Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: tynHPW/zKb2LPStbiL3dQ52l3EoX3plkWbFD8JGimf4=
Subject key identifier: 0D:12:A0:8E:27:FC:17:1D:AD:17:7A:5B:97:44:3E:CB:F2:EB:47:BB
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 01A0FD22084AC8C229C40A36DCE47D59D15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 17D2
Signing time: Fri 02 Oct 2026 15:01:00 +0000
Manifest this update: Fri 02 Oct 2026 15:01:00 +0000
Manifest next update: Sat 03 Oct 2026 15:01:00 +0000
Files and hashes: 1: 5gNENNsVRr6Z3Z2kDivAVxx-WQg.roa (hash: jTpmttv4j/3i6QtQ6v5DJnqHH5NP5RbZJYeJEXUUVHc=)
2: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: Qy8pePWnPqLUuUqF6QT3JCkXr+tLCyXZR5ick9pj4LI=)
3: e4_jL8KhurdfWGIKdZ4NxeDCLAY.roa (hash: x4bxfJaUc0PN6qNdfp4xGbKJbKuhcjLAJVJr8mf8ECY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:22:08:4a:c8:c2:29:c4:0a:36:dc:e4:7d:59:d1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Oct 2 15:01:00 2026 GMT
Not After : Oct 3 15:01:00 2026 GMT
Subject: CN=0d12a08e27fc171dad177a5b97443ecbf2eb47bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3c:90:e6:79:ff:d2:c9:d2:2c:da:85:c8:57:
e0:10:d5:da:b3:1a:bd:94:52:d2:d4:c4:a4:e8:29:
79:f8:86:20:00:c5:bb:fc:b6:3b:d8:14:79:7d:94:
dc:05:10:eb:41:a7:a5:8d:dd:fe:60:f1:02:ab:2b:
23:aa:b5:77:47:b3:01:24:4c:58:8e:d8:5f:9c:f0:
1e:9c:61:58:02:21:13:d6:e1:81:df:f5:ad:1d:07:
eb:05:5e:48:c9:0a:59:e1:06:85:6c:e5:79:da:9d:
fe:19:83:2d:a0:aa:56:1d:04:2d:72:23:b0:3f:af:
94:71:6a:65:97:ab:52:66:d3:32:69:0e:cd:37:8d:
2c:67:42:29:73:7f:65:aa:9b:99:63:c6:e4:d8:5f:
31:cc:4f:d7:18:4a:4b:5d:73:9b:2c:b8:a5:2a:a4:
01:c2:db:a0:ef:52:25:54:aa:ae:37:50:5b:cb:5a:
4f:2a:27:5f:28:39:5d:47:a8:86:9b:34:88:cc:2a:
0f:97:cc:a9:10:68:7b:d8:28:00:00:81:85:bf:c3:
56:b5:c0:91:92:cb:b6:9b:ae:22:f1:e2:52:f3:df:
cb:22:84:34:78:6d:13:76:7c:34:f7:a3:80:04:78:
a0:3b:df:d5:ce:b0:e0:6f:ad:79:83:36:d4:40:98:
ab:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:12:A0:8E:27:FC:17:1D:AD:17:7A:5B:97:44:3E:CB:F2:EB:47:BB
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4b:c5:a0:e6:4a:b7:4b:b7:10:5d:32:c7:e2:08:72:81:8d:
04:44:28:7e:72:07:cc:e1:8f:fe:bc:89:24:ec:e2:c6:9a:96:
70:cd:50:5f:9e:ca:a8:eb:96:0a:ec:41:50:08:55:82:5f:e5:
ce:5f:27:92:b3:24:0c:da:e1:11:32:1d:18:f2:22:b7:1b:e8:
16:34:54:a0:4e:4a:53:f0:c5:17:56:d9:4d:44:77:c1:78:b1:
69:f6:af:0f:ed:c6:a6:e4:bb:8a:d3:30:7a:55:59:d8:bf:8c:
c1:01:64:67:28:dc:ce:57:57:6c:86:ed:91:66:d6:27:4d:fc:
79:b8:b9:c5:94:27:95:7a:ca:eb:6b:d9:a5:6d:99:4f:ab:c2:
3e:e1:d2:c9:ca:73:98:49:9c:cf:27:2f:38:fb:8d:ac:4c:b9:
14:4f:b5:1e:a4:0f:fb:31:3f:30:d3:5c:d5:f3:d3:be:92:67:
6c:f4:10:b5:db:a1:ba:3b:47:eb:38:78:02:be:ae:9f:c6:de:
f9:49:30:1b:3c:0e:c1:d5:60:95:4d:54:57:dd:a8:57:33:7b:
cd:e6:1a:e6:28:4f:68:06:e9:24:e7:11:66:5a:f8:f3:41:a4:
c4:b0:cd:e1:b0:99:c5:fc:3a:e2:c0:88:aa:87:8f:7c:6b:26:
08:a7:6a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:18:22 2026 by rpki-client