
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File: mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier: zd65uQ7KSZBfiK6ThcOrZvRvwAkAphFTIfgwGYD5an0=
Subject key identifier: 9A:DE:06:2F:6D:DF:8C:A4:0E:0D:BD:65:2F:BB:E1:F9:C4:5C:E6:24
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer: /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial: 01A1DF82CBEB3DD3A749BED83FA20779F425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 14:00:53 +0000
Manifest this update: Sun 15 Nov 2026 14:00:53 +0000
Manifest next update: Mon 16 Nov 2026 14:00:53 +0000
Files and hashes: 1: iFAn1u3EcEzNKFFEGLpbIFooV4w.roa (hash: QNlIF2jmeLo4oV4a+RaHCBWLuy9tqbGyVZgSq0+yZ+A=)
2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: N0BadFsBkqwpt6z9R7JT3cUfaMX2B0S/tjT+tvsn/NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:82:cb:eb:3d:d3:a7:49:be:d8:3f:a2:07:79:f4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Validity
Not Before: Nov 15 14:00:53 2026 GMT
Not After : Nov 16 14:00:53 2026 GMT
Subject: CN=9ade062f6ddf8ca40e0dbd652fbbe1f9c45ce624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:35:55:ef:55:6a:b3:b8:9b:05:54:f7:76:
57:d6:b1:54:5b:b8:d6:cd:cb:68:65:ba:98:63:ae:
98:4c:85:42:eb:ad:74:28:a9:1b:77:19:13:cf:90:
c9:c1:3c:92:04:b2:b9:5f:c7:80:cb:8f:02:41:97:
61:b1:ed:37:40:d1:eb:8c:dd:8d:86:7f:d2:a7:ce:
dc:76:04:19:31:b4:58:1e:2b:f7:d1:4c:ca:31:63:
cf:08:1c:d0:b4:db:45:fd:42:20:8f:f7:48:dd:ce:
b0:31:e9:1f:b7:a7:19:cb:e2:af:ff:e8:08:6a:3b:
e1:d7:ed:aa:d3:4e:05:75:53:61:5b:ea:e3:7a:13:
c2:1f:fb:fe:b2:7a:e3:0d:ea:b4:20:0a:84:7d:c6:
99:55:02:d8:94:f1:d3:84:fd:59:26:9b:3d:0f:d8:
35:39:5b:4f:16:77:b8:11:6e:8d:46:8f:c2:0a:fa:
79:00:ba:9e:90:21:f2:8c:54:f4:18:3a:ef:16:0a:
57:fd:49:01:e1:e3:29:04:ef:8e:32:96:f5:1f:18:
a7:0e:3c:ae:1e:d6:ff:ea:aa:95:42:86:3c:11:cd:
25:65:7e:95:62:78:af:bf:b0:2f:bd:5a:f1:2d:0b:
58:31:ac:91:68:82:fa:09:fd:57:e0:b7:37:e4:83:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DE:06:2F:6D:DF:8C:A4:0E:0D:BD:65:2F:BB:E1:F9:C4:5C:E6:24
X509v3 Authority Key Identifier:
keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fa:a1:9e:3e:35:14:4a:ca:bc:0d:15:8f:ca:a5:a9:fe:64:
d2:58:a4:90:0b:09:29:86:cb:db:cd:7e:e0:30:bc:98:36:a2:
cf:53:96:c4:f5:db:e4:52:0f:ed:d9:0e:f5:8c:90:e3:57:82:
49:da:0f:f3:32:2c:58:b4:c9:22:b5:55:85:9c:a9:f1:c6:ea:
46:e2:f7:2e:5a:be:79:79:cd:eb:02:12:0c:bd:b9:7c:e7:b5:
dc:3d:bc:f2:74:84:56:da:ff:6d:9b:6f:c3:77:b7:b4:4b:4e:
35:91:67:9b:7f:d8:a3:8a:4d:7a:46:98:64:36:70:7e:15:95:
5d:f3:88:f3:71:30:29:be:ee:97:b8:83:29:49:ff:cd:da:27:
f8:5e:53:51:5e:e6:8b:93:d8:d8:78:83:8a:cf:c1:49:4e:81:
13:b0:c3:46:f6:bf:d5:70:11:24:c4:ab:7d:63:08:13:d2:db:
a2:4c:29:eb:ca:5b:d3:15:bf:26:64:42:49:5b:a7:0d:9b:e4:
da:95:7c:5e:e4:32:87:af:b1:be:b7:e9:d3:08:c0:88:3b:0d:
7d:ce:39:23:cc:c6:da:7a:cb:2c:1d:e5:9a:44:77:5a:3d:b4:
ab:f2:e0:40:de:64:a6:2f:1a:d8:8e:d7:68:70:68:1e:7f:aa:
25:21:c2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:11:23 2026 by rpki-client