Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: bWbH+eI30Gha9LWG2JjHQxVSPc/aHE8JC5ucKPqCgkI=
Subject key identifier: F4:86:22:6D:6B:B7:30:59:DB:7B:17:A3:BF:F5:6F:63:FA:3C:7E:07
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 019E1D59CAA29929E7FF7CF54FAEC9E42D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 1655
Signing time: Tue 12 May 2026 18:01:24 +0000
Manifest this update: Tue 12 May 2026 18:01:24 +0000
Manifest next update: Wed 13 May 2026 18:01:24 +0000
Files and hashes: 1: 5gNENNsVRr6Z3Z2kDivAVxx-WQg.roa (hash: jTpmttv4j/3i6QtQ6v5DJnqHH5NP5RbZJYeJEXUUVHc=)
2: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: EOd+KW4JOzJnuOzwZJ8xvMYrRdS4e0W8vOhEP9g1pZQ=)
3: e4_jL8KhurdfWGIKdZ4NxeDCLAY.roa (hash: x4bxfJaUc0PN6qNdfp4xGbKJbKuhcjLAJVJr8mf8ECY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:ca:a2:99:29:e7:ff:7c:f5:4f:ae:c9:e4:2d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: May 12 18:01:24 2026 GMT
Not After : May 13 18:01:24 2026 GMT
Subject: CN=f486226d6bb73059db7b17a3bff56f63fa3c7e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:06:4b:95:eb:40:ac:4a:cf:b8:d3:62:2d:
f0:b8:cf:12:63:d5:95:02:63:cb:45:29:fc:fd:1f:
19:f6:e0:56:08:99:4a:66:a1:27:f9:c4:2b:0a:71:
0f:df:cf:bb:55:49:97:41:30:32:8e:bb:90:f5:00:
ab:72:f7:60:73:ff:30:43:94:c8:55:a8:8d:6b:b5:
b1:8d:3c:83:8f:49:a4:1a:4a:2b:0a:46:8e:89:27:
59:d9:20:44:86:60:e7:76:b2:e6:9b:eb:80:fe:86:
5f:24:70:c8:d8:6c:de:16:f6:b9:00:32:9b:f7:17:
72:73:64:a7:07:de:00:25:6e:0d:d0:ba:6e:31:33:
b6:2c:09:a2:6a:ed:a0:f3:10:3b:a4:a4:43:ff:f1:
a3:3a:82:ea:a8:e1:dc:01:a9:49:db:41:80:ba:9a:
64:62:1a:eb:b2:64:03:37:f1:ff:5a:3f:73:1a:25:
07:6b:17:3b:cd:4f:ec:d0:77:88:b0:19:d9:ee:a5:
25:f1:4c:d1:1d:b9:85:cc:5b:17:8a:d5:b7:bb:dc:
39:c0:f4:bb:71:56:9e:2a:0e:b7:a6:5d:6b:e5:ea:
4f:69:a5:1c:d9:50:a9:2f:7a:dd:dd:4d:84:39:30:
83:bc:6c:69:16:35:3e:e7:f6:f7:36:31:38:30:74:
90:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:86:22:6D:6B:B7:30:59:DB:7B:17:A3:BF:F5:6F:63:FA:3C:7E:07
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ba:2d:5c:d8:a5:33:87:f7:bc:42:80:55:b7:9f:cd:b4:02:
c8:4d:9d:29:86:18:f4:92:fb:ec:f3:29:31:67:d6:05:57:1d:
c0:14:58:c3:3b:49:16:8f:84:d6:05:fc:54:f1:e7:cb:46:8c:
1d:a4:5b:91:6a:ac:07:de:f3:b1:2d:37:ff:bf:a7:82:ce:92:
58:f5:14:80:f6:31:be:cb:da:21:39:67:f9:72:29:34:02:ad:
9e:43:93:71:42:f5:14:f1:25:28:12:c7:d2:da:89:d5:c7:cd:
de:3c:a0:22:7d:87:1f:a9:ae:4e:9e:55:eb:78:5a:29:99:f9:
70:45:f2:e5:5b:48:91:af:52:4d:15:0f:d6:07:89:a1:ad:29:
87:f2:81:d1:55:f4:0d:27:de:09:25:45:03:60:bc:94:e8:3c:
c5:57:35:d3:8b:0e:df:25:e9:51:ac:8f:3f:c6:2b:9b:e0:01:
ec:e7:46:3c:bf:fb:62:b1:5d:01:4d:d8:b4:c8:0e:bc:99:e9:
ee:2f:e9:04:9e:f7:45:af:61:21:47:23:f7:13:bc:34:6f:0e:
a7:37:95:b1:65:f7:37:d8:55:15:a5:63:22:2f:d0:13:72:8b:
d3:17:b6:48:4d:02:1b:b5:c8:4e:2d:14:94:3c:6f:6f:b7:47:
e3:2f:21:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:41:13 2026 by rpki-client