Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: pb7FSO+hQcqUe3AuX8hOT+abY5FzjZf63QCThstCOf4=
Subject key identifier: CF:DC:33:D6:5D:6E:6D:63:B2:AF:30:A6:88:40:A7:61:7D:1E:C8:0D
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 01A0FF106E0D03AABA6C46A51E2D46BD498B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 17D3
Signing time: Sat 03 Oct 2026 00:01:01 +0000
Manifest this update: Sat 03 Oct 2026 00:01:01 +0000
Manifest next update: Sun 04 Oct 2026 00:01:01 +0000
Files and hashes: 1: 5gNENNsVRr6Z3Z2kDivAVxx-WQg.roa (hash: jTpmttv4j/3i6QtQ6v5DJnqHH5NP5RbZJYeJEXUUVHc=)
2: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: g9qfTIgWL2ruppL1KNHN+YebwIsgNIDfymbiA6LbzNA=)
3: e4_jL8KhurdfWGIKdZ4NxeDCLAY.roa (hash: x4bxfJaUc0PN6qNdfp4xGbKJbKuhcjLAJVJr8mf8ECY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:10:6e:0d:03:aa:ba:6c:46:a5:1e:2d:46:bd:49:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Oct 3 00:01:01 2026 GMT
Not After : Oct 4 00:01:01 2026 GMT
Subject: CN=cfdc33d65d6e6d63b2af30a68840a7617d1ec80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:81:95:2e:47:d6:11:9b:fc:30:c7:28:50:a9:
41:ce:ca:37:89:c6:0c:36:95:16:36:8b:fd:d6:0c:
6d:6e:e9:1a:3a:eb:2d:9f:42:5b:06:5d:d1:aa:e2:
93:8d:26:70:3b:7d:fe:04:06:00:b1:79:7b:44:20:
e4:80:e9:29:b0:2b:eb:ca:30:82:11:ac:01:ff:d1:
d5:e7:e0:e3:41:92:28:48:67:ee:24:64:c3:61:28:
0f:aa:d5:86:9b:23:4f:68:b0:f3:d6:d4:70:81:c4:
cb:79:7a:c9:9b:4d:4c:33:09:21:d7:87:37:6d:53:
2e:3f:24:6c:7a:b7:70:85:a7:3b:85:82:2a:ff:d5:
8b:a9:28:0b:3f:33:c9:57:35:74:3b:c5:6f:6f:ff:
de:a8:15:b3:cf:81:22:a5:cb:08:06:1f:22:f0:45:
77:7d:5c:d5:2d:7c:a3:11:2b:35:9e:1a:f4:a7:59:
23:65:50:0c:ad:f9:a9:b5:14:fa:e4:38:68:ad:a2:
8e:30:ca:a5:44:05:ae:4e:e1:4c:5c:bb:6b:23:1b:
bd:a6:bb:ef:db:4e:aa:e4:db:0d:03:5f:ad:a8:48:
65:c4:28:74:92:5b:b7:c3:6a:44:f6:b4:e9:f8:0d:
49:b0:ef:91:c0:1b:17:85:03:61:76:8f:71:af:75:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DC:33:D6:5D:6E:6D:63:B2:AF:30:A6:88:40:A7:61:7D:1E:C8:0D
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6f:c0:c9:0a:63:71:42:9d:8c:0a:6f:89:de:bb:46:62:f1:
ee:5c:27:27:4f:f0:bf:91:5f:85:01:f6:72:4e:16:83:7e:a2:
8f:95:59:90:d0:47:cf:c9:10:88:dd:6b:09:95:2b:7c:c3:07:
89:1e:6a:64:fd:47:78:13:15:2e:d8:14:ca:c9:5d:a7:82:5f:
86:07:88:6b:2c:d6:b4:74:d6:a9:81:28:dd:78:4f:79:f5:e1:
1b:bb:70:d5:68:6c:69:84:d7:71:68:ed:af:dc:26:65:92:b6:
78:98:7f:59:02:8a:e4:f8:2a:ab:7d:a9:73:8c:66:ef:a1:5d:
4b:09:04:61:ba:9a:40:5f:0b:9d:16:31:3c:36:df:19:e5:4e:
d0:b1:01:de:55:e4:2b:10:db:61:7e:0d:0e:dd:6c:42:19:ce:
2c:20:d5:0d:e7:92:c4:de:89:cf:90:7a:99:a6:71:df:e7:b2:
42:7c:04:ac:45:e4:da:4a:c0:c6:62:7e:34:5b:0d:02:09:c2:
6f:82:a8:65:d6:6f:86:be:5b:16:f5:3a:25:f6:52:2d:8e:f4:
64:51:b3:3f:2e:c6:37:c8:05:d5:5f:7f:ff:a2:76:b0:da:a2:
f0:1e:3c:25:22:ef:2c:45:4c:80:55:b1:56:1b:a5:7c:1f:27:
94:0c:15:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:05:45 2026 by rpki-client