Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
File: mpLTBwi51OjHwoyX-AN8gCcUTEc.mft (raw, json)
Hash identifier: PPv+pOpMjZn49DU8UpXYc5MV8TFqdbfvCxawHNf+bFw=
Subject key identifier: D0:5A:5E:89:AF:2F:F4:5C:13:0C:C7:13:09:28:AE:AA:C8:38:20:5E
Authority key identifier: 9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
Certificate issuer: /CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Certificate serial: 019DCF3DCD6555310CF0BDBE2903AA90E970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
Manifest number: 18E4
Signing time: Mon 27 Apr 2026 14:00:27 +0000
Manifest this update: Mon 27 Apr 2026 14:00:27 +0000
Manifest next update: Tue 28 Apr 2026 14:00:27 +0000
Files and hashes: 1: _2TkYZ6m9S4gzCbJ7FSAH-2Y0_4.roa (hash: 29lPquUVvEOM2I/tYNxFjViie9vfaQqvcMnqW/106ho=)
2: mpLTBwi51OjHwoyX-AN8gCcUTEc.crl (hash: 5NATJIPeBF/stME/iFRfW2EIxjMLHGOoR98uH3/w73U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3d:cd:65:55:31:0c:f0:bd:be:29:03:aa:90:e9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Validity
Not Before: Apr 27 14:00:27 2026 GMT
Not After : Apr 28 14:00:27 2026 GMT
Subject: CN=d05a5e89af2ff45c130cc7130928aeaac838205e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:d4:e0:3a:81:90:3d:9d:28:9f:fd:bf:4b:
b2:69:c3:76:81:fd:eb:e8:12:31:de:18:c7:de:a5:
c0:20:bb:0b:0a:c6:ce:b7:39:fe:6f:e5:7f:62:63:
6f:72:56:21:5a:c9:ce:4e:01:de:89:21:f6:02:d3:
ca:d1:19:27:8e:c2:cc:e7:51:c1:d4:eb:40:39:84:
ff:b0:09:ca:c8:5c:c2:ca:26:a0:98:7c:9f:42:03:
40:e4:c3:86:80:0a:ed:ad:66:28:6a:a1:47:f3:02:
07:68:47:8f:9e:bd:a3:41:f0:a9:e6:72:bc:c6:91:
ad:a7:cb:8f:bf:3d:b6:d6:bf:a9:63:eb:d0:d8:49:
f3:99:23:87:84:a1:bf:f5:35:28:5d:9d:72:8d:d1:
a8:0e:70:bd:51:1c:b8:f4:1a:e2:61:43:20:50:78:
a4:1e:92:25:75:8d:61:b1:3d:15:5c:82:dc:04:3c:
d8:60:bf:31:dc:02:4f:a1:6d:a1:21:cd:75:b7:43:
ed:a0:66:c8:99:fb:7f:37:16:a9:07:f6:d6:ac:b3:
34:a9:ae:b9:17:14:1d:76:df:87:af:52:a1:de:3a:
1b:33:5e:6e:42:da:21:43:3c:33:75:04:20:da:c0:
45:26:df:db:c4:27:ba:a4:3a:ef:58:7f:20:8a:dd:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5A:5E:89:AF:2F:F4:5C:13:0C:C7:13:09:28:AE:AA:C8:38:20:5E
X509v3 Authority Key Identifier:
keyid:9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a5:40:31:a7:66:b3:06:27:2e:a8:58:fd:7a:0b:97:66:f2:
1c:5e:74:96:f9:51:25:23:77:2b:23:89:56:b9:46:42:12:0a:
29:71:4c:05:99:2d:2a:44:6f:9e:b1:ce:cd:04:b3:8e:b2:1a:
32:3a:08:b7:c7:f5:9a:8c:42:e5:cf:87:97:c2:4d:de:ea:26:
97:02:99:8f:e7:33:b4:da:4f:ba:01:6a:2c:84:30:ab:0c:77:
4c:1f:7b:cd:42:91:45:fe:6f:e9:07:f6:04:d4:c6:0b:95:97:
ec:d3:5a:51:41:3c:84:1d:78:dc:45:ab:c6:0b:21:3e:ba:53:
4d:97:4a:1b:23:7c:95:d5:0d:2e:af:82:68:95:61:53:37:12:
71:53:7e:8a:ac:51:07:a4:91:4c:1c:f2:8f:58:80:21:0e:e6:
07:c7:03:8e:76:e0:73:4d:ca:e7:a7:56:99:12:0a:7b:ba:17:
b1:cf:b0:8c:16:1a:8d:ae:07:5f:a1:4f:20:b3:5d:da:b3:16:
76:f6:68:8d:77:02:68:e8:30:04:06:37:88:2a:8f:26:c2:cd:
d5:89:35:51:43:3a:51:18:4d:96:6c:0e:bf:4e:cc:75:15:4d:
35:ee:60:a7:c4:dc:d9:94:be:77:be:b3:1b:ec:03:fa:98:30:
2e:88:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:50:02 2026 by rpki-client