Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File: MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier: Y/q8dJrMZk3p2I3iQ1eTr7wZmArGHqcaa5EYLexnGl8=
Subject key identifier: B3:7C:BC:51:38:FA:F4:B8:EE:36:C2:C5:94:40:60:CF:48:E5:2B:64
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 019CAA8F8F2B97DE3568304199EB0DDA35C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number: 07F1
Signing time: Sun 01 Mar 2026 18:01:00 +0000
Manifest this update: Sun 01 Mar 2026 18:01:00 +0000
Manifest next update: Mon 02 Mar 2026 18:01:00 +0000
Files and hashes: 1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: CX7pbfvwElgKCVS0eqnniCSOFPluvn9DjccJPWppE9o=)
2: bdi1rZ-Hv8XYlMzG6p4dSyqynkQ.roa (hash: 87KIQ9XId5k9Ww9xMmtV6OZLD6Wry24vd0PmuggxAkY=)
3: d6m94tH0anOa-FWzt96zJw4rWqM.roa (hash: VXa480FkV+R92FQTcYLaqarEcGnxznUTZLh1NwOBPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:8f:2b:97:de:35:68:30:41:99:eb:0d:da:35:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: Mar 1 18:01:00 2026 GMT
Not After : Mar 2 18:01:00 2026 GMT
Subject: CN=b37cbc5138faf4b8ee36c2c5944060cf48e52b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:83:e8:69:e7:cc:14:8f:15:34:b1:55:07:
f8:1f:c0:88:81:56:93:e5:c5:a9:6a:7a:2e:4c:6b:
4e:e5:2c:8e:58:15:f4:f4:de:f3:61:5d:a6:62:06:
d0:22:83:49:8c:4a:79:41:cb:88:7a:c9:2d:d7:72:
35:64:cd:3a:d5:dd:c1:a8:6f:3c:f3:7d:7d:d3:e1:
30:bc:2a:60:20:a3:23:e0:d3:a7:6d:b6:84:57:ab:
34:18:c7:07:b8:cc:20:2c:b6:db:41:63:b6:42:ec:
91:b3:a9:0b:60:cd:67:7d:2b:49:53:f6:21:98:17:
fc:4b:06:f6:d5:fe:61:0d:cc:75:13:3f:ef:0c:62:
b3:91:ab:4d:2b:32:84:6a:9f:72:24:81:66:79:56:
e1:34:94:dc:cb:cd:44:cb:12:b2:df:cf:a0:63:9c:
2e:94:28:42:06:0f:3c:91:6c:9a:12:ba:95:21:10:
83:84:14:8b:9d:8d:43:20:29:46:2c:62:05:80:17:
ba:e5:17:ab:78:72:85:73:48:18:55:06:5e:94:b4:
5a:1e:65:be:45:4e:3e:4f:68:7f:8f:ae:24:30:01:
21:12:24:44:3e:ec:65:d2:cf:95:82:21:a9:95:75:
80:26:08:00:50:c6:7a:dc:68:73:16:53:24:ce:b0:
f0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7C:BC:51:38:FA:F4:B8:EE:36:C2:C5:94:40:60:CF:48:E5:2B:64
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c1:58:6d:8f:84:f5:77:0e:bb:3c:73:5f:98:98:05:3c:86:
2e:f3:42:8b:96:70:8b:50:1a:a8:d9:66:5c:14:1a:65:5e:69:
64:dc:37:7a:91:93:92:96:17:a3:3f:f4:25:fe:9f:8a:48:85:
ba:0d:1d:97:89:d1:70:00:5d:58:c7:54:ab:bf:04:2a:92:46:
54:7a:18:47:d5:11:b3:2f:d4:ab:33:20:74:0e:9c:11:ea:d5:
69:bb:65:c7:fc:93:6a:45:1b:c4:cb:86:6b:01:7c:a7:90:5d:
4d:4b:c4:81:41:f0:30:35:d4:b4:37:09:bb:92:dc:50:54:0a:
bc:8f:cb:21:b6:1e:3b:80:e6:a4:d7:c4:ff:a3:35:83:f1:ba:
b5:d9:de:27:f4:0e:77:52:9a:26:57:6c:7e:c3:e0:90:04:c8:
b4:1c:67:7d:f6:6c:98:9b:85:6d:1f:c7:c0:ff:89:a1:8e:aa:
8b:18:3d:88:5a:16:59:48:2d:57:03:d3:ee:a0:2d:75:4e:c7:
50:ff:95:d3:34:db:40:b2:34:15:b3:99:d7:7f:d9:dd:b4:65:
fb:55:3c:04:e1:87:c9:75:d5:b5:9b:be:a9:e4:77:9e:65:d4:
d8:74:2a:33:d8:dc:01:4d:93:10:4e:0e:31:36:d9:3f:56:18:
e4:8f:18:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj48rl941aDBBmesN2jXEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZjA0N2EzNDIxMjg3MmIwYjFmZjgwNGVlMDIyYjAyYWY3
NWZmZWQwHhcNMjYwMzAxMTgwMTAwWhcNMjYwMzAyMTgwMTAwWjAzMTEwLwYDVQQD
EyhiMzdjYmM1MTM4ZmFmNGI4ZWUzNmMyYzU5NDQwNjBjZjQ4ZTUyYjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEiD6GnnzBSPFTSxVQf4H8CIgVaT
5cWpanouTGtO5SyOWBX09N7zYV2mYgbQIoNJjEp5QcuIeskt13I1ZM061d3BqG88
83190+EwvCpgIKMj4NOnbbaEV6s0GMcHuMwgLLbbQWO2QuyRs6kLYM1nfStJU/Yh
mBf8Swb21f5hDcx1Ez/vDGKzkatNKzKEap9yJIFmeVbhNJTcy81EyxKy38+gY5wu
lChCBg88kWyaErqVIRCDhBSLnY1DIClGLGIFgBe65RereHKFc0gYVQZelLRaHmW+
RU4+T2h/j64kMAEhEiREPuxl0s+VgiGplXWAJggAUMZ63GhzFlMkzrDwdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLN8vFE4+vS47jbCxZRAYM9I5StkMB8GA1UdIwQY
MBaAFDLwR6NCEocrCx/4BO4CKwKvdf/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYt
N2ZhZTA2NWI2NDZhLzEvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYtN2ZhZTA2NWI2NDZh
LzEvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccFYbY+E
9XcOuzxzX5iYBTyGLvNCi5Zwi1AaqNlmXBQaZV5pZNw3epGTkpYXoz/0Jf6fikiF
ug0dl4nRcABdWMdUq78EKpJGVHoYR9URsy/UqzMgdA6cEerVabtlx/yTakUbxMuG
awF8p5BdTUvEgUHwMDXUtDcJu5LcUFQKvI/LIbYeO4DmpNfE/6M1g/G6tdneJ/QO
d1KaJldsfsPgkATItBxnffZsmJuFbR/HwP+JoY6qixg9iFoWWUgtVwPT7qAtdU7H
UP+V0zTbQLI0FbOZ13/Z3bRl+1U8BOGHyXXVtZu+qeR3nmXU2HQqM9jcAU2TEE4O
MTbZP1YY5I8Yiw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:56 2026 by rpki-client