Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
File: Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft (raw, json)
Hash identifier: BCDG1/0a2I4qh4bS7KYmfgbE05+qdTqOg3fTNIDTtk0=
Subject key identifier: 91:80:8B:FF:71:46:A5:9A:12:0F:0F:49:D1:32:C1:FA:EB:B3:A1:7B
Authority key identifier: 32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84
Certificate issuer: /CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
Certificate serial: 01A08C43F16B00F9EBA10E9B0BDD84545FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
Manifest number: 0729
Signing time: Thu 10 Sep 2026 17:00:57 +0000
Manifest this update: Thu 10 Sep 2026 17:00:57 +0000
Manifest next update: Fri 11 Sep 2026 17:00:57 +0000
Files and hashes: 1: Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl (hash: rRr9Ws064Vfi9bp5tQb9b2e7/28a5fNZK/pez/EYSN0=)
2: zS1zUonEO-G6AM1cws_9_ZwZdJI.roa (hash: NMcUU3mBJ1QzroUYREZhHCEZESdeRv4hJC0eLlS6EkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:f1:6b:00:f9:eb:a1:0e:9b:0b:dd:84:54:5f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
Validity
Not Before: Sep 10 17:00:57 2026 GMT
Not After : Sep 11 17:00:57 2026 GMT
Subject: CN=91808bff7146a59a120f0f49d132c1faebb3a17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:8e:a0:54:00:10:ea:bc:f4:db:ce:31:72:
49:a4:fc:0d:66:f2:d0:ac:c8:23:92:5e:db:43:58:
ea:4e:ab:03:21:ce:36:51:6c:05:ff:26:ca:70:2d:
fd:72:6c:f2:54:d8:1e:e6:3a:32:74:80:d5:a0:ff:
f7:cc:56:ff:7b:d6:06:84:47:3d:d4:bd:b3:68:19:
99:8b:6f:d1:7f:40:5d:61:e1:0a:1b:a0:8f:8d:23:
e7:1f:3e:f7:1c:0b:26:ab:7d:bd:71:4a:13:fe:5e:
fc:20:12:2e:75:62:ff:78:17:5f:30:ce:06:4c:52:
8c:be:84:c8:74:9e:45:20:3e:cc:7f:87:a1:d8:e3:
d6:da:07:bf:a9:44:65:c9:13:d0:87:da:39:1a:b9:
8b:3b:6c:2f:de:9f:fd:39:99:b6:ea:1b:20:39:86:
9f:2d:9a:8c:64:2d:e6:fe:28:a2:5e:77:34:c9:71:
04:65:45:51:85:af:95:c4:38:ef:f2:ac:0d:1f:5c:
4d:5e:b0:67:cd:00:0d:1f:7d:c1:bd:e3:6d:3b:aa:
26:24:db:e4:89:26:b8:3b:14:91:37:0e:6b:2c:82:
9f:cc:8a:0c:b1:44:d1:40:31:ed:39:dc:a8:c5:cb:
ff:58:ab:9b:8c:60:ed:96:5b:7e:3c:24:ba:f7:3c:
a6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:80:8B:FF:71:46:A5:9A:12:0F:0F:49:D1:32:C1:FA:EB:B3:A1:7B
X509v3 Authority Key Identifier:
keyid:32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:a0:7b:7c:fe:ff:e5:1c:93:bd:89:7c:ca:44:a8:6e:6e:c1:
9e:6c:b7:b8:82:4b:70:fd:1b:37:5c:f2:c2:a6:b1:4d:68:63:
8c:8b:bf:53:0c:0b:a9:a5:08:ff:70:ff:d4:24:cf:67:4a:4f:
77:d8:b9:06:7e:51:79:10:7d:73:64:7e:8d:e1:ef:91:b3:f6:
ed:be:8d:10:13:93:51:28:87:ca:66:e0:ff:ae:b4:4f:10:32:
37:d6:ab:dc:0a:47:be:11:20:99:5c:74:59:04:39:15:d0:d6:
90:6a:5d:83:af:8f:ba:a7:a1:bf:99:31:8e:a6:16:0b:14:be:
b5:95:8b:9d:29:16:d9:9d:15:a5:43:5e:9c:ec:65:d8:74:d2:
c4:ba:e4:f3:9c:c9:09:71:86:87:cf:30:ef:55:da:9b:b9:1a:
e8:0f:21:72:83:32:62:ba:5e:ce:01:ef:14:63:b5:b0:31:84:
6d:78:60:f6:c9:46:f7:5d:f0:e0:a1:7e:b7:bd:83:a3:3c:35:
cd:b9:da:e7:a8:c5:f8:53:8c:c1:ae:23:c3:e3:e8:7e:9c:ff:
9c:60:31:2f:d8:55:6d:60:9c:57:58:40:fe:f4:39:3c:57:3a:
b4:2e:56:58:16:57:e2:54:a6:85:f7:5f:b1:c0:f1:0b:b4:af:
71:5b:f1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:07:11 2026 by rpki-client