Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
File: mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft (raw, json)
Hash identifier: wUVVooT+3u7ZBC/6BdJC3b2LCxAONpc00tAjHrBChU4=
Subject key identifier: CB:62:EE:FF:1F:29:DC:CE:55:8D:5B:6A:A8:4D:44:C1:52:C9:20:E7
Authority key identifier: 9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51
Certificate issuer: /CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51
Certificate serial: 019D28F2D38F8E472A2B72D2D8D8C367F63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
Manifest number: 1329
Signing time: Thu 26 Mar 2026 07:01:35 +0000
Manifest this update: Thu 26 Mar 2026 07:01:35 +0000
Manifest next update: Fri 27 Mar 2026 07:01:35 +0000
Files and hashes: 1: mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl (hash: HO35JvQffV1gFo/D8AAXTV1auMxYqjrrnp9hS27/F6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:d3:8f:8e:47:2a:2b:72:d2:d8:d8:c3:67:f6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51
Validity
Not Before: Mar 26 07:01:35 2026 GMT
Not After : Mar 27 07:01:35 2026 GMT
Subject: CN=cb62eeff1f29dcce558d5b6aa84d44c152c920e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:09:b8:33:a1:51:ce:79:a8:86:82:6a:b5:
0c:06:0f:1b:0c:36:d5:7d:1b:d0:81:33:ae:db:04:
04:18:14:fd:cb:d7:a1:c9:48:73:ba:45:7d:e9:e5:
a1:06:a3:52:de:ae:66:97:c8:6f:9f:17:99:ac:3f:
0c:6a:7f:6f:e5:d9:db:aa:3d:b9:f7:24:2c:dc:e7:
40:31:2a:b7:91:56:b4:52:2d:95:d1:a6:ac:b7:b7:
19:b3:00:9d:d2:85:79:01:dd:05:0d:45:5a:99:f3:
91:5b:ae:1e:8b:c2:b1:6d:9b:0b:c4:bb:1f:b6:26:
2c:c4:f7:64:1c:ab:fb:6a:2f:64:1f:6c:1e:37:36:
9c:01:b3:57:0b:74:61:23:2d:17:a5:ab:b7:2e:62:
f5:64:02:84:b5:69:82:3b:54:9e:73:8b:a2:04:c8:
d1:fe:d4:dd:74:37:ee:fe:b6:e2:42:fd:2a:cf:cc:
9b:56:3e:e0:5d:0f:2d:80:39:fe:73:11:76:17:64:
37:26:39:df:e3:e3:34:18:20:1f:ea:eb:60:00:c7:
ec:87:0b:82:ed:a0:03:01:01:e7:79:97:0d:a1:23:
7b:ef:17:34:65:b8:58:20:89:c5:e2:9d:6f:f2:e1:
5e:38:59:7c:9d:1b:de:2c:10:ce:15:a1:1e:e8:57:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:62:EE:FF:1F:29:DC:CE:55:8D:5B:6A:A8:4D:44:C1:52:C9:20:E7
X509v3 Authority Key Identifier:
keyid:9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:da:0c:88:9c:90:a1:33:16:da:96:77:51:57:b3:05:aa:ea:
3e:0c:b4:39:3a:18:0a:24:5f:1b:e2:a3:d4:5b:d1:5b:82:7c:
95:f0:02:7f:3f:4f:05:2f:d5:51:b4:92:80:ec:52:8d:5e:b2:
83:43:c1:a4:8d:24:fe:f2:c3:84:4f:5e:46:33:51:3e:7d:a3:
64:89:d2:02:ea:ce:59:49:66:69:24:70:7f:77:0a:28:a5:00:
bd:ec:74:ec:43:38:1c:5d:0c:92:19:79:eb:3a:e7:44:5b:63:
72:d6:b7:15:3c:7d:26:c5:6f:b8:bd:77:14:e7:8a:4d:0a:a4:
60:2e:6a:d6:db:23:6f:bf:fe:e4:30:62:aa:e4:cf:f1:3c:a8:
1c:67:66:54:98:5c:5c:e9:1c:be:60:fd:81:3a:ed:4f:1e:32:
7a:f2:90:f3:f9:7c:75:4b:02:fa:30:df:9c:d2:74:dc:09:58:
3b:72:cd:de:85:9f:c9:e9:de:d9:10:67:93:c2:61:32:0f:64:
27:3e:43:5e:3c:60:a7:dc:be:db:21:90:77:17:87:36:0e:c4:
f2:ff:29:fe:76:ce:3c:ff:91:0f:42:e6:97:8f:34:2a:4b:7e:
5d:d5:76:9f:6d:41:4b:48:95:fa:69:cc:02:ce:15:e0:53:57:
c4:ab:87:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8tOPjkcqK3LS2NjDZ/Y8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZjlkMWU1NWY0M2U0ZmRkNmQyNGZiNGIwZWRhNmU5ZDEy
OGFhNTEwHhcNMjYwMzI2MDcwMTM1WhcNMjYwMzI3MDcwMTM1WjAzMTEwLwYDVQQD
EyhjYjYyZWVmZjFmMjlkY2NlNTU4ZDViNmFhODRkNDRjMTUyYzkyMGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm90JuDOhUc55qIaCarUMBg8bDDbV
fRvQgTOu2wQEGBT9y9ehyUhzukV96eWhBqNS3q5ml8hvnxeZrD8Man9v5dnbqj25
9yQs3OdAMSq3kVa0Ui2V0aast7cZswCd0oV5Ad0FDUVamfORW64ei8KxbZsLxLsf
tiYsxPdkHKv7ai9kH2weNzacAbNXC3RhIy0Xpau3LmL1ZAKEtWmCO1Sec4uiBMjR
/tTddDfu/rbiQv0qz8ybVj7gXQ8tgDn+cxF2F2Q3Jjnf4+M0GCAf6utgAMfshwuC
7aADAQHneZcNoSN77xc0ZbhYIInF4p1v8uFeOFl8nRveLBDOFaEe6FeSowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMti7v8fKdzOVY1baqhNRMFSySDnMB8GA1UdIwQY
MBaAFJr50eVfQ+T91tJPtLDtpunRKKpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXZuUjVWOUQ1UDNXMGstMHNPMm02ZEVvcWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wYzVlZDctMGU3Mi00ZWFkLTkwNmMt
MjkxYTMxNjRhMGI4LzEvbXZuUjVWOUQ1UDNXMGstMHNPMm02ZEVvcWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wYzVlZDctMGU3Mi00ZWFkLTkwNmMtMjkxYTMxNjRhMGI4
LzEvbXZuUjVWOUQ1UDNXMGstMHNPMm02ZEVvcWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApdoMiJyQ
oTMW2pZ3UVezBarqPgy0OToYCiRfG+Kj1FvRW4J8lfACfz9PBS/VUbSSgOxSjV6y
g0PBpI0k/vLDhE9eRjNRPn2jZInSAurOWUlmaSRwf3cKKKUAvex07EM4HF0Mkhl5
6zrnRFtjcta3FTx9JsVvuL13FOeKTQqkYC5q1tsjb7/+5DBiquTP8TyoHGdmVJhc
XOkcvmD9gTrtTx4yevKQ8/l8dUsC+jDfnNJ03AlYO3LN3oWfyene2RBnk8JhMg9k
Jz5DXjxgp9y+2yGQdxeHNg7E8v8p/nbOPP+RD0Lml480Kkt+XdV2n21BS0iV+mnM
As4V4FNXxKuHKQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:34:48 2026 by rpki-client