Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
File: MxvOLugG6TYhES29YYU293X0T7o.mft (raw, json)
Hash identifier: fE/GWbZbcTAf2nej2uUIDSjS20Jgc7YsKaOfsC0Kt9Q=
Subject key identifier: 68:F7:63:5A:46:93:EE:57:7E:BC:69:A1:51:18:45:55:B3:B2:79:40
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 019E1DC79875643F920E02255490116D9D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
Manifest number: 191E
Signing time: Tue 12 May 2026 20:01:20 +0000
Manifest this update: Tue 12 May 2026 20:01:20 +0000
Manifest next update: Wed 13 May 2026 20:01:20 +0000
Files and hashes: 1: MxvOLugG6TYhES29YYU293X0T7o.crl (hash: zjrTxhH2EletMoDKe0FVH6H+lMPfZvCT+eZv6zQLfUk=)
2: _nsHDGsxSW2xMTXJcSwiD-J3Jl4.roa (hash: mF6gTp6ZB9piQiXwLO2UJXYdCQJiTLfpyOjrPM5peb0=)
3: gU4rt6UfX908kKCYCroARSroPkQ.roa (hash: j63IJzIDAdlriUlQV4IJaH+lIR+tUTSbCwMefhCYMjM=)
4: x5dZH_p1jpQNmkzAGadQtc_NwNA.roa (hash: j7kE+HBT1mrUTqWPhu4yo406PYqylXV+5uj+qLftudY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:98:75:64:3f:92:0e:02:25:54:90:11:6d:9d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: May 12 20:01:20 2026 GMT
Not After : May 13 20:01:20 2026 GMT
Subject: CN=68f7635a4693ee577ebc69a151184555b3b27940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e6:0d:4b:35:bd:76:d2:13:26:89:d3:86:64:
3f:e2:69:ef:c0:93:5a:1d:72:6c:ab:f1:56:d6:5b:
7a:9c:b2:eb:2c:20:66:f1:ac:d3:eb:28:1c:9e:41:
c1:66:61:23:9e:5d:41:04:5b:8d:cb:d3:ec:fd:88:
bf:9d:82:57:a1:5f:ff:d2:04:71:8d:a9:62:28:76:
04:81:6e:7a:7e:8f:68:d8:1b:d3:10:76:38:32:6e:
5b:fa:98:5d:ce:a8:dc:db:32:7d:c7:6d:60:b6:a6:
79:56:ef:39:b2:27:d6:1e:f1:d3:d2:c9:ef:1c:c5:
95:91:91:b8:64:6a:fb:77:3a:0b:d4:20:bd:0a:89:
39:f9:f3:7a:77:ce:af:6e:9e:ff:9e:29:ba:ff:5a:
bd:6d:77:25:96:c9:69:14:3c:6e:3d:5d:37:3f:56:
50:01:45:63:3d:aa:20:be:8e:84:c4:c4:ca:88:c4:
31:71:8a:80:35:dd:e6:fd:89:98:83:a9:89:01:64:
32:6e:8d:a3:73:a7:02:58:87:c7:94:09:92:77:63:
49:1c:98:c0:2d:2b:0f:70:80:e2:95:93:5f:f9:29:
bb:b1:67:0e:ee:b9:c8:98:31:4c:fc:9c:2d:ed:1e:
1f:84:bf:c7:a6:d8:48:03:4b:0b:51:f1:aa:20:63:
ef:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F7:63:5A:46:93:EE:57:7E:BC:69:A1:51:18:45:55:B3:B2:79:40
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b9:79:8f:e8:d5:ca:af:cb:a4:b5:06:95:02:cd:25:9c:cb:
ef:3e:51:8f:26:15:82:dc:97:80:81:96:96:2c:fe:fe:aa:ec:
fc:db:2d:1d:f8:79:76:8e:c3:2c:fb:b3:2f:0a:16:fb:fa:37:
43:bd:c6:1a:27:37:1b:96:fd:3a:fb:b5:8a:39:3b:1e:f3:37:
2e:1e:9c:76:ac:73:96:94:57:5b:83:37:cc:b1:a9:c4:ac:db:
e3:89:20:11:f8:8d:9d:e7:a1:3c:21:a0:f5:ec:4e:2c:26:e6:
f0:bd:ac:68:57:b7:c6:1c:82:65:33:42:e4:28:eb:70:73:aa:
87:14:d6:02:3c:4d:a3:a3:58:4a:72:88:d7:3e:13:3a:27:e6:
67:e8:4d:ab:f7:55:90:cc:b0:51:aa:c5:99:d7:f4:ad:9d:ca:
9e:83:bc:39:92:73:bb:aa:66:26:6e:b3:3b:65:3e:33:96:52:
ba:4c:f3:bf:eb:7a:53:71:5f:35:22:c1:96:28:2e:a4:3c:12:
c8:1d:f0:16:c3:d3:21:9f:84:bc:1d:44:7b:d7:d8:d6:cd:89:
d6:36:d7:f0:83:2b:7d:0d:c6:9d:0e:d6:91:56:49:a4:6b:f6:
a3:c6:76:ab:45:f0:59:69:e8:c8:a4:a5:59:2f:12:8b:a0:c4:
bf:2c:b1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:01:33 2026 by rpki-client