:
62:b0:ff:a8:6a:44:9e:49:0b:72:73:c9:4a:b3:1d:
c0:76:f5:36:f5:c8:1b:19:b6:de:18:4e:4c:0c:71:
da:8e:74:51:33:00:51:10:16:4f:37:7d:70:5e:0f:
ae:b6:e2:47:fa:ae:0a:8c:52:89:b6:e5:db:a2:28:
ec:35:9d:2d:e8:62:bc:29:4d:b9:6f:f8:77:8e:49:
66:62:f6:8d:5c:05:32:14:51:0a:09:23:75:08:d6:
c2:6a:6e:7a:cd:67:f6:83:4b:0d:bc:d0:7d:dc:e8:
a9:f6:d7:b6:cb:05:7a:ca:48:99:5f:f1:bd:13:e2:
3d:a3:df:04:e4:14:c9:32:a7:e9:d5:81:be:48:3a:
9e:f0:9a:26:b4:3a:b5:7e:39:76:d0:ea:2f:57:30:
13:62:7f:4e:d7:3b:76:53:c8:02:a9:a4:ce:47:0e:
df:57:e5:8a:c7:b4:ba:98:d1:ed:64:45:50:9f:32:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E1:25:CA:D9:EC:69:0B:E3:24:B4:D5:22:34:CE:20:C2:E1:CC:CA
X509v3 Authority Key Identifier:
keyid:9A:88:9D:04:B9:1F:D7:09:28:BF:11:82:7C:09:44:42:1C:AD:4A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:26:d6:e3:13:93:0b:85:d6:6f:f8:b8:37:c9:bf:0b:7a:2b:
c4:27:3d:22:a6:b1:95:4c:ee:e1:ed:51:ab:4a:83:14:b7:fe:
9a:65:83:89:ef:f8:a7:4b:36:94:c1:13:e0:c6:73:59:60:25:
7e:aa:5d:46:f4:f6:0c:8b:9c:11:be:21:6e:b5:a3:6c:3a:dd:
a7:bc:f6:10:7b:8d:b2:dd:bf:e4:ff:75:e1:ff:f9:7b:66:15:
ce:d3:39:33:ce:47:81:6f:f0:cc:f8:80:a5:fd:6f:5f:17:e5:
d4:dd:48:87:21:50:09:41:27:bd:67:12:90:48:f6:3f:03:3d:
5b:94:72:e9:42:76:5d:74:0f:84:b8:3c:c9:0d:8d:39:e2:71:
6c:f4:99:e4:85:9b:e1:46:9a:c3:e8:9c:76:58:53:27:e7:9c:
f7:5a:74:57:aa:63:10:4e:72:9e:c0:ea:7f:f8:35:75:82:67:
15:21:bd:20:09:f0:79:c4:0c:91:48:f6:9b:96:48:a0:b3:cf:
e1:d8:14:88:5a:09:2e:87:b6:c0:f8:3f:df:e3:fb:b0:33:12:
e5:17:e0:69:de:f8:60:0b:0a:1a:ac:a8:ce:9a:ab:3c:56:59:
d2:82:0b:ef:4e:34:62:72:d4:c5:93:0c:6f:05:7a:07:21:a7:
ef:a5:04:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:07:50 2026 by rpki-client