Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
File: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft (raw, json)
Hash identifier: qdyfAzJGCu5+AGjBKwmCOHmV7oBddOp6f07Zm+LpEYs=
Subject key identifier: DD:83:2A:E1:27:86:77:FD:93:5C:54:BB:24:06:8D:72:99:B9:13:6C
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial: 019F8F4783D2CB7EF9B2C3AA87BD7364571D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
Manifest number: 0B2A
Signing time: Thu 23 Jul 2026 14:00:56 +0000
Manifest this update: Thu 23 Jul 2026 14:00:56 +0000
Manifest next update: Fri 24 Jul 2026 14:00:56 +0000
Files and hashes: 1: 05HbW4vWO71TuXnlLUIhotjCjQA.roa (hash: wd8NR6jnQPtSkv4WqVTGTX5hWiMAv5m+dMvP8o7c5l8=)
2: GB3NFSp5PGT_22uM3aHhVVz0NOI.asa (hash: riAwsj8thI/YEdA1IIz5l7mENZ2/CQiAFbdBtgwfc6s=)
3: Ju3RYBGHfTVJ0ig9g8xu4WdMw30.roa (hash: 4oJ1sds8f+aiGxncxPG+ThQtMKqUYAuJ1K3qDV4TzDE=)
4: MyskQcDy1iD50lHwlkpWk2pfgJo.asa (hash: w0AAYte+BFKp1fuUqRZUMAG2wD4yxWoVL8PbWMANMLk=)
5: f2WeliHigZNRsPyfnuBo4tGwDZ0.roa (hash: 5slWSGWLG6ATTnZtrmt7Zpoe6VhaQcLSQgvXuDKX6jQ=)
6: j8BCdYiQ_67ATYFHPKfffD1u2xo.roa (hash: GLAbtmkKsyJcTcB7QC4FgMb+NJZzC1QoILdu2duEs9o=)
7: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl (hash: hhu0obqKZsrpVqBNmtLc4Gt98RxlFffUvVpaANTqI/Q=)
8: xQPEHMR54qpU7rtPLXUkM_1Hx94.roa (hash: X3FNnLjkWD8kAWDLkX6vbg0ozoLMqd9Yva8zbEk23n4=)
9: zKkJ8cE4zPKRxtqXHT19mxBaT9Q.roa (hash: uRT/X8Hvl3ZU07bilVhDl7B14HKulQ5Y0la+tuqFss4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:83:d2:cb:7e:f9:b2:c3:aa:87:bd:73:64:57:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
Validity
Not Before: Jul 23 14:00:56 2026 GMT
Not After : Jul 24 14:00:56 2026 GMT
Subject: CN=dd832ae1278677fd935c54bb24068d7299b9136c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:12:28:9f:96:1e:22:cd:40:88:73:c9:f5:
8d:0d:85:11:4e:75:0b:52:5c:9d:e8:74:28:76:ac:
3b:2d:67:1d:0e:8a:37:54:e4:36:88:32:8c:02:c8:
84:79:f1:8a:61:ed:8e:c5:20:fd:85:24:bf:86:b9:
f2:3f:d2:07:e4:85:94:68:da:10:69:7b:99:34:f0:
b5:92:dc:83:99:a8:aa:3b:5a:69:30:34:dc:a9:f4:
50:e9:2d:2d:bd:9e:6a:04:cc:bb:cc:b7:ac:ec:39:
44:34:45:1f:a3:65:f2:13:46:cb:29:0f:04:bb:56:
53:b8:12:b0:0e:ef:ac:db:b9:6a:17:66:a9:7a:d8:
c9:bf:14:f4:79:55:16:af:02:68:1f:f8:af:1c:8d:
f0:ea:d3:cc:b3:a5:57:f1:61:5f:e2:9b:33:e6:bd:
a6:0e:94:45:7b:55:a0:8a:05:7b:51:82:2f:cf:f0:
65:18:2e:b7:34:dc:7d:6a:cb:58:72:21:2f:2b:f4:
86:26:e2:0e:f7:78:e2:b3:4d:af:f9:d3:e7:c8:c6:
d6:25:f8:37:da:a6:d3:4d:fd:a7:ea:4b:ea:a6:54:
77:91:fe:12:7b:4f:3c:f1:7a:d8:ae:2f:2b:0e:ef:
ec:b8:c1:fc:8b:9d:3a:fc:0c:22:46:1b:92:ca:e8:
71:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:83:2A:E1:27:86:77:FD:93:5C:54:BB:24:06:8D:72:99:B9:13:6C
X509v3 Authority Key Identifier:
keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4a:cc:a7:ee:58:ce:5a:2d:7b:f4:41:0c:ab:f4:23:57:5e:
b1:be:8e:0e:0f:e3:1e:27:8f:55:47:79:98:02:24:e3:2a:18:
ed:d9:3f:bc:18:9c:59:aa:43:89:1e:f5:7e:fd:2a:ba:78:4a:
5f:de:c1:4e:42:df:c9:32:fe:e1:88:df:39:23:40:0d:10:f2:
41:60:a1:85:91:85:15:34:aa:4d:f9:ef:a0:33:fa:5a:c6:f5:
5c:ad:80:f8:e1:dc:4e:97:13:c0:63:d6:b7:13:d9:ac:d6:14:
7e:54:9d:78:21:f2:4b:e5:a1:19:00:f5:a7:8a:95:06:e4:99:
8b:2c:f0:cc:9e:70:e2:d5:7c:26:f9:53:d6:25:84:ad:b8:26:
3e:e2:14:d7:f9:1b:ec:e6:e3:43:ea:1e:29:ce:f8:69:2f:b0:
64:17:d8:cf:5d:db:6e:a5:43:d8:10:62:56:31:16:aa:a7:30:
37:0c:13:3c:03:14:ef:95:ae:72:73:ff:93:c2:4f:7b:1f:b7:
e4:fb:cd:a8:9a:ee:62:31:89:44:3c:b5:f6:7b:03:27:cc:e0:
24:55:af:c1:a6:4b:68:9f:c7:c2:e9:e9:82:e5:eb:af:bf:46:
70:93:f5:56:d3:9b:2e:6d:81:36:9c:c0:7f:52:62:43:a8:ae:
7a:0a:c7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:41 2026 by rpki-client