Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
File: MxvOLugG6TYhES29YYU293X0T7o.mft (raw, json)
Hash identifier: UhHWDu2RNoRzf0ao68q4dPG9YYWnl4IquWPQAwrb/w8=
Subject key identifier: 3C:E5:E1:D8:B0:0D:81:37:FA:F3:DC:12:25:75:1B:8A:B1:91:0B:50
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 01A0C96AF13326D6A46ECC4AEE3841CC37FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
Manifest number: 1A80
Signing time: Tue 22 Sep 2026 14:00:23 +0000
Manifest this update: Tue 22 Sep 2026 14:00:23 +0000
Manifest next update: Wed 23 Sep 2026 14:00:23 +0000
Files and hashes: 1: MxvOLugG6TYhES29YYU293X0T7o.crl (hash: YSUV4FWjJSIaPauo5bOwFe6OOSpcZuSugl+e82IzAQk=)
2: _nsHDGsxSW2xMTXJcSwiD-J3Jl4.roa (hash: mF6gTp6ZB9piQiXwLO2UJXYdCQJiTLfpyOjrPM5peb0=)
3: gU4rt6UfX908kKCYCroARSroPkQ.roa (hash: j63IJzIDAdlriUlQV4IJaH+lIR+tUTSbCwMefhCYMjM=)
4: x5dZH_p1jpQNmkzAGadQtc_NwNA.roa (hash: j7kE+HBT1mrUTqWPhu4yo406PYqylXV+5uj+qLftudY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6a:f1:33:26:d6:a4:6e:cc:4a:ee:38:41:cc:37:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Sep 22 14:00:23 2026 GMT
Not After : Sep 23 14:00:23 2026 GMT
Subject: CN=3ce5e1d8b00d8137faf3dc1225751b8ab1910b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:62:91:c3:b3:fc:87:d9:79:35:8e:cf:41:
7f:84:40:71:d9:9d:95:ff:32:53:80:67:87:b0:76:
08:8b:bf:8d:9f:9d:61:60:66:70:33:ff:1b:b6:07:
81:dd:7e:81:96:7f:09:04:db:e5:36:2e:7b:ea:01:
37:54:20:27:60:e3:2d:7a:d2:2e:b4:bb:85:ea:0a:
36:57:ea:de:71:a8:e9:de:7a:cc:78:7c:e6:27:4d:
2d:5c:bf:76:29:57:cf:57:ca:88:2d:a7:30:57:e6:
69:c4:12:aa:88:13:88:df:97:40:17:5d:33:34:ea:
d3:7b:e9:ca:e4:35:81:95:4e:97:06:0b:b5:4c:8d:
95:ad:b9:7a:11:90:a9:b5:bb:1d:60:37:44:e7:f1:
55:d0:26:99:7c:f9:ef:a0:42:6e:48:ed:17:dc:3e:
57:e8:55:5f:28:ed:5d:71:c0:5f:95:e1:6b:79:31:
b9:27:76:07:07:26:9a:4c:6b:e7:e0:a8:99:70:1e:
85:3e:df:ec:ef:9e:51:27:82:cd:0d:ee:cc:ec:ec:
b6:b8:04:7e:a6:99:f9:f9:f7:7a:db:1d:ce:b0:2a:
99:06:97:ad:e8:ba:e6:ee:90:b8:d5:a0:22:3f:14:
e9:96:9f:f3:be:0b:21:0a:91:38:71:1e:57:07:c7:
d8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E5:E1:D8:B0:0D:81:37:FA:F3:DC:12:25:75:1B:8A:B1:91:0B:50
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:95:a0:69:a9:57:0b:77:cb:23:a7:14:74:2a:a0:3b:69:01:
34:e4:c4:43:a4:00:fd:00:57:a1:60:c5:51:f3:cd:6c:f8:9a:
5b:07:1a:67:a2:0a:5d:3b:50:a0:f3:ce:ae:d9:ea:2c:20:d9:
43:71:e4:1d:6a:3a:ca:bb:05:04:d8:ea:1b:12:dd:25:68:f9:
e8:2c:ce:ce:fb:5b:5d:24:b0:ed:72:cc:37:ec:88:41:4a:18:
9b:0d:de:dc:23:2f:f3:30:8e:93:5e:c0:eb:94:cc:95:b1:5a:
45:d2:09:8c:3e:5c:87:25:20:bc:d5:93:19:76:e1:35:18:e8:
71:0a:eb:61:6c:2c:83:f4:b4:e0:c3:52:51:43:7b:fe:85:17:
f7:b2:91:02:73:c0:22:b3:2d:6a:db:7e:cf:dd:9c:f1:d3:50:
48:ee:62:17:2f:5c:2c:37:b2:03:64:b1:31:e7:02:39:c9:c4:
ca:4a:b1:88:5c:ea:b2:56:ba:01:3e:62:bf:04:62:da:7a:76:
8c:41:94:8b:18:17:ed:ff:c4:f4:1e:87:05:38:15:5c:c1:30:
92:20:51:a5:ef:5a:d2:ad:65:ba:15:c6:f1:2b:06:2c:ca:59:
73:7e:9b:85:f0:24:4a:be:4d:17:1d:cc:51:b2:20:d7:66:ee:
69:c8:f8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:58:48 2026 by rpki-client