Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File: MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier: 01A7Wqhhs1NjTRf7bEGc3ITqaobEtfDEzvk8HEYXNPI=
Subject key identifier: ED:C0:39:8C:31:E2:FF:99:FD:C0:23:43:87:FF:31:72:2C:21:38:1B
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 01A0E9D2369ACD91E6BEA319E0250AFAF2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number: 0A24
Signing time: Mon 28 Sep 2026 21:01:02 +0000
Manifest this update: Mon 28 Sep 2026 21:01:02 +0000
Manifest next update: Tue 29 Sep 2026 21:01:02 +0000
Files and hashes: 1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: xfCUR6S8ULDQZ9xFAmSR9ib4+KVX1UAoAPALbcJ2oQ4=)
2: bdi1rZ-Hv8XYlMzG6p4dSyqynkQ.roa (hash: 87KIQ9XId5k9Ww9xMmtV6OZLD6Wry24vd0PmuggxAkY=)
3: d6m94tH0anOa-FWzt96zJw4rWqM.roa (hash: VXa480FkV+R92FQTcYLaqarEcGnxznUTZLh1NwOBPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:d2:36:9a:cd:91:e6:be:a3:19:e0:25:0a:fa:f2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: Sep 28 21:01:02 2026 GMT
Not After : Sep 29 21:01:02 2026 GMT
Subject: CN=edc0398c31e2ff99fdc0234387ff31722c21381b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:15:06:bd:f6:1f:f5:67:00:a0:09:5d:6c:79:
f7:50:92:eb:c9:dd:7e:00:60:1b:69:bf:54:a3:8f:
d5:0d:5f:02:49:bb:d7:b9:2b:de:20:d6:c2:40:13:
28:72:90:e9:70:82:3a:37:87:6b:7d:f4:5b:16:4b:
e4:6c:1d:44:a3:69:5e:a0:e5:17:c1:69:e5:24:8a:
f0:a2:a8:c2:6a:f2:17:26:92:5f:97:d9:bc:c6:2c:
bf:c6:c9:27:20:2a:ba:1b:7d:5c:d1:c1:89:9f:61:
6c:20:ac:7b:1b:b9:e6:db:ec:77:9f:ba:8e:4f:06:
45:61:cd:3e:27:f8:bf:04:4f:d9:de:43:28:12:8c:
a9:e2:06:e8:ce:d3:c4:a9:c3:e7:2c:09:e2:10:9e:
c3:21:d2:21:e7:89:4e:63:8f:c1:78:fe:f1:80:5e:
f2:14:c3:7b:b0:e2:82:de:45:02:b6:cd:63:57:27:
38:5f:1f:62:8a:c7:ee:74:54:40:b3:9c:11:c8:19:
34:e4:3f:1f:b5:1c:f6:04:b0:a9:1b:53:15:92:58:
5e:e5:71:ff:07:e3:b5:ae:62:f6:e9:e5:66:c1:ef:
f1:e3:e0:e8:4f:67:f0:ab:3b:19:a1:aa:21:fe:ae:
5f:1d:cd:a6:40:f7:0a:b9:ea:fa:4f:53:c0:bb:9e:
de:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C0:39:8C:31:E2:FF:99:FD:C0:23:43:87:FF:31:72:2C:21:38:1B
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:44:6d:d0:3e:2d:85:46:5c:5d:c8:45:17:c7:9c:24:e3:44:
e8:75:12:41:7a:5f:37:b8:50:d0:e7:a0:7a:02:ab:02:18:fd:
a9:94:e4:6c:5c:3b:04:10:90:c9:3e:30:a5:58:df:7c:fe:34:
fe:80:ca:5a:de:40:13:37:b1:bd:f4:a2:d1:b7:24:7c:7b:53:
c1:d1:22:79:af:37:9f:79:07:1b:ec:27:bf:a3:00:63:8d:45:
f5:ef:cc:26:85:ea:d8:be:5a:8a:19:b8:08:a2:f9:02:60:7f:
8e:79:7c:b3:04:92:95:40:d4:e6:04:08:8b:67:14:35:5d:2d:
91:a7:f0:07:7b:e7:30:86:79:b5:ff:c2:8d:53:9e:5a:0a:ed:
12:83:c8:5e:60:fc:b9:3b:e6:88:06:cd:09:63:0b:7f:9a:61:
c8:c6:d9:31:ff:fb:be:0a:0b:53:4c:76:56:58:ee:37:bd:2b:
c8:56:05:84:34:9f:fd:7f:41:16:c5:5c:6e:24:93:8a:b9:ea:
20:73:af:55:e5:e8:dc:b7:74:76:59:1f:51:61:e5:d2:d1:9e:
aa:ed:fd:e5:2c:91:2c:65:05:88:98:29:f9:88:d6:72:17:1d:
7b:ea:6d:41:68:cd:8a:30:a9:d8:fd:4e:7a:b8:54:ee:9d:62:
e2:dc:4d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:16:40 2026 by rpki-client