Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
File: MVipNBic8FiR-MTlmdC5iVfplyk.mft (raw, json)
Hash identifier: cj6Rt2IfcvF6cR6tppm3Mnebcr0+TI44paWe5a3g8NM=
Subject key identifier: 24:19:BC:BA:35:F6:18:3A:41:62:33:8C:C3:F6:04:AB:CF:6D:AC:21
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial: 019D2816954025BF16B0DBDB41D1F2C74500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
Manifest number: 0741
Signing time: Thu 26 Mar 2026 03:01:01 +0000
Manifest this update: Thu 26 Mar 2026 03:01:01 +0000
Manifest next update: Fri 27 Mar 2026 03:01:01 +0000
Files and hashes: 1: MVipNBic8FiR-MTlmdC5iVfplyk.crl (hash: ISq4bcNARgTQZcFvES4iTSJHCbaWi1Q3k/nZVwTQvsY=)
2: SoUQ5tjPimIs5vL0jQz1k3-Y_k4.roa (hash: rxeG5Q9fjMcRXTA3/mQpeB3InL8UbHM8sXy68JYVcRc=)
3: WN6nm9P1utuZWbfPP4NpFvTEUfc.roa (hash: vxFDJKyu6Fl9t1C3JXTJl+d0N1fXG6sGHHUW42DW59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:95:40:25:bf:16:b0:db:db:41:d1:f2:c7:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
Validity
Not Before: Mar 26 03:01:01 2026 GMT
Not After : Mar 27 03:01:01 2026 GMT
Subject: CN=2419bcba35f6183a4162338cc3f604abcf6dac21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:51:c4:aa:a0:71:73:b7:96:b4:75:f7:66:
0c:0d:ad:d2:57:e7:2d:13:eb:b9:2c:68:cf:9d:4c:
42:38:4d:af:b0:2f:31:d8:b2:0a:ae:3e:34:9f:60:
63:81:cb:d2:d1:b3:f3:9a:e8:77:9d:ee:f8:93:9b:
1c:dc:c0:24:82:cb:ff:de:da:ca:ec:75:5b:72:0a:
a5:da:3a:4b:37:cd:bf:87:e7:c7:5b:03:92:a2:d3:
01:68:ab:12:52:82:d1:e9:fd:be:46:d8:58:20:ec:
bc:d2:bf:91:62:d7:d5:fe:f7:5d:f1:13:9a:4e:12:
cb:d0:b7:ea:2e:24:b3:0b:c5:34:1b:68:bb:aa:bb:
3c:8b:c5:b7:d9:52:de:fa:ae:15:22:3c:36:17:18:
8e:ef:7b:66:69:dc:ec:14:7d:e0:9c:14:32:7f:b7:
80:5a:a9:7b:c6:13:14:70:fc:7c:18:0b:e6:a1:14:
2d:21:24:84:38:96:4c:1e:06:78:bc:0d:a2:1b:2f:
f2:5e:df:1c:c9:39:ff:61:32:3b:0b:21:99:c8:3f:
03:a8:1a:42:c5:73:16:29:d2:18:c8:c2:41:83:ec:
e7:83:f1:56:b3:d7:ef:f4:ec:de:55:52:be:e3:9f:
0f:8d:16:09:8f:17:f9:a2:f9:5a:bd:d2:d9:4e:61:
c5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:19:BC:BA:35:F6:18:3A:41:62:33:8C:C3:F6:04:AB:CF:6D:AC:21
X509v3 Authority Key Identifier:
keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:43:66:cf:0e:51:e4:a4:16:01:89:9b:c5:72:42:af:67:78:
0e:90:a3:e1:5c:90:f2:40:46:c4:ef:77:2c:c7:df:4a:c8:eb:
55:6e:b3:0e:15:c3:f1:18:23:26:6e:21:52:fa:97:93:02:2e:
fb:49:77:4d:86:fb:32:8d:23:8f:0f:3a:99:6b:ff:fe:33:e2:
a2:c5:78:5f:2e:93:97:28:b1:b5:98:42:04:84:2f:7b:07:50:
57:37:4d:ae:e1:06:06:9b:c8:cd:db:8c:b4:77:f6:78:2e:83:
58:e3:d0:fd:87:a7:ba:c9:ab:bd:4a:cb:d0:7a:2d:a0:a4:de:
3f:9e:64:11:87:f3:44:0d:18:75:e1:16:b1:cd:ec:05:02:15:
80:ba:cf:14:df:20:32:b2:95:5f:eb:16:c7:d8:a3:e4:6f:08:
d0:2b:d5:11:fe:69:5f:26:5b:86:a0:5e:21:21:01:55:ce:3f:
49:c6:79:94:78:0e:54:3e:80:c5:a5:a8:f7:20:f0:8e:3b:21:
34:ec:be:2a:a2:6d:80:b8:10:ff:1e:a4:b8:a7:12:e2:13:d6:
33:20:03:2b:72:9f:4b:95:27:fe:b3:81:7e:e6:8d:f2:e9:63:
95:8d:eb:4c:ef:f0:ff:c6:9e:ff:52:b9:76:06:c6:45:a6:af:
6e:2a:88:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:13 2026 by rpki-client