Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File: MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier: WG0LcdHb58jukLIEdSkoYg7DBwdB6ImNqhNiV++9avQ=
Subject key identifier: D4:04:0A:9E:37:26:48:B9:35:36:ED:10:9D:4E:01:02:6B:02:49:32
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 019D2628349AA679644C17A0F9EC2E84E7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number: 0831
Signing time: Wed 25 Mar 2026 18:01:02 +0000
Manifest this update: Wed 25 Mar 2026 18:01:02 +0000
Manifest next update: Thu 26 Mar 2026 18:01:02 +0000
Files and hashes: 1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: X9nV1YFeBFYyEAgtRp514NGpWpygQ3gUE9IgSUGW3Zc=)
2: bdi1rZ-Hv8XYlMzG6p4dSyqynkQ.roa (hash: 87KIQ9XId5k9Ww9xMmtV6OZLD6Wry24vd0PmuggxAkY=)
3: d6m94tH0anOa-FWzt96zJw4rWqM.roa (hash: VXa480FkV+R92FQTcYLaqarEcGnxznUTZLh1NwOBPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:34:9a:a6:79:64:4c:17:a0:f9:ec:2e:84:e7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: Mar 25 18:01:02 2026 GMT
Not After : Mar 26 18:01:02 2026 GMT
Subject: CN=d4040a9e372648b93536ed109d4e01026b024932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:5d:9a:82:39:c3:f0:ca:aa:84:72:68:7b:
6d:dc:e5:d7:c5:ff:fd:85:3b:60:d7:1f:51:42:ae:
c2:25:81:6a:d2:cf:af:10:05:cc:5b:d1:31:74:d9:
e8:8a:0c:a7:11:bb:2e:7f:05:7d:dd:66:7e:d3:ca:
6f:1c:97:6f:3c:14:9b:36:4d:a5:b7:25:9a:41:ae:
ef:a8:2b:5d:c4:52:f7:3b:3c:72:f5:2c:aa:82:e5:
22:0e:44:ae:f3:9b:f1:14:cf:47:07:78:96:76:6c:
3e:38:c0:da:b3:1f:08:f7:6d:86:65:7b:7e:76:40:
ca:fe:43:70:f5:f5:ef:f4:d1:01:78:e6:47:fb:99:
f2:bc:00:f3:72:4b:81:96:79:0b:44:1b:5f:93:ce:
13:e4:14:15:54:9f:1d:f2:55:87:d8:c6:ee:5e:26:
db:7b:b3:67:0f:14:c9:45:ad:73:8c:e1:aa:df:aa:
91:38:15:e9:c2:69:2e:cf:f3:00:08:b0:d3:28:33:
21:3d:b9:b4:75:16:10:0b:6f:68:75:79:9f:51:01:
18:2c:10:83:f7:6d:f2:1c:d4:f3:da:3b:36:cc:ad:
8e:d9:ac:01:16:0a:6e:dd:b1:23:99:90:b9:72:c8:
97:0e:a2:ff:ab:b9:3e:70:83:f9:75:99:16:43:e8:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:04:0A:9E:37:26:48:B9:35:36:ED:10:9D:4E:01:02:6B:02:49:32
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:60:5a:54:fb:39:1e:02:7f:22:03:f5:dc:a1:a0:d4:c7:0a:
a3:2e:69:88:a5:e1:f8:e7:5e:12:66:b9:67:17:ea:4a:4f:a7:
f9:c4:3e:6d:40:26:80:ce:1e:63:63:6a:7d:11:d2:93:f5:f0:
84:d2:6d:07:48:da:5c:5e:c5:fb:91:8a:bf:a1:20:1f:6e:9c:
b8:8c:bf:88:f2:a5:44:bb:e6:48:bc:7f:0d:71:1c:6e:9d:c7:
9b:1f:4e:9c:0c:58:78:b0:01:2a:bd:81:09:f8:fa:99:69:9b:
46:12:37:40:0d:2c:f6:e8:6e:04:19:bb:2f:7f:8c:37:f8:c9:
71:43:3a:de:de:6d:fb:cc:d8:1a:5c:9e:84:56:c1:e6:76:4a:
22:73:48:ec:e9:3f:8f:ae:c8:a2:89:a0:16:85:eb:92:82:69:
22:ef:b4:8e:44:61:7c:eb:a0:82:31:67:10:14:d5:04:41:de:
43:e0:ed:9e:e3:2b:fc:82:e8:60:62:ba:3e:71:92:e2:39:6b:
8d:7c:98:02:63:ab:14:5d:16:58:8e:0f:c9:14:e2:45:a9:2d:
87:20:dc:72:d6:0f:d1:a2:12:96:3a:68:da:03:ff:3e:73:a8:
c6:be:19:54:5d:c0:6f:a0:40:da:27:d6:c0:eb:33:4c:fa:27:
e6:44:e1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:12 2026 by rpki-client