Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
File: MxvOLugG6TYhES29YYU293X0T7o.mft (raw, json)
Hash identifier: Im2SLnoQgAIgP0Q7cA9LoCb9DrHVMeX2zODJzaZyF8k=
Subject key identifier: 3A:86:1B:FB:B7:E8:68:01:B0:92:FE:1D:42:DE:43:3B:89:0C:1B:DA
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 01A1DE0290CDD64CC14159EAA556EA53A529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
Manifest number: 1B10
Signing time: Sun 15 Nov 2026 07:01:12 +0000
Manifest this update: Sun 15 Nov 2026 07:01:12 +0000
Manifest next update: Mon 16 Nov 2026 07:01:12 +0000
Files and hashes: 1: MxvOLugG6TYhES29YYU293X0T7o.crl (hash: aKJzmXcrcdGFCa+NI48c7zAVbY7wai/8HP9umMo6GZU=)
2: _nsHDGsxSW2xMTXJcSwiD-J3Jl4.roa (hash: mF6gTp6ZB9piQiXwLO2UJXYdCQJiTLfpyOjrPM5peb0=)
3: gU4rt6UfX908kKCYCroARSroPkQ.roa (hash: j63IJzIDAdlriUlQV4IJaH+lIR+tUTSbCwMefhCYMjM=)
4: lOIMCulf3GuUI-StD1Yh4jlDqeM.roa (hash: 4dwpJqsJk7jN6O3n0GStqU7QEqIZidtJe8tQJ1wjz+Y=)
5: x5dZH_p1jpQNmkzAGadQtc_NwNA.roa (hash: j7kE+HBT1mrUTqWPhu4yo406PYqylXV+5uj+qLftudY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:90:cd:d6:4c:c1:41:59:ea:a5:56:ea:53:a5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Nov 15 07:01:12 2026 GMT
Not After : Nov 16 07:01:12 2026 GMT
Subject: CN=3a861bfbb7e86801b092fe1d42de433b890c1bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6c:87:6f:cd:8d:ed:5e:a7:0c:3a:83:f6:2e:
56:ad:c5:5b:10:75:73:fc:94:3e:a3:56:bf:4e:fb:
33:f6:3c:5a:72:d4:ec:7b:64:4e:44:59:16:9c:d4:
6c:68:90:53:d4:4f:e5:39:fd:22:9b:2d:cb:7f:41:
84:3d:cf:ab:b6:b8:32:36:4c:af:39:00:77:74:e4:
79:d7:7b:02:b8:a5:78:ad:a8:70:dc:06:7b:7a:25:
57:e2:a8:d0:b5:1c:eb:fe:58:63:e4:5c:64:4e:9b:
72:ff:50:45:dc:e9:a7:19:4a:74:f8:c7:52:84:e7:
f9:d1:81:2c:b0:20:4a:3f:68:99:32:cd:33:f6:a8:
cc:1a:7d:73:9d:7c:2e:8d:57:28:09:86:7d:d9:ca:
ba:59:61:32:62:21:58:76:10:4c:2f:b3:be:5c:00:
75:5b:d7:0e:7c:fd:b9:77:70:21:b8:90:57:ca:7c:
a3:b5:02:84:88:b2:40:39:79:7c:8f:f4:55:bc:0c:
4d:8e:6b:05:ec:21:6e:7a:a4:4f:e0:8a:68:b9:54:
27:76:c1:b1:b9:a9:cc:8b:0c:f4:fc:8b:16:c2:f1:
b9:cc:d3:a9:b8:c8:68:59:d6:79:95:b8:a2:e8:c6:
e4:c8:95:f2:ae:59:70:49:45:1c:71:30:45:6a:35:
8d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:86:1B:FB:B7:E8:68:01:B0:92:FE:1D:42:DE:43:3B:89:0C:1B:DA
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:05:7f:3d:83:97:cf:ed:dc:11:ad:51:41:b2:7e:fb:f9:bf:
55:d5:bf:ef:54:d4:10:cd:85:cd:de:61:14:64:b0:57:0a:46:
1b:58:24:5e:91:8a:1b:c0:5c:4d:fb:f6:7f:aa:26:0d:7e:45:
b4:ff:b2:16:af:89:c8:6d:e9:20:ff:54:df:40:c5:67:e5:b0:
6d:ed:00:27:43:5e:71:d2:21:a3:7b:cd:fe:a8:cf:05:89:41:
7c:04:92:fa:cd:36:6d:78:fc:ab:b7:02:2a:7e:70:b3:88:64:
1c:dc:80:d6:43:b0:d1:c0:d5:97:30:78:19:46:a9:3f:8b:7a:
21:8e:41:3c:e6:4f:2b:15:3a:1d:ef:d5:88:5b:6b:53:91:89:
8b:86:2d:fb:e0:c7:d3:49:9e:a3:0d:0a:35:06:5d:ab:1a:1d:
99:69:0c:41:7b:01:ba:13:01:aa:f5:1c:18:46:91:28:6c:d1:
fc:a7:f4:9a:b6:e0:d7:5e:8a:80:5e:d6:62:7e:93:4c:ff:be:
b8:51:2f:52:9f:eb:ee:a6:05:f7:42:31:2f:8b:ca:32:71:c0:
6c:14:9f:66:ef:ff:35:0a:4a:69:9c:1b:b8:97:02:0c:ee:f6:
22:22:b5:d3:9c:ed:49:d3:94:57:9c:42:c1:1d:ba:d3:6c:35:
92:42:56:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:31:31 2026 by rpki-client