Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File: 00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier: phBTBwkPeI08za9ti6gSuTtrTDrtveyhKO2Abnc+FqQ=
Subject key identifier: B0:66:A2:4C:D4:AC:AE:2B:AD:61:D9:3B:72:67:B5:A8:5B:A7:EF:E4
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial: 019CADFE71D25286CE4C6EA2ABD9033E29AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number: 11CD
Signing time: Mon 02 Mar 2026 10:00:59 +0000
Manifest this update: Mon 02 Mar 2026 10:00:59 +0000
Manifest next update: Tue 03 Mar 2026 10:00:59 +0000
Files and hashes: 1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: Gn5XFaoKb9LMYIt/ZJnokaNHkwWbNkVMA7t/yX/rITQ=)
2: 9cUez0lt6Mmw_B9XzRcaxVFdcD4.roa (hash: nOpET7s1tBcctYg3BftSbHVRYi4Bukh6zTqeOERZX48=)
3: KiGqqB6_C_ieZKJBT6I3N4MMdDE.roa (hash: rhV7ftUdpJwNEXvedltkn1lDN8x7VUAPfzQjlu6gj8U=)
4: Km329xYl0mWvscl4C7smwLfJLZM.roa (hash: y92Zjmkk3O0mYFiCM2kvamv5Zo1ZKqAX4wwIWsbkyjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:71:d2:52:86:ce:4c:6e:a2:ab:d9:03:3e:29:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Validity
Not Before: Mar 2 10:00:59 2026 GMT
Not After : Mar 3 10:00:59 2026 GMT
Subject: CN=b066a24cd4acae2bad61d93b7267b5a85ba7efe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:10:eb:e5:27:a6:ae:90:72:53:0d:de:0b:f7:
31:54:30:0c:23:3e:6a:d1:6e:62:b2:6b:54:f4:11:
70:d5:4b:df:27:62:e9:e5:4d:bb:75:20:6f:82:73:
41:34:ac:a2:c2:8c:15:c5:bb:13:07:a1:73:c0:dd:
89:6a:6c:78:c9:fd:28:2f:8d:a1:51:19:76:2a:d7:
7c:a1:27:e1:2b:c7:c4:28:f7:1f:37:4d:57:37:38:
fc:7c:c9:89:46:7f:40:a0:18:aa:94:41:20:b5:dd:
f0:0e:0c:54:ba:93:ff:5f:38:19:c2:86:32:b9:c7:
be:08:b4:66:c2:4e:63:c1:09:39:63:22:cc:a3:89:
37:23:85:99:ea:ea:cf:bd:bd:f0:db:66:d5:de:6c:
12:54:27:46:ac:91:bf:1d:e1:e4:d1:e8:38:de:98:
a9:b3:d6:75:80:39:6b:83:03:f1:29:8c:04:d9:cf:
b8:ee:83:8e:d3:e2:eb:4f:ed:5d:70:e1:82:56:5f:
85:62:e3:e4:07:64:fa:a0:6f:0f:59:da:5a:c9:e2:
57:ae:32:02:4f:01:5f:9b:8f:da:d4:65:e2:b3:4b:
00:aa:1b:86:c4:f2:bb:ea:09:5a:6d:fc:1a:8a:2a:
2b:b2:3b:f0:b9:3f:37:4d:0e:d4:70:89:b7:32:71:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:66:A2:4C:D4:AC:AE:2B:AD:61:D9:3B:72:67:B5:A8:5B:A7:EF:E4
X509v3 Authority Key Identifier:
keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:50:88:a0:c4:cf:aa:27:31:f5:ca:22:d6:11:a5:2b:fd:f9:
68:ea:11:17:3d:c8:f7:06:d8:14:6b:eb:cf:d3:19:19:66:92:
71:0b:28:a7:5f:38:f2:37:30:aa:fb:be:cb:dc:2c:c9:ee:5e:
36:dd:bc:0f:3b:b4:fb:e7:74:63:c4:ab:cf:40:24:94:96:f3:
6d:38:12:8e:f0:03:d6:ab:e1:e9:ef:31:a8:40:25:02:f8:84:
bf:16:96:02:fc:c7:fb:77:a7:95:56:50:03:d6:10:be:3c:9f:
df:b8:1d:58:4b:77:a1:d6:0c:01:a0:6b:9e:ac:89:c9:76:49:
2b:c6:6c:a8:e1:b8:ee:36:50:4e:cd:36:41:73:2b:7b:02:7c:
da:ec:a8:28:92:48:eb:9a:9f:87:fc:46:3f:f2:bf:9f:74:4a:
ba:69:04:fd:31:e1:81:94:fa:84:c3:c1:a6:0e:28:95:fe:3b:
d4:a9:6e:3f:10:e9:01:6b:6d:41:ba:9f:59:48:ee:e1:89:a8:
7e:ea:a6:0c:ac:d3:8d:d4:b2:d5:e7:97:5d:e4:91:fd:00:7f:
30:0f:9b:13:b6:c8:cf:0b:32:23:fc:c0:a2:08:da:bd:4d:1b:
4e:cc:56:38:1f:c2:a4:8c:60:c6:39:08:84:e5:58:f5:29:cb:
c2:6e:63:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:10 2026 by rpki-client