Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
File: MxvOLugG6TYhES29YYU293X0T7o.mft (raw, json)
Hash identifier: 3CZDSCFar4KsG1sDwShfnCP84ZjDTiDy6vv2CRTJGx8=
Subject key identifier: D0:E3:54:BB:33:9F:0C:41:8D:72:40:9F:EB:9E:BD:A6:47:3D:76:E5
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 019CAAFD1DCBF84E5E97AFED8E0C68B94228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
Manifest number: 185E
Signing time: Sun 01 Mar 2026 20:00:40 +0000
Manifest this update: Sun 01 Mar 2026 20:00:40 +0000
Manifest next update: Mon 02 Mar 2026 20:00:40 +0000
Files and hashes: 1: MxvOLugG6TYhES29YYU293X0T7o.crl (hash: JAR99qdt/ChDQyHlZNTKl6Zdvd4q2mAte+c310Hq/mQ=)
2: _nsHDGsxSW2xMTXJcSwiD-J3Jl4.roa (hash: mF6gTp6ZB9piQiXwLO2UJXYdCQJiTLfpyOjrPM5peb0=)
3: gU4rt6UfX908kKCYCroARSroPkQ.roa (hash: j63IJzIDAdlriUlQV4IJaH+lIR+tUTSbCwMefhCYMjM=)
4: x5dZH_p1jpQNmkzAGadQtc_NwNA.roa (hash: j7kE+HBT1mrUTqWPhu4yo406PYqylXV+5uj+qLftudY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:1d:cb:f8:4e:5e:97:af:ed:8e:0c:68:b9:42:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Mar 1 20:00:40 2026 GMT
Not After : Mar 2 20:00:40 2026 GMT
Subject: CN=d0e354bb339f0c418d72409feb9ebda6473d76e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4b:a6:34:97:67:cd:45:79:f3:3c:cf:91:fe:
c5:4d:f6:da:f7:2d:7d:ec:3c:a0:d1:dd:40:89:ce:
4c:9c:dc:57:d4:15:4b:61:0d:35:df:50:ae:8a:85:
e8:cd:d5:86:ba:b6:66:84:2c:62:77:45:15:02:3c:
2e:02:2a:ba:bc:fb:ff:9b:a6:28:b9:07:47:d3:da:
ee:cf:21:62:52:b4:db:bc:0f:77:0b:6a:1a:b7:6c:
c5:04:f3:48:16:14:cd:8a:6f:e6:5d:a7:cb:84:0d:
8b:c8:fa:c4:3e:71:56:29:ad:64:a4:d7:1b:33:e3:
d4:7a:4b:ad:20:96:cd:f4:c9:42:cd:30:13:9c:63:
8d:26:fe:c9:3a:af:d7:b9:51:d8:5e:a7:4b:e6:7f:
9d:63:00:b8:32:c5:6c:2f:f6:e4:d0:52:ee:b5:38:
9c:0c:60:ef:96:22:4a:6d:fe:36:e9:d2:bf:65:5d:
fb:65:87:6a:1e:80:e6:86:9a:ab:65:92:b8:e4:93:
cb:09:17:fc:b1:64:4a:fa:e8:84:c5:67:fa:f0:4f:
00:dd:89:31:9f:76:80:ad:66:67:2d:ad:ed:e6:17:
77:c2:2c:bf:6c:d3:ea:1a:f9:18:48:0f:d1:ff:4f:
c7:9f:41:5f:89:57:f6:46:dd:2f:7a:b9:55:2b:5b:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E3:54:BB:33:9F:0C:41:8D:72:40:9F:EB:9E:BD:A6:47:3D:76:E5
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f2:8a:7e:ba:05:59:4f:1c:05:69:0a:1e:fa:1c:15:fd:32:
8c:da:21:16:66:30:e8:c3:67:24:2e:69:f5:a3:83:2c:d7:79:
61:2c:56:b2:7a:09:c6:48:de:59:44:12:b8:8c:18:07:45:04:
ae:e4:ac:de:1d:03:9c:b6:89:92:1f:83:b3:c8:df:f7:bc:f9:
13:5f:c1:b9:c3:f9:e4:9e:a7:df:03:c6:a7:89:5f:67:a7:34:
6a:26:94:5d:a3:66:47:a5:c6:6c:c9:83:15:1c:aa:91:57:42:
e9:67:74:3d:0a:5d:bc:4a:33:85:9f:14:d3:3f:25:b6:97:2e:
89:9e:22:dc:df:ee:dd:3e:c1:f4:9a:c9:41:bc:eb:89:df:99:
da:6e:7f:75:c3:cb:c9:eb:c5:62:ff:60:c8:8d:f3:d4:49:df:
27:a8:fe:6d:d1:8b:57:bb:47:9c:04:ef:15:1d:1c:e8:e1:06:
b0:07:97:7d:23:52:63:0a:ca:62:a8:24:5e:89:a4:ab:d1:cc:
9b:58:24:87:44:11:98:40:c1:79:f3:47:70:22:dd:18:e1:89:
37:11:f4:f1:58:d7:9d:f9:08:9d:a1:73:f8:ea:0d:33:b6:6e:
27:f9:81:13:68:0c:89:76:2d:8e:cd:c1:3f:c3:86:44:39:2f:
e1:75:4c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:55 2026 by rpki-client