Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
File: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft (raw, json)
Hash identifier: PA4fFrc+e8FPTHT5LRSngWdwGM8qkfimUOX7FVU1kLA=
Subject key identifier: 24:20:D5:0D:A6:E9:5E:D0:E4:15:94:D9:6E:64:AF:28:E2:B1:7B:02
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial: 01A0D7964284A8DB3DA0C15F069DC4671833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
Manifest number: 0BD4
Signing time: Fri 25 Sep 2026 08:02:23 +0000
Manifest this update: Fri 25 Sep 2026 08:02:23 +0000
Manifest next update: Sat 26 Sep 2026 08:02:23 +0000
Files and hashes: 1: 05HbW4vWO71TuXnlLUIhotjCjQA.roa (hash: wd8NR6jnQPtSkv4WqVTGTX5hWiMAv5m+dMvP8o7c5l8=)
2: GB3NFSp5PGT_22uM3aHhVVz0NOI.asa (hash: riAwsj8thI/YEdA1IIz5l7mENZ2/CQiAFbdBtgwfc6s=)
3: Ju3RYBGHfTVJ0ig9g8xu4WdMw30.roa (hash: 4oJ1sds8f+aiGxncxPG+ThQtMKqUYAuJ1K3qDV4TzDE=)
4: MyskQcDy1iD50lHwlkpWk2pfgJo.asa (hash: w0AAYte+BFKp1fuUqRZUMAG2wD4yxWoVL8PbWMANMLk=)
5: f2WeliHigZNRsPyfnuBo4tGwDZ0.roa (hash: 5slWSGWLG6ATTnZtrmt7Zpoe6VhaQcLSQgvXuDKX6jQ=)
6: j8BCdYiQ_67ATYFHPKfffD1u2xo.roa (hash: GLAbtmkKsyJcTcB7QC4FgMb+NJZzC1QoILdu2duEs9o=)
7: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl (hash: b0cn5pubfUq2WFDWFxFHYo4poO/TM2UV1bKyk6ARDN4=)
8: xQPEHMR54qpU7rtPLXUkM_1Hx94.roa (hash: X3FNnLjkWD8kAWDLkX6vbg0ozoLMqd9Yva8zbEk23n4=)
9: zKkJ8cE4zPKRxtqXHT19mxBaT9Q.roa (hash: uRT/X8Hvl3ZU07bilVhDl7B14HKulQ5Y0la+tuqFss4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:42:84:a8:db:3d:a0:c1:5f:06:9d:c4:67:18:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
Validity
Not Before: Sep 25 08:02:23 2026 GMT
Not After : Sep 26 08:02:23 2026 GMT
Subject: CN=2420d50da6e95ed0e41594d96e64af28e2b17b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:c3:0f:b1:ad:11:9f:35:f4:0b:c2:05:a2:
d8:58:29:43:ff:c7:98:94:03:70:48:ff:f3:dc:c0:
82:38:7c:45:27:bb:0b:3f:80:6d:c1:94:d6:bd:4b:
e3:83:6d:dc:55:71:07:58:28:ac:08:1f:aa:4d:84:
d7:b4:9c:f0:c1:d3:7a:35:35:4e:96:ba:ff:5e:66:
77:82:ba:7a:9d:4c:7c:29:60:98:4d:dc:9b:c3:c8:
b6:28:a5:79:55:18:58:80:72:f8:76:32:be:18:a4:
0b:a1:dd:9b:05:8e:e8:95:9a:a8:f5:45:d6:87:c0:
61:93:7e:8f:b1:c2:9c:3d:b5:10:52:9e:38:b4:9f:
b8:e1:bd:f4:a8:aa:5b:2d:a6:a2:8b:6a:9b:0d:b8:
b7:d1:d6:e2:24:d2:a2:d4:22:08:aa:71:9a:87:74:
31:9a:91:3f:35:aa:c8:c3:ad:2d:e0:1e:a4:29:c9:
c3:7f:fe:ff:98:f7:3b:31:d2:99:a0:a3:48:0f:9a:
79:dc:fc:f6:5c:e0:4a:b5:db:6d:d8:e2:ad:bf:4a:
66:bc:98:a2:e5:e1:52:2e:70:44:00:4a:b3:fa:2d:
b3:97:f0:f1:e3:0c:41:41:0c:f7:d6:38:5e:23:17:
55:71:82:9e:2a:1d:6b:31:70:0d:83:93:81:aa:ba:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:20:D5:0D:A6:E9:5E:D0:E4:15:94:D9:6E:64:AF:28:E2:B1:7B:02
X509v3 Authority Key Identifier:
keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:74:fe:91:bd:7f:f5:3e:bc:e5:d4:f6:51:47:01:4a:65:ca:
7f:10:1c:24:7f:70:fe:86:80:88:b3:22:66:89:6e:ce:1c:cb:
6f:48:6a:c6:57:cc:4e:fb:a7:53:35:05:53:49:76:3b:64:67:
de:aa:6a:f6:0d:39:45:a6:85:85:e1:d9:e3:73:ae:53:9a:b2:
27:da:42:02:ed:b7:ba:ff:67:77:01:62:e7:82:0c:98:1b:75:
4e:d7:38:e8:73:39:4c:d9:0b:41:8a:a5:27:4c:a5:ef:da:08:
58:03:53:91:d0:0c:03:8f:13:ce:77:73:f3:bb:39:b9:af:6b:
3b:4e:5c:a9:13:fd:0a:e4:a8:5b:81:12:5d:20:4f:6c:80:6f:
cd:5f:ee:e3:a6:55:8a:63:37:d7:c6:23:1f:5a:b3:c5:ee:64:
5d:95:1b:fa:6e:1c:68:a7:47:09:a8:18:eb:eb:6e:51:73:f8:
0f:85:9b:f3:cf:35:48:de:2d:c3:1f:4a:38:ce:46:9a:cc:2b:
48:56:e5:69:13:de:c8:6c:51:77:af:6e:c0:12:3e:d8:47:ff:
4e:49:62:26:9b:83:20:ad:05:ff:f1:d0:f5:86:92:c4:00:67:
c5:1c:fe:7f:04:9a:6f:a0:89:8a:a7:f5:91:c3:b1:4a:e4:7d:
0a:65:d1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:01:20 2026 by rpki-client