Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
File: mpTE6sr0BAocMO0e3qjjAAcxtqo.mft (raw, json)
Hash identifier: fzDDpTzY3LXMBAPfjiKrD84KLayMLOknYQLZuJyR+9k=
Subject key identifier: 2F:7E:57:52:50:F4:1A:B6:D1:B6:10:94:CB:00:3E:CB:13:13:2B:8C
Authority key identifier: 9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
Certificate issuer: /CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Certificate serial: 019D382E93B71CA6FCB7CDA6E16091CBF821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
Manifest number: 0744
Signing time: Sun 29 Mar 2026 06:01:09 +0000
Manifest this update: Sun 29 Mar 2026 06:01:09 +0000
Manifest next update: Mon 30 Mar 2026 06:01:09 +0000
Files and hashes: 1: kUsI4SRxxZP0gd_4YTt-HTTnRSc.roa (hash: fG/gmFQxL44rDJ/8bE+/AVQ5a2QcbRZO0R8IThxbrH8=)
2: mpTE6sr0BAocMO0e3qjjAAcxtqo.crl (hash: LVT3rHXUmE69iAbpvRjvF7LOshadwosuwkQPV6/58Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:93:b7:1c:a6:fc:b7:cd:a6:e1:60:91:cb:f8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Validity
Not Before: Mar 29 06:01:09 2026 GMT
Not After : Mar 30 06:01:09 2026 GMT
Subject: CN=2f7e575250f41ab6d1b61094cb003ecb13132b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a0:2e:65:ab:e4:49:c6:72:4e:e1:e4:0a:49:
51:44:55:1e:bf:6d:43:f9:b8:8e:5c:59:7b:2c:ef:
5f:38:80:81:54:bc:0b:ec:e6:90:5c:6c:31:52:3c:
af:bc:02:7b:38:0b:ab:e9:10:e4:f3:3e:ae:60:46:
39:0a:3a:a2:a0:b4:04:9e:ca:b3:b9:49:69:29:77:
a1:6c:0d:8c:1d:d4:7d:d4:92:0e:e4:1e:33:3b:74:
da:d6:12:b4:64:1c:4b:c4:aa:3e:45:ce:80:de:52:
ea:30:da:94:8b:ff:2f:a7:89:af:e8:11:e8:c1:11:
9e:82:8b:f6:0a:f2:b4:77:61:19:3e:65:52:48:6d:
13:49:7e:25:f7:e3:47:27:d3:23:2f:f6:62:e2:89:
4b:b7:a8:52:9f:5b:85:f8:f9:a0:2b:fe:f1:94:6c:
ee:04:22:71:bf:7f:d5:ca:eb:f0:81:38:03:5f:06:
d6:b7:65:d2:60:a3:85:9a:64:9a:c0:8c:90:87:12:
77:b6:ce:89:81:50:55:e8:d6:e3:93:7f:be:c3:7e:
54:10:23:20:ef:78:df:42:f6:9a:37:88:88:8b:ee:
57:f3:b6:a8:24:f1:be:ea:48:43:d9:a5:19:39:94:
13:9b:13:43:24:ba:d9:d4:1b:00:c0:91:45:7f:1e:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7E:57:52:50:F4:1A:B6:D1:B6:10:94:CB:00:3E:CB:13:13:2B:8C
X509v3 Authority Key Identifier:
keyid:9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c7:2c:1a:7d:55:f4:b9:c8:ef:7d:97:f9:e2:58:7b:d6:13:
83:ab:b5:1d:37:2c:a5:98:1f:3c:0c:3f:e4:3b:f6:15:c9:74:
20:f6:26:97:e3:51:81:20:12:66:f3:52:dd:b3:78:9e:d2:40:
59:7d:f0:d0:f0:7a:78:87:a0:d7:a0:cb:a1:91:da:20:92:a8:
7c:44:36:92:1a:36:82:2e:5c:1f:cb:63:6e:2f:82:28:1d:74:
a0:5a:08:9f:d5:26:34:d9:cf:b8:31:60:42:6b:25:a1:8f:7e:
45:4d:51:66:95:5f:f7:31:d3:3c:10:95:74:c3:60:9f:e4:1a:
84:76:ad:18:fe:3d:e4:cd:40:54:8e:78:a7:80:39:44:c4:44:
33:19:87:8a:fb:a0:8e:d9:1d:25:f1:1d:41:98:38:c2:e9:4e:
26:36:6d:90:07:a6:1c:2b:22:08:c8:da:0e:8b:76:b4:eb:07:
50:9e:97:73:82:8a:1b:4d:c0:58:14:5f:a6:3f:be:e3:1a:91:
d5:4f:ca:05:c1:eb:88:78:b8:73:33:95:34:bc:48:ea:d7:07:
ae:96:82:38:32:c9:00:aa:80:22:a7:13:e9:3e:5d:92:a9:b4:
7a:09:16:d5:f3:01:ef:51:7f:29:b5:bf:f3:93:a3:a4:ab:60:
86:e6:20:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:40 2026 by rpki-client