
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File: 00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier: +CWEMzFxwUHnFM5a5KXWTiuuzEh3QBqgA48CczN9UCE=
Subject key identifier: 8E:6A:96:BB:97:17:E2:F5:E9:58:33:9A:6D:FD:1E:5D:77:F2:77:2A
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial: 019D9998EDE59ACC7F5746B77032144CD0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number: 1247
Signing time: Fri 17 Apr 2026 04:00:29 +0000
Manifest this update: Fri 17 Apr 2026 04:00:29 +0000
Manifest next update: Sat 18 Apr 2026 04:00:29 +0000
Files and hashes: 1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: KLiQIkjewO00fsXPS27r5uk6D6XZrqdVbsIk8IPLw8o=)
2: 9cUez0lt6Mmw_B9XzRcaxVFdcD4.roa (hash: nOpET7s1tBcctYg3BftSbHVRYi4Bukh6zTqeOERZX48=)
3: KiGqqB6_C_ieZKJBT6I3N4MMdDE.roa (hash: rhV7ftUdpJwNEXvedltkn1lDN8x7VUAPfzQjlu6gj8U=)
4: Km329xYl0mWvscl4C7smwLfJLZM.roa (hash: y92Zjmkk3O0mYFiCM2kvamv5Zo1ZKqAX4wwIWsbkyjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:ed:e5:9a:cc:7f:57:46:b7:70:32:14:4c:d0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Validity
Not Before: Apr 17 04:00:29 2026 GMT
Not After : Apr 18 04:00:29 2026 GMT
Subject: CN=8e6a96bb9717e2f5e958339a6dfd1e5d77f2772a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:89:34:d3:28:e2:ee:a2:a5:0a:b8:40:17:
a7:78:c5:0f:ac:02:71:df:a3:b6:9f:df:5b:96:01:
26:6d:4b:29:f6:66:71:30:35:9e:7b:2a:be:10:00:
35:a7:4d:4d:c3:d2:b6:46:4d:4c:35:73:d4:57:15:
2a:5a:c2:4d:ab:0e:1b:b7:34:49:34:ec:de:fb:68:
6d:91:7c:c4:b1:52:b3:c1:5e:bc:42:79:ce:a8:0d:
26:9e:69:4c:4e:b9:22:b1:71:9e:59:bc:cd:57:84:
f4:20:7e:24:97:aa:4c:65:2a:6a:a7:17:ba:2d:2d:
c7:74:ec:02:d4:c5:72:d7:44:43:7c:b2:33:d0:3f:
5f:b3:80:67:07:f7:a0:43:d5:d2:5c:be:d5:5e:58:
5f:eb:a2:b4:f5:5f:c7:7d:bc:9f:14:dd:99:fe:61:
ff:04:53:c3:23:61:b5:fd:81:a3:6e:ce:ca:17:b9:
91:a9:7a:62:60:e6:16:28:12:8d:5c:0e:7c:01:eb:
ef:8b:fa:7a:8e:d3:49:83:76:7a:27:76:e8:e7:f6:
5f:17:7d:8a:3a:41:93:8b:89:32:65:f9:c7:c6:28:
05:69:d5:4d:17:5a:20:27:cc:e3:c4:45:95:ee:b1:
67:37:bb:c7:f4:cd:e4:50:f7:0e:c8:dc:83:d4:93:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6A:96:BB:97:17:E2:F5:E9:58:33:9A:6D:FD:1E:5D:77:F2:77:2A
X509v3 Authority Key Identifier:
keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8b:98:9f:8f:a0:15:45:b4:9c:29:e2:b9:34:cf:be:f5:26:
41:9b:a6:1e:d2:6e:5a:46:ef:c9:b7:46:2a:e9:df:4e:e0:e7:
84:a3:40:df:eb:84:66:d8:83:18:25:98:8e:d2:83:06:14:c0:
78:5e:e3:55:7c:76:b0:8c:37:b7:4c:20:64:12:6b:ca:2c:6b:
6f:99:cb:b5:a5:87:fe:39:be:a9:b1:8d:34:bf:e3:a6:13:da:
b6:4d:ca:a0:80:f3:a3:03:db:9b:e8:52:95:a0:2b:cc:f8:80:
b6:d3:eb:a9:af:d2:64:0b:48:92:32:92:f8:f3:5c:a7:bc:c4:
6f:c0:77:7c:66:80:fc:1d:7b:d6:f0:0c:02:59:cb:0b:ac:e4:
dd:15:4e:75:90:2f:7b:c5:cf:32:f3:2c:3a:1c:56:72:b6:70:
f8:68:e9:33:60:f4:28:73:e5:77:51:d8:7c:7c:a1:71:4c:bb:
8f:56:22:ea:d5:85:4b:1b:04:61:cf:d6:8a:5e:29:d0:39:d1:
ac:98:11:96:9c:c5:65:ab:0a:2b:fe:17:e8:db:d9:03:0c:3d:
5b:55:6b:d5:ba:83:03:f2:6e:eb:99:9d:c5:18:36:33:b9:2f:
ea:c2:da:8c:a5:b5:ca:16:bc:a6:c7:37:24:9e:96:f1:9d:b1:
ca:9e:1b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:27 2026 by rpki-client