Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File: 00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier: 1yLMStbPkuyM7sBcgGbeKiaaHuNYdwT6aUGSmgAvRog=
Subject key identifier: 4F:72:DD:F3:22:A4:F5:20:14:B9:0C:15:E6:FA:14:81:2A:A6:25:1E
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial: 019CAC0FD40D920B09EF0B30DC95A0FD2BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number: 11CC
Signing time: Mon 02 Mar 2026 01:00:44 +0000
Manifest this update: Mon 02 Mar 2026 01:00:44 +0000
Manifest next update: Tue 03 Mar 2026 01:00:44 +0000
Files and hashes: 1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: 2EuClgvMb3Jjv0Er4aeOQSl3n6XlJmRkz3HfbsiBEO0=)
2: 9cUez0lt6Mmw_B9XzRcaxVFdcD4.roa (hash: nOpET7s1tBcctYg3BftSbHVRYi4Bukh6zTqeOERZX48=)
3: KiGqqB6_C_ieZKJBT6I3N4MMdDE.roa (hash: rhV7ftUdpJwNEXvedltkn1lDN8x7VUAPfzQjlu6gj8U=)
4: Km329xYl0mWvscl4C7smwLfJLZM.roa (hash: y92Zjmkk3O0mYFiCM2kvamv5Zo1ZKqAX4wwIWsbkyjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:d4:0d:92:0b:09:ef:0b:30:dc:95:a0:fd:2b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Validity
Not Before: Mar 2 01:00:44 2026 GMT
Not After : Mar 3 01:00:44 2026 GMT
Subject: CN=4f72ddf322a4f52014b90c15e6fa14812aa6251e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c9:a5:be:22:62:e4:29:20:37:ac:6a:df:75:
ae:e2:79:d8:66:4a:82:6a:18:f7:6a:2d:45:91:1f:
ec:ab:81:d7:72:eb:1b:90:85:ea:02:f6:ad:e3:81:
a3:bb:86:85:e7:2e:ed:f0:5e:b9:58:58:6d:77:08:
1a:a9:1f:c1:9d:27:88:3e:24:5a:8e:35:6f:3f:cb:
96:3f:f1:ff:64:19:68:33:e1:ea:0e:6a:be:67:06:
6a:d7:40:f8:7f:e1:d9:05:61:45:f4:2e:1e:df:a1:
74:92:34:c1:b1:85:8b:57:6f:d1:c6:ef:52:75:59:
3b:24:6e:af:86:da:db:41:d1:37:a8:ca:26:57:b2:
f5:71:bd:ca:58:0e:4a:34:b0:89:14:c2:2d:2e:5f:
f7:f4:64:62:35:06:76:e6:7e:5d:b5:be:12:6c:89:
5b:b5:7d:a8:30:46:75:d4:ac:89:22:b3:19:4c:8c:
23:73:3a:fc:36:9b:c2:b6:75:fe:4d:be:85:c6:75:
09:e5:c1:e6:e4:e0:d6:51:70:83:b3:d0:49:df:35:
de:ee:39:2d:a8:5a:02:45:0f:e3:c7:21:c9:ac:89:
1b:7d:73:7d:96:83:ff:ab:de:12:25:4e:d2:08:c2:
70:53:51:af:fe:11:44:aa:05:3f:e1:fb:b5:77:a0:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:72:DD:F3:22:A4:F5:20:14:B9:0C:15:E6:FA:14:81:2A:A6:25:1E
X509v3 Authority Key Identifier:
keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:04:f7:51:92:a3:87:01:3c:9b:2a:f9:fb:8b:3e:bd:89:9a:
30:e1:a7:45:51:f0:f0:4f:77:9f:71:62:af:c6:49:7a:2c:7f:
b0:bc:3e:22:c1:f6:7a:e6:d9:0b:7e:67:2b:ee:fc:29:a9:bf:
3e:48:5c:1e:7e:8f:3f:30:ab:00:00:8d:a2:de:f4:a0:a2:81:
ef:c7:c3:92:90:b4:6b:ce:5c:42:21:c8:e8:2a:ca:7f:28:b9:
1d:31:0d:2c:d9:c4:b0:08:ea:69:c2:f6:87:ea:13:d6:fb:f9:
d1:4b:b0:5f:1f:ec:72:5a:18:3f:2a:c3:3b:81:1c:de:74:b8:
d1:02:fe:ca:7f:fa:3b:10:23:00:93:40:f9:67:2f:34:88:b3:
42:1b:eb:07:bf:67:91:a6:3c:6d:e9:c6:ad:f2:30:7d:bb:59:
80:5a:23:f7:ad:51:e6:bb:9d:6a:0a:b4:95:7e:0e:54:5b:12:
df:8d:94:b5:82:da:d9:2c:83:2c:c3:d5:af:03:10:17:5f:1f:
36:57:ab:05:2c:3f:ff:5d:28:4b:02:f2:5c:95:d1:c4:23:52:
a1:ef:9f:62:cc:fd:91:ca:f6:6b:29:c5:f2:53:89:d6:a7:f3:
03:71:4f:85:1b:c5:91:a9:c9:2d:15:9a:49:5d:77:b7:40:2e:
16:73:45:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:21 2026 by rpki-client