Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: tc55qYptvsm5aN6HIWtzm6JkqRbxukNKaD33MY2sBRM=
Subject key identifier: AB:55:E9:D1:23:8C:F6:73:AD:BB:6D:91:A1:35:47:78:05:9C:D8:9F
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 019F9211A71B310D6BCD33EA26C5DFEE8373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 1716
Signing time: Fri 24 Jul 2026 03:00:58 +0000
Manifest this update: Fri 24 Jul 2026 03:00:58 +0000
Manifest next update: Sat 25 Jul 2026 03:00:58 +0000
Files and hashes: 1: 5gNENNsVRr6Z3Z2kDivAVxx-WQg.roa (hash: jTpmttv4j/3i6QtQ6v5DJnqHH5NP5RbZJYeJEXUUVHc=)
2: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: iRM9xVw02JmhH94Agq/aeiLCkxN3M4Nb7o5YrodEwqk=)
3: e4_jL8KhurdfWGIKdZ4NxeDCLAY.roa (hash: x4bxfJaUc0PN6qNdfp4xGbKJbKuhcjLAJVJr8mf8ECY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:a7:1b:31:0d:6b:cd:33:ea:26:c5:df:ee:83:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Jul 24 03:00:58 2026 GMT
Not After : Jul 25 03:00:58 2026 GMT
Subject: CN=ab55e9d1238cf673adbb6d91a1354778059cd89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:a7:f6:6f:5f:00:07:9d:60:63:a0:6e:1f:
49:a8:af:6d:4d:1b:28:54:7a:1e:c9:ff:24:33:7c:
31:12:52:44:92:9f:47:53:41:94:39:82:8d:e2:b8:
6e:d9:21:f3:cb:50:e9:e8:b3:bd:a5:1c:5f:3b:c8:
28:a6:43:0f:a8:45:b0:72:c6:f2:ea:f1:67:e6:b8:
b8:a9:5f:de:cf:2c:23:eb:9a:fa:1b:c8:89:6c:b4:
36:f2:15:c5:b7:7c:a7:30:72:4b:b8:21:c3:86:fc:
02:7f:d8:cb:19:2b:40:2e:22:41:ae:2e:fd:13:dc:
14:28:ec:2e:d0:22:5c:a1:50:4e:ae:be:9e:7e:e9:
96:aa:14:c4:35:16:2b:ee:7e:72:42:b0:4f:db:5e:
d9:c1:60:aa:b7:d3:b3:29:13:bf:90:cd:21:09:b0:
7f:b1:e2:a5:13:17:85:1a:4a:5e:4f:d0:27:63:cc:
92:fe:65:7a:fb:77:d0:c9:f6:ee:d3:d1:d9:a1:df:
d9:f3:3d:e4:b1:18:fb:65:a9:5b:e7:e5:57:03:95:
d7:e9:22:e5:22:57:89:d6:9a:6a:a1:00:8e:87:ff:
2e:4b:f2:d3:fb:44:35:57:28:4b:8c:dd:a4:44:aa:
c3:bc:56:6e:36:f3:14:6f:29:4f:e8:4c:f3:c6:6b:
4d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:55:E9:D1:23:8C:F6:73:AD:BB:6D:91:A1:35:47:78:05:9C:D8:9F
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e9:aa:2a:4f:5d:30:6f:d8:5a:cf:21:a7:6d:d8:3a:af:38:
7d:61:d0:9c:19:cd:c4:e0:44:15:f8:2b:21:9f:11:e8:73:ac:
35:41:a3:19:27:6a:a9:73:95:7a:3a:2f:7f:a5:91:d1:bd:c5:
fc:65:bc:b7:08:77:5c:28:ba:bf:09:37:eb:70:74:5f:b1:de:
03:52:6d:4c:84:f6:58:35:44:d7:0d:27:d8:19:fd:2e:eb:43:
c9:91:39:00:63:49:1c:cf:75:b2:36:75:87:77:62:bd:19:2a:
f6:4f:5c:97:44:76:56:f3:78:4f:41:0f:90:c4:78:bd:4e:4a:
55:94:c0:3f:7f:c6:b5:48:11:31:50:56:a3:c6:68:fe:d9:cd:
25:af:e4:95:1c:a1:38:a7:aa:e1:cc:7a:05:94:7e:72:56:e4:
83:45:31:19:0e:74:aa:7c:4e:86:19:67:af:64:2b:a6:d6:49:
bf:f3:67:e4:6c:7c:62:ea:63:0e:05:57:51:04:41:2f:1d:12:
d2:81:94:6e:18:6b:28:ea:20:fa:b7:f2:c3:eb:66:d6:e5:2e:
5e:5a:cd:d1:62:c0:15:0e:29:e3:28:ed:d8:b9:5e:a2:80:39:
4d:4a:a4:4b:7d:44:57:76:76:07:da:35:90:97:f9:a3:02:bc:
de:47:f0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:55:32 2026 by rpki-client