Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
File: MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json)
Hash identifier: KVWl93hCZWTTAIl5qJumI31URdaR6RdaN2y5VYa6Hqk=
Subject key identifier: 96:4F:FF:2B:A3:1E:7D:8C:83:7B:C3:ED:E3:F3:29:91:61:3F:51:AA
Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7
Certificate serial: 01A1607B08AD2F36593C7787F8311CE95FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
Manifest number: 1A4A
Signing time: Wed 21 Oct 2026 22:00:38 +0000
Manifest this update: Wed 21 Oct 2026 22:00:38 +0000
Manifest next update: Thu 22 Oct 2026 22:00:38 +0000
Files and hashes: 1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: XDpLT6CihR0ASk0QC9e8m722WCe9N0AxuQENIxSEQ88=)
2: dDj4-eFRfq_UroSu2HQ22smKlA8.roa (hash: ahRStajN/bb570o/RBHvcfEKEL2KTD1bW5s9wAnONq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:7b:08:ad:2f:36:59:3c:77:87:f8:31:1c:e9:5f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7
Validity
Not Before: Oct 21 22:00:38 2026 GMT
Not After : Oct 22 22:00:38 2026 GMT
Subject: CN=964fff2ba31e7d8c837bc3ede3f32991613f51aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:87:62:fe:24:d7:f3:f2:37:a5:fa:57:2b:de:
8a:fe:27:24:9b:58:4e:86:8b:3b:e7:06:97:2d:05:
45:16:3a:04:11:ab:06:2d:de:d6:5b:9f:39:2b:c2:
cc:80:55:c7:2b:9e:38:db:01:25:a8:e1:4a:04:c6:
9e:b7:af:f2:09:d4:e3:d8:dd:83:36:d0:4c:1b:d3:
19:7a:f8:4e:54:05:1f:54:97:11:65:4c:6a:fb:d0:
eb:89:1b:89:e0:bd:3e:ae:8f:af:bd:16:56:56:9b:
3f:28:18:89:14:31:45:27:fe:a8:1d:cd:08:12:df:
1a:e9:42:9d:d7:95:79:69:3e:29:6b:81:f0:bf:5b:
7f:bb:39:da:ff:c6:8d:6a:4f:05:d8:47:93:bb:4c:
34:b3:e4:15:bc:68:ba:62:81:9c:35:c6:79:3d:8d:
7c:18:99:83:cd:80:09:c2:f8:d9:d5:60:fe:da:84:
f7:e0:af:84:8f:b5:10:73:48:00:b4:23:40:da:59:
99:4d:cf:12:ac:19:2e:e5:6f:4d:65:0c:6a:6f:cb:
73:a3:97:83:f9:a0:06:a0:20:8a:94:f0:4d:12:92:
a9:d4:18:97:85:0d:8e:01:04:58:7d:e8:79:5a:55:
9c:95:4a:72:38:c1:7a:d8:66:3c:70:1e:e7:d0:21:
97:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4F:FF:2B:A3:1E:7D:8C:83:7B:C3:ED:E3:F3:29:91:61:3F:51:AA
X509v3 Authority Key Identifier:
keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5e:95:7f:7e:6c:c5:76:65:7e:b9:ed:a4:55:78:15:e9:bf:
22:0b:f1:43:42:a1:0d:8e:65:d1:34:73:a8:62:67:54:41:31:
7b:6d:5d:5a:0c:2d:fd:12:67:46:67:15:1d:c3:a6:84:b1:f1:
7c:ba:b7:3e:e4:d2:32:2b:33:7b:e2:4a:f6:a6:fb:dd:0a:4f:
9e:a4:80:b9:c2:fb:7e:0c:b2:6f:6f:a3:2f:c5:7a:b4:a4:bd:
c0:66:6d:dd:a2:a6:96:39:8c:0d:04:05:a3:fb:45:0c:e3:32:
3c:45:a0:21:9e:92:38:87:c4:cd:14:49:ff:72:a6:14:d2:37:
49:73:d5:b6:ba:3b:67:0b:89:8d:8a:14:17:d1:99:41:35:35:
c8:7c:fd:ec:5f:e5:c4:77:1b:70:b5:7f:8f:f5:9f:cc:3b:2e:
8f:a3:96:39:d7:b6:98:21:27:1a:0d:c5:0f:3e:33:ba:e9:ee:
75:c6:16:9f:d3:37:2e:dd:be:6e:56:94:47:4f:c9:9d:1a:03:
d7:39:e6:47:e8:6a:f4:aa:fd:20:29:57:da:34:65:59:61:94:
77:34:83:b1:f6:a5:e1:8d:4a:76:f9:aa:af:00:fe:95:51:65:
d0:a3:81:77:55:83:9c:d2:d0:b0:76:fe:6e:fd:28:2f:6c:6d:
17:72:e8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 08:17:13 2026 by rpki-client