Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File: mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier: REY/una/0iRWkuRO/PgcS+RmXCzgAH5NXCWWic6w1Uk=
Subject key identifier: 66:2A:43:3E:26:36:61:8F:31:95:33:2B:3C:0B:1C:13:1A:07:A8:D0
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer: /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial: 01A0CD47DDB94EEACFC039E7B369222F9BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 08:00:34 +0000
Manifest this update: Wed 23 Sep 2026 08:00:34 +0000
Manifest next update: Thu 24 Sep 2026 08:00:34 +0000
Files and hashes: 1: iFAn1u3EcEzNKFFEGLpbIFooV4w.roa (hash: QNlIF2jmeLo4oV4a+RaHCBWLuy9tqbGyVZgSq0+yZ+A=)
2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: WOc15J7MX6cfYcmMGIIgI4OpKGu4vWzi2NurDGjSo64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:dd:b9:4e:ea:cf:c0:39:e7:b3:69:22:2f:9b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Validity
Not Before: Sep 23 08:00:34 2026 GMT
Not After : Sep 24 08:00:34 2026 GMT
Subject: CN=662a433e2636618f3195332b3c0b1c131a07a8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:b0:e4:a6:89:32:b9:81:d7:af:b4:22:f1:
08:29:ae:7f:41:b9:df:a5:3a:4d:08:1f:31:a8:f6:
55:f6:17:9a:ad:27:9f:23:53:61:04:da:32:fe:06:
ef:0c:52:a8:a0:59:42:39:18:c5:78:11:0e:7d:60:
b4:ce:2f:24:fa:83:3b:1a:ec:2f:64:20:e5:8b:a5:
42:4f:ec:b0:67:a2:3e:6c:91:63:e8:61:64:4d:a4:
08:40:44:63:a8:70:ce:33:7f:5e:a1:b2:07:98:f5:
1c:77:4f:25:6b:34:24:82:28:55:be:b8:ef:48:cd:
3a:fd:84:e5:27:3c:f5:73:a9:7d:62:29:65:60:68:
ad:89:4a:4d:1e:60:ee:24:a9:5f:3b:c2:a9:46:c8:
48:e5:6a:57:e7:39:7f:67:5b:ac:9b:a8:e1:de:f2:
30:5a:17:60:06:da:48:42:05:e8:7f:fb:f2:e4:82:
f6:56:fa:ac:f5:c9:17:80:d9:9f:ab:7c:4e:80:26:
c5:8f:da:33:5e:6e:63:d9:75:c0:ed:df:d0:f7:db:
a2:bd:57:65:31:c6:75:1e:15:63:d7:b0:62:67:8d:
91:c9:80:b6:02:c5:13:45:5a:ed:48:bd:ab:11:55:
06:5e:c7:68:c2:59:d6:d0:99:61:62:fa:66:4e:d0:
05:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2A:43:3E:26:36:61:8F:31:95:33:2B:3C:0B:1C:13:1A:07:A8:D0
X509v3 Authority Key Identifier:
keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:45:b2:41:d1:6c:53:d7:37:97:2a:12:07:cd:93:af:50:9a:
35:1b:94:cc:38:c7:8d:69:85:d7:04:c0:5f:66:06:b8:a7:ba:
eb:66:e9:b3:b8:1c:ed:b1:04:41:b9:26:ec:a0:aa:68:d3:4e:
22:f9:56:66:ab:89:3a:bb:88:ec:ec:0a:26:06:7c:70:e7:ea:
6b:95:03:93:dd:89:de:de:4d:c9:af:49:ab:e3:30:f8:9f:b1:
1e:a2:d0:b5:51:92:12:b8:0a:89:38:c1:63:41:40:04:b9:76:
b0:2b:71:bb:e7:d0:52:0e:62:3e:cb:1e:8a:12:ed:60:f6:5f:
13:39:07:59:24:4f:cb:14:98:74:3a:6f:a4:d8:c4:91:01:d9:
ed:44:81:26:ae:61:96:08:d3:c1:dd:d6:01:d5:4d:8e:8f:06:
5b:cf:29:9e:4a:87:ce:4a:91:54:15:33:5b:aa:eb:10:9d:05:
15:81:4e:73:71:82:a9:ff:a7:2f:ba:b1:00:59:50:ed:00:45:
01:ca:db:dc:d8:f7:ee:65:7a:6b:50:41:c0:f4:5f:67:c3:eb:
ca:ca:57:c4:a5:b1:04:e1:8c:a4:6c:49:6f:e4:1c:38:e7:59:
9d:8e:71:6b:94:9a:c3:f0:63:15:76:30:ce:57:b1:e4:99:e9:
74:8b:ac:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:58:39 2026 by rpki-client