Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
File: RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft (raw, json)
Hash identifier: hMqdH6bl0zReSNK7NIgvee9KAiNNST3H+dgBjIeTWYs=
Subject key identifier: 04:8D:60:13:F7:C7:E6:70:B3:10:20:E2:73:E2:3A:E3:9E:71:39:FF
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Certificate issuer: /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial: 019FCCDD8C11DC1B1192D1D0171B02A1267D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
Manifest number: 19E7
Signing time: Tue 04 Aug 2026 13:01:38 +0000
Manifest this update: Tue 04 Aug 2026 13:01:38 +0000
Manifest next update: Wed 05 Aug 2026 13:01:38 +0000
Files and hashes: 1: RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl (hash: ocEARxwZKUIl6hOo2KE1lA5r7G/hQZ8VftNJNa7hdn8=)
2: mQOpqLaDGvgovaJyvLyQ5sBrw84.roa (hash: MhfMc5IHy7Q2RpMmEQc+IAMBkW+5nzpl9I5JKbxrZ6A=)
3: vKfh_-tsEstDK_pHiwP3rsQ6SOk.roa (hash: UDcDB4CQNfkJ685xuZBpEtrUZDLT9OaVBo1hay5J/3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:dd:8c:11:dc:1b:11:92:d1:d0:17:1b:02:a1:26:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
Validity
Not Before: Aug 4 13:01:38 2026 GMT
Not After : Aug 5 13:01:38 2026 GMT
Subject: CN=048d6013f7c7e670b31020e273e23ae39e7139ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2f:11:c4:fc:d8:9e:0d:97:cb:e2:7e:f2:b5:
83:31:f9:ed:93:2e:a1:7f:88:66:c2:15:ed:42:ce:
25:79:a6:ec:fd:96:8c:97:c4:b7:9e:88:ab:73:d2:
06:77:b8:5d:14:03:b1:29:08:92:23:24:2d:39:bc:
b5:2b:37:ec:22:cc:a3:af:99:07:a1:48:41:b5:63:
5b:16:ef:e6:f2:eb:5a:27:3e:9a:ca:45:03:8a:62:
95:de:07:cf:f2:aa:6c:df:71:4d:32:10:08:57:f7:
2a:74:20:d4:d0:1d:09:75:ec:2c:03:c3:6b:77:15:
09:b7:97:c2:4d:c7:6b:32:d2:d6:65:78:79:c8:32:
77:66:48:38:10:dd:e8:29:6a:79:b9:35:bb:28:36:
20:d9:45:67:02:46:be:a3:98:fe:f0:4e:a6:97:48:
5d:11:7f:de:b5:fd:9a:85:d7:99:12:5e:fb:76:8e:
b4:70:09:00:ed:2e:f8:4c:cf:e0:b0:55:88:fd:29:
0f:07:dd:2e:b7:77:44:7e:c5:36:61:2b:a6:dc:fd:
15:eb:38:ad:ed:c2:06:1a:23:6c:44:fa:7b:dd:c4:
ed:1c:c5:0d:57:28:ca:2b:8d:9b:8f:f9:34:85:cf:
46:4d:25:a6:be:3a:3e:15:9e:cc:59:98:36:e7:39:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8D:60:13:F7:C7:E6:70:B3:10:20:E2:73:E2:3A:E3:9E:71:39:FF
X509v3 Authority Key Identifier:
keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9c:0b:de:bf:31:9c:27:bf:b0:80:97:f5:59:a9:0d:00:c7:
fa:da:0d:82:57:2f:6c:79:33:ef:a5:82:ed:a2:9e:96:ce:48:
9c:ce:93:fd:87:4f:02:80:f1:13:61:1b:56:8d:04:2e:99:da:
9b:7d:2f:ca:b1:5b:9d:0f:6b:b3:e5:2f:27:ac:25:25:2f:23:
46:92:e8:35:3b:3f:01:c3:fa:ef:41:a5:e1:1f:aa:d9:fe:17:
34:ca:b9:d3:74:cd:28:32:45:06:11:96:bc:9e:ad:27:f7:1e:
35:2b:5c:2c:8b:a9:a3:b4:9c:0a:35:b2:6d:54:89:df:e0:b7:
c0:c2:ee:e9:04:d8:1b:82:ae:75:df:5a:00:40:cc:1c:f5:24:
78:c7:b7:df:91:b9:e5:24:bc:0c:42:0c:9b:24:d6:0d:8b:cb:
45:67:91:08:5c:35:5f:69:7b:8c:3c:89:42:d0:8f:97:fd:78:
56:07:dd:da:44:27:45:b1:b0:12:46:76:b0:13:97:d4:23:37:
ed:6b:01:e0:09:7e:23:ac:3a:5b:33:25:50:f5:a6:8f:d3:e1:
37:ce:a0:8d:2e:a6:f8:f9:96:53:a9:04:ec:f6:bf:c6:bd:ad:
d4:00:ec:02:1e:36:92:c5:73:19:d0:80:b7:8f:94:94:2e:de:
1a:32:ac:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:56:01 2026 by rpki-client