Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
File: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft (raw, json)
Hash identifier: bj2Buet+ROaj7SBzLeIGImeRb2Vm4ExZjUz9UX/dxr8=
Subject key identifier: B2:E8:DD:95:23:64:6B:3E:9F:1D:7B:0B:0F:15:CC:5D:C0:8F:ED:A2
Authority key identifier: 9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
Certificate issuer: /CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Certificate serial: 019D371B91590FAAE37800A8891E9C84C1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
Manifest number: 0EA2
Signing time: Sun 29 Mar 2026 01:00:46 +0000
Manifest this update: Sun 29 Mar 2026 01:00:46 +0000
Manifest next update: Mon 30 Mar 2026 01:00:46 +0000
Files and hashes: 1: Q-ONeNtmD3ybAzTUMhGC9MjTNNo.asa (hash: okiWGqJS235fCpGNLndRTcJ9gZ0cQPFcyQUgRG2jzsY=)
2: SvxCrHRH9qtDgRtKCtLQ9Vh4GMg.roa (hash: hh/DbdPPGnpvcaZfF2CgRTxk6vKo3UGb19IP1Aj8Lm0=)
3: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl (hash: lwyfGQm4h0pBwAxMuJ/ebcT22Z+aEvid+KecI76GbU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:91:59:0f:aa:e3:78:00:a8:89:1e:9c:84:c1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Validity
Not Before: Mar 29 01:00:46 2026 GMT
Not After : Mar 30 01:00:46 2026 GMT
Subject: CN=b2e8dd9523646b3e9f1d7b0b0f15cc5dc08feda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:ea:f2:d7:18:74:f4:a5:87:49:fb:20:df:
c8:1d:24:e6:1a:d3:8f:2f:50:cd:1b:52:6d:05:87:
40:30:c4:6e:4a:99:9e:b1:0f:b1:d6:6c:00:a7:a2:
d6:33:4d:72:31:1a:fa:17:8c:1e:0e:0b:62:ef:fa:
0b:96:76:7e:8d:66:5b:82:78:84:3e:53:2a:03:ed:
52:73:a6:7b:54:0e:16:a9:3a:47:33:2e:9a:16:f9:
98:7f:76:e0:8f:7d:2a:84:89:5a:05:83:34:b8:22:
9f:38:f8:d9:a9:b1:78:6c:79:cd:7a:83:40:a1:c6:
7f:5b:a0:19:cd:98:9a:d0:54:a4:50:a3:09:7f:39:
05:10:fe:c2:c5:60:7f:32:60:f5:11:5d:16:e9:c4:
ed:37:07:84:24:db:aa:50:aa:85:f2:33:2c:f9:63:
d9:aa:f9:33:94:fc:2f:0a:4b:7d:e3:13:73:3d:18:
8c:75:15:05:2e:c7:36:ad:53:50:e3:ae:04:dc:fa:
c1:8c:6e:aa:52:d0:c0:c5:13:38:fa:28:23:c9:be:
21:9f:1d:fb:a0:b5:8d:7e:1b:6d:8d:36:04:25:dd:
df:e0:c0:96:c1:7e:79:06:13:84:42:d4:c8:2b:38:
5f:d5:6e:00:82:6a:51:38:92:01:e3:eb:4a:12:04:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E8:DD:95:23:64:6B:3E:9F:1D:7B:0B:0F:15:CC:5D:C0:8F:ED:A2
X509v3 Authority Key Identifier:
keyid:9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ff:2d:6f:92:98:8c:ff:e9:0b:a1:ba:a9:f0:9f:43:27:7c:
d7:e2:77:45:80:7e:d8:2a:84:fa:bb:45:63:27:bb:f7:56:cf:
d0:bd:e7:68:c3:96:bb:97:e4:3e:12:50:5c:2b:9e:a6:3f:35:
20:56:e6:19:06:01:9d:d3:95:7c:35:e2:e1:d1:de:3d:db:ec:
a5:70:04:74:d9:28:74:35:a5:9c:7a:fa:a7:c8:75:97:b0:b3:
80:9c:d6:ae:0b:aa:12:63:2c:d9:1b:9a:da:14:bf:b8:6c:08:
35:b8:ec:8d:17:4c:78:a3:16:4f:63:5a:98:9a:7a:ea:b4:17:
1f:7d:4f:bd:49:4f:66:9a:e8:f7:ff:09:09:4f:7e:a6:1e:49:
29:06:13:6b:83:07:f3:79:ab:63:97:d0:90:a4:07:72:35:a4:
d3:b1:e2:51:af:c0:de:98:ba:a2:ec:dd:5b:4e:45:fb:82:51:
f2:99:3c:d2:84:1d:a0:81:64:48:74:fb:44:1e:7e:73:f3:2b:
c7:47:4d:e6:a9:98:ff:12:a2:ca:07:e8:b0:3f:83:7c:1f:87:
a8:81:6b:6d:f1:db:4c:29:89:f1:80:57:44:79:22:ed:98:b3:
b5:29:4a:30:dd:66:60:03:49:26:f6:51:a2:94:df:1d:5a:ac:
31:cf:02:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:12 2026 by rpki-client