Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: I5lsYH7+OkTEovYabnUU+PgsD9oUiZRogglluVpffKs=
Subject key identifier: 39:FC:E4:70:E3:97:A7:F1:DF:69:9C:A0:79:B2:52:98:EF:36:DB:84
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 019D2816EF22DB6A73EE18170D3E6787EAE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 15D6
Signing time: Thu 26 Mar 2026 03:01:24 +0000
Manifest this update: Thu 26 Mar 2026 03:01:24 +0000
Manifest next update: Fri 27 Mar 2026 03:01:24 +0000
Files and hashes: 1: 5gNENNsVRr6Z3Z2kDivAVxx-WQg.roa (hash: jTpmttv4j/3i6QtQ6v5DJnqHH5NP5RbZJYeJEXUUVHc=)
2: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: WBdrAe848Q1ktYsNibDoNbcsi7QjkPaSiVqTToSg5nE=)
3: e4_jL8KhurdfWGIKdZ4NxeDCLAY.roa (hash: x4bxfJaUc0PN6qNdfp4xGbKJbKuhcjLAJVJr8mf8ECY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ef:22:db:6a:73:ee:18:17:0d:3e:67:87:ea:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Mar 26 03:01:24 2026 GMT
Not After : Mar 27 03:01:24 2026 GMT
Subject: CN=39fce470e397a7f1df699ca079b25298ef36db84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:22:f5:0c:0c:1b:8d:c6:31:6e:49:3c:bc:82:
25:81:44:f2:93:d9:95:53:a6:94:87:23:e8:92:85:
86:0d:75:61:10:77:ea:fa:07:4c:11:8d:eb:3f:60:
46:18:13:ca:f8:dd:ce:ac:1f:8d:20:49:3a:c9:7b:
13:3c:d8:2a:c1:cb:35:66:2d:b2:d9:40:3b:7c:48:
0c:30:3e:6f:ce:c7:d2:e0:6e:be:99:a7:7b:79:6d:
f5:ff:ba:a6:38:e4:c7:d8:c3:7e:61:4d:bb:d2:15:
c1:5b:03:d5:86:ab:fa:2a:ec:6f:2c:98:11:1c:da:
3e:74:da:11:4a:de:a6:fe:26:5b:cb:f2:ed:ef:b1:
5e:e3:92:b3:78:2a:ff:36:d7:84:f8:05:83:d3:94:
97:6b:70:78:57:3e:a2:f9:4c:44:f5:52:59:a8:ff:
9b:67:e8:a7:a1:be:72:ef:fd:37:0f:0e:e0:65:63:
d3:f4:72:9e:cb:4b:8f:fb:0d:1e:bc:1c:e6:5c:41:
07:66:6e:a5:9b:58:29:8d:3b:53:03:9a:35:45:df:
5a:f7:16:32:00:3d:04:7d:ea:75:38:b6:25:02:d6:
8c:e7:76:eb:09:bb:3a:af:ef:f0:57:d2:ef:0f:40:
70:b7:b8:7b:d8:3d:91:61:7c:02:cc:ef:07:81:43:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FC:E4:70:E3:97:A7:F1:DF:69:9C:A0:79:B2:52:98:EF:36:DB:84
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f7:c9:eb:75:c2:ad:ac:5e:fe:88:f7:86:c8:cb:d1:ee:9c:
97:8d:bb:42:89:e0:9b:fa:c0:c6:a4:63:df:b1:a5:7d:f6:74:
78:93:b7:b8:99:ca:69:60:bf:87:b9:7b:72:1a:d1:57:27:0b:
26:a7:ff:f6:29:15:46:58:89:7c:a8:b8:40:bc:6f:94:c5:e4:
8a:8b:76:08:4a:aa:59:45:cb:61:96:fc:fa:02:fc:32:eb:1f:
65:4b:a9:f7:7a:96:9a:77:01:75:85:df:54:c8:79:06:e9:d1:
be:45:77:70:50:f0:c0:d0:61:05:2d:1e:88:fc:ac:29:42:6f:
1c:fd:bf:35:58:28:c2:ff:40:27:c9:42:85:99:4c:90:99:ce:
04:8e:3f:b5:cb:e8:81:54:7b:47:9e:86:02:e1:e7:31:c2:d2:
18:6c:28:b8:6b:32:78:84:8c:53:16:ad:8a:ff:e1:f1:7a:ce:
82:7f:c3:73:99:12:6f:01:b6:cc:45:95:fa:ef:db:98:9b:f9:
0a:66:ad:1a:f0:1a:ad:d2:21:fb:cc:a9:54:4c:c2:62:62:77:
a5:c6:9e:5c:b5:20:0d:39:a1:e8:75:e0:ec:cf:61:94:32:3c:
16:78:74:86:98:7d:b9:9b:ac:c4:08:bb:17:46:57:2a:f3:1b:
09:c2:b0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:47:05 2026 by rpki-client