Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
File: MVlVxK8-sajTQAqGYl42XCYpjWo.mft (raw, json)
Hash identifier: 8yMuIxk6zmfxMw6sMLWkdKyKsbWAd6zVfvb/9lWDOts=
Subject key identifier: 7C:03:D5:10:1A:C4:F5:E3:49:0A:36:39:FA:3D:9C:B8:01:4C:BF:C1
Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
Certificate issuer: /CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Certificate serial: 019D25BAC16CAFFD6391C8113FA167B4E46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
Manifest number: 1630
Signing time: Wed 25 Mar 2026 16:01:29 +0000
Manifest this update: Wed 25 Mar 2026 16:01:29 +0000
Manifest next update: Thu 26 Mar 2026 16:01:29 +0000
Files and hashes: 1: 34oLJ4Lov7Wf-cgurfEB4ApxQL8.roa (hash: UMa/+Z7jBzitDcBQN0nLNmhVtoKXLtpXamxn8QiiIS4=)
2: DcuH_MT_kXadme70JeltxiUEXuo.roa (hash: uGCB58lT2WLC8+sG4enENWnXNBv9tltbp9ES6BhHSmc=)
3: MVlVxK8-sajTQAqGYl42XCYpjWo.crl (hash: S401NhmS4anUhCOEHGu6tOiFSAc5e2I4GvJzjIZG8KQ=)
4: _vA_4IgHYmJvs5d5FwYed13XPO8.roa (hash: DM2Nb8aEZSMQFHhLIwMpeuKnBXqz05Nz1b7/nuo2ED0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:c1:6c:af:fd:63:91:c8:11:3f:a1:67:b4:e4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Validity
Not Before: Mar 25 16:01:29 2026 GMT
Not After : Mar 26 16:01:29 2026 GMT
Subject: CN=7c03d5101ac4f5e3490a3639fa3d9cb8014cbfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:95:42:5b:ec:79:46:46:4a:a4:3c:8a:07:
3e:0d:56:db:0e:15:42:48:81:96:89:bf:bd:85:7e:
ba:d9:ea:61:e9:03:e8:ff:55:9f:af:2b:39:a1:e6:
11:92:dd:06:c4:53:20:73:f0:45:ac:97:10:cc:71:
55:97:5c:57:4b:16:63:f0:94:aa:18:a6:64:b3:bb:
fe:82:50:bf:33:e1:82:b6:13:89:aa:ce:d4:5a:80:
ea:c2:7a:30:83:16:8a:bf:06:0b:d0:4c:b5:2d:6c:
68:0a:3b:54:24:04:75:77:76:f9:82:8e:15:e3:ac:
e8:33:d5:57:47:75:ed:f9:10:c0:ea:0f:46:c4:d2:
18:0f:ed:4e:3d:de:15:a8:f8:23:d4:e7:2a:0a:95:
00:b1:e7:cf:90:8d:9f:89:f1:14:5c:4f:c0:eb:01:
b8:50:4e:40:38:8f:81:f4:27:a4:c3:72:49:78:3c:
fa:07:bb:6b:c4:eb:b5:8d:21:1f:f1:cc:fb:e9:0d:
9e:97:6f:c9:a2:b0:32:ec:6a:74:cd:ae:2e:9a:e1:
74:a1:6c:67:27:3c:77:c8:ed:0a:dc:06:a2:13:23:
b1:87:bb:22:24:be:29:40:0b:89:bb:9f:b2:3b:5d:
38:74:85:13:98:9d:be:6c:7e:96:63:4c:80:aa:c7:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:03:D5:10:1A:C4:F5:E3:49:0A:36:39:FA:3D:9C:B8:01:4C:BF:C1
X509v3 Authority Key Identifier:
keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:23:76:71:90:76:9e:b9:22:5b:60:56:9b:23:44:72:9b:fa:
76:22:8c:ad:28:3c:70:83:2e:4a:b8:17:8f:28:c2:53:be:d6:
41:d9:45:84:a8:ed:69:c7:b5:75:f8:3b:36:e0:2b:eb:2e:8c:
5a:6b:d1:70:cc:2b:d3:a1:2a:7b:e2:ad:8e:28:95:22:fb:79:
f6:9c:46:fd:7c:a6:5a:fa:44:7b:89:36:a6:6a:3b:36:53:0d:
30:48:3e:b6:17:db:6f:7f:1a:43:94:18:03:fc:ce:8b:9d:1f:
53:0d:af:c5:10:fb:04:ab:14:a2:b6:e1:ef:24:0c:3f:98:81:
2c:93:ca:63:d2:9f:fc:28:d8:f3:a4:e6:f6:f9:40:ed:6b:6c:
e4:ef:c4:8a:3b:bd:1e:f8:24:e5:9c:8b:9e:78:0e:74:3b:b7:
57:09:a5:26:5f:96:10:1f:1f:b7:b8:df:38:a5:64:35:92:55:
a8:dd:d7:c5:d4:e1:50:cd:f4:0d:ef:b4:00:95:1f:cc:10:54:
82:e1:0f:b3:67:e3:24:cf:31:a9:e1:3f:19:de:a7:18:11:7a:
39:03:4f:6e:ec:e7:01:93:cf:0b:7b:86:87:b1:e7:09:13:ba:
1b:41:9f:09:8d:43:71:0f:09:39:b9:7f:f6:3f:8e:fa:7f:7c:
94:08:5d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:42:16 2026 by rpki-client