Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
File: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft (raw, json)
Hash identifier: fpVMsFa4Xu7exIyJC1Gc9MyEHIzzjZN1QPKLz/To07M=
Subject key identifier: A1:97:5B:92:DB:7A:B1:89:5A:2C:D4:F2:68:57:71:A7:6E:48:7D:4C
Authority key identifier: 9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
Certificate issuer: /CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Certificate serial: 019F122EDD6DCCFAD1C2F63D3434763127F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
Manifest number: 0F98
Signing time: Mon 29 Jun 2026 07:01:29 +0000
Manifest this update: Mon 29 Jun 2026 07:01:29 +0000
Manifest next update: Tue 30 Jun 2026 07:01:29 +0000
Files and hashes: 1: Q-ONeNtmD3ybAzTUMhGC9MjTNNo.asa (hash: okiWGqJS235fCpGNLndRTcJ9gZ0cQPFcyQUgRG2jzsY=)
2: SvxCrHRH9qtDgRtKCtLQ9Vh4GMg.roa (hash: hh/DbdPPGnpvcaZfF2CgRTxk6vKo3UGb19IP1Aj8Lm0=)
3: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl (hash: 35RDz/yOKwaWGExtU9hlKArQnq4q1B/pZ2Zo7utqDSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:dd:6d:cc:fa:d1:c2:f6:3d:34:34:76:31:27:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Validity
Not Before: Jun 29 07:01:29 2026 GMT
Not After : Jun 30 07:01:29 2026 GMT
Subject: CN=a1975b92db7ab1895a2cd4f2685771a76e487d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2b:c0:b8:30:bf:81:44:4a:2c:91:89:dc:27:
8e:3f:22:ed:1f:53:7e:05:0f:8e:8c:cc:b0:a5:06:
aa:27:da:c8:f4:c5:33:cf:68:40:86:ab:83:a8:a1:
27:59:b4:25:84:5d:64:d6:87:f8:55:44:6e:5a:c2:
88:a6:b5:f4:4a:5c:92:11:2b:e4:f1:32:69:cd:5e:
bd:39:d4:fd:56:f4:dc:a1:c5:9f:db:8d:82:98:b9:
d4:ad:1a:97:a0:97:d7:11:8a:81:04:cb:42:e5:c6:
14:15:3d:11:95:0b:bd:e7:e0:c6:ed:52:a8:16:f2:
5d:17:7d:93:4d:95:84:9c:ba:3e:94:0c:72:c3:85:
d9:71:45:2c:14:e0:ce:d3:5d:51:7b:81:a1:58:a8:
54:8e:77:ad:ae:cc:17:8b:0c:10:2a:ab:34:46:a8:
b0:a6:4f:9f:d0:c6:b1:93:a8:02:8b:45:84:0e:64:
a7:6c:16:6b:e5:84:eb:20:d8:68:69:a3:52:67:8d:
4f:93:89:19:ce:c4:7e:d1:7d:91:3a:9b:39:60:99:
21:a4:13:9c:d8:6c:02:be:aa:df:bd:d6:1a:40:2c:
0a:bc:f8:a5:ad:19:1b:e9:63:30:23:6d:91:17:f2:
50:ae:41:9e:27:17:a8:04:1b:cd:53:a0:6f:f0:4a:
bb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:97:5B:92:DB:7A:B1:89:5A:2C:D4:F2:68:57:71:A7:6E:48:7D:4C
X509v3 Authority Key Identifier:
keyid:9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:65:8c:ad:3d:2b:cc:ad:1c:08:0c:59:11:78:4a:aa:9c:ff:
11:11:92:d0:b4:b1:63:d8:40:41:c3:6b:2b:ea:bb:6b:2c:53:
41:d9:e6:28:43:08:11:53:08:fd:89:b5:06:da:dc:06:00:d3:
56:3a:be:3e:58:4f:e3:b9:51:9a:3d:76:25:a3:96:39:09:cf:
3e:e2:3b:d0:57:76:65:c0:3d:50:9d:e6:c9:a0:2e:86:33:80:
46:40:53:ef:e1:82:5e:e7:f5:20:14:fd:dd:e1:55:ec:20:19:
20:0d:e3:58:74:e4:89:06:76:7c:83:ed:e1:9c:f1:18:65:a1:
2b:61:0c:b6:77:d6:c3:52:89:c2:73:53:02:fb:33:b6:32:8e:
3e:59:81:bb:06:3d:03:c8:ce:fc:85:53:5b:bc:ed:40:81:ef:
40:80:00:48:8b:a8:37:0a:4c:47:86:14:43:f1:20:ab:b6:bc:
bf:22:1a:cc:2d:85:e4:a1:b7:8b:7f:f3:6f:54:e8:dc:d6:80:
3e:39:86:e4:ce:18:b2:1f:3e:41:21:4f:13:b1:c2:cd:93:7e:
cb:50:bf:ae:91:9b:69:90:aa:08:00:86:21:69:04:9b:46:07:
dd:45:2b:68:0b:8c:e1:b2:06:89:f1:c4:8a:c6:f5:ff:fc:fa:
7b:55:7b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:20 2026 by rpki-client