Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File: MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier: 9L94BEZo8SPteIx7WcHiGLiImWmIVh2WOYrzY0yc6gY=
Subject key identifier: 70:EB:A1:BD:07:B9:0E:FE:6D:2C:20:FA:1E:93:E0:D2:62:B1:88:62
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 019D9A06D349ACA08F0EC132B4567C46958A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number: 086D
Signing time: Fri 17 Apr 2026 06:00:31 +0000
Manifest this update: Fri 17 Apr 2026 06:00:31 +0000
Manifest next update: Sat 18 Apr 2026 06:00:31 +0000
Files and hashes: 1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: RsfB+hDWTAqvPWej0hzVmunz3CtwYuBMaMb2tmC7wDE=)
2: bdi1rZ-Hv8XYlMzG6p4dSyqynkQ.roa (hash: 87KIQ9XId5k9Ww9xMmtV6OZLD6Wry24vd0PmuggxAkY=)
3: d6m94tH0anOa-FWzt96zJw4rWqM.roa (hash: VXa480FkV+R92FQTcYLaqarEcGnxznUTZLh1NwOBPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d3:49:ac:a0:8f:0e:c1:32:b4:56:7c:46:95:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: Apr 17 06:00:31 2026 GMT
Not After : Apr 18 06:00:31 2026 GMT
Subject: CN=70eba1bd07b90efe6d2c20fa1e93e0d262b18862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:93:79:ca:3f:47:87:a9:6b:fa:60:22:5e:
ec:6d:16:ee:ee:68:0e:fb:23:f9:fe:be:20:5a:7b:
1b:fd:48:66:d4:6a:7e:f0:c0:67:f5:74:4d:cb:78:
8a:17:29:f3:89:7c:03:7e:99:5e:6b:fc:f1:b5:b5:
c0:08:39:e8:0a:f9:d9:d6:52:80:2f:ca:1a:c6:6b:
c3:06:b5:f0:31:60:c6:01:af:18:3a:db:a1:70:64:
ed:06:5e:c0:4d:7a:98:0e:ea:1b:fe:f0:74:54:2a:
25:c9:d2:34:3c:be:7d:0c:36:2f:e5:16:eb:62:c6:
c7:ec:0a:7e:a4:b3:23:f8:a8:84:2e:a7:68:db:b8:
bf:93:3b:88:63:10:c7:9e:ce:e2:4b:c4:77:52:1a:
26:c3:be:37:7a:80:05:c5:58:fe:14:c7:0b:bb:ec:
b8:db:e8:d9:c7:6d:1c:30:95:0a:ce:6d:a9:bf:d5:
91:db:47:8f:84:00:4b:a3:78:98:a4:cf:55:b6:da:
a6:b4:64:ed:56:31:fe:01:fc:f2:a1:34:21:b0:8e:
aa:0a:b7:27:9b:63:0e:1c:9b:07:e9:58:bc:4c:aa:
43:03:f9:a9:ea:e0:93:9b:98:56:cf:46:e4:45:b2:
ec:f2:3f:70:61:cf:25:ee:1c:ed:f3:b9:c1:60:ec:
a6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EB:A1:BD:07:B9:0E:FE:6D:2C:20:FA:1E:93:E0:D2:62:B1:88:62
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:6c:57:9c:a5:09:c9:10:87:a7:eb:d9:38:78:2d:f7:27:d9:
8d:85:4d:d8:c3:e7:b3:6d:54:43:1e:b5:e8:5d:b7:05:b1:3b:
8a:4a:ac:2a:84:62:27:ef:51:b0:3e:b1:7a:d2:f8:b7:d2:89:
66:b7:27:b1:ce:a1:67:a6:64:5a:3a:d5:35:2b:d9:b8:75:d4:
bf:0b:e9:39:d1:74:ef:be:1f:69:d2:92:d5:1c:09:c1:c7:0b:
f3:1a:fd:64:9e:a6:29:f2:4f:08:26:02:9c:d8:03:3a:81:de:
0e:9f:89:ae:6c:a3:21:2a:e5:22:1a:ba:63:f2:cc:52:a6:7b:
41:18:6e:0a:e0:2f:29:85:c6:ee:e0:59:f9:bd:0d:11:45:1e:
8d:b5:92:25:fe:f6:2d:5a:a6:e5:95:9d:04:3d:ee:78:c2:e5:
1f:a8:8b:27:38:c7:65:0a:4a:fa:e4:a3:d9:41:c6:91:c4:eb:
0d:7f:f5:04:87:04:5d:5a:15:b7:c4:34:9d:19:06:9c:0c:ab:
65:a3:9d:02:98:85:c9:00:49:3c:ed:37:1a:51:49:d5:4f:6b:
0c:93:e4:d7:1d:f4:6d:11:da:95:07:1b:78:7b:47:8e:7c:52:
e9:3d:99:c8:e2:71:43:ca:e5:45:24:a4:0d:b1:55:b7:b2:dc:
a1:ca:86:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBtNJrKCPDsEytFZ8RpWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZjA0N2EzNDIxMjg3MmIwYjFmZjgwNGVlMDIyYjAyYWY3
NWZmZWQwHhcNMjYwNDE3MDYwMDMxWhcNMjYwNDE4MDYwMDMxWjAzMTEwLwYDVQQD
Eyg3MGViYTFiZDA3YjkwZWZlNmQyYzIwZmExZTkzZTBkMjYyYjE4ODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbuTeco/R4epa/pgIl7sbRbu7mgO
+yP5/r4gWnsb/Uhm1Gp+8MBn9XRNy3iKFynziXwDfplea/zxtbXACDnoCvnZ1lKA
L8oaxmvDBrXwMWDGAa8YOtuhcGTtBl7ATXqYDuob/vB0VColydI0PL59DDYv5Rbr
YsbH7Ap+pLMj+KiELqdo27i/kzuIYxDHns7iS8R3Uhomw743eoAFxVj+FMcLu+y4
2+jZx20cMJUKzm2pv9WR20ePhABLo3iYpM9VttqmtGTtVjH+AfzyoTQhsI6qCrcn
m2MOHJsH6Vi8TKpDA/mp6uCTm5hWz0bkRbLs8j9wYc8l7hzt87nBYOymBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDrob0HuQ7+bSwg+h6T4NJisYhiMB8GA1UdIwQY
MBaAFDLwR6NCEocrCx/4BO4CKwKvdf/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYt
N2ZhZTA2NWI2NDZhLzEvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYtN2ZhZTA2NWI2NDZh
LzEvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWxXnKUJ
yRCHp+vZOHgt9yfZjYVN2MPns21UQx616F23BbE7ikqsKoRiJ+9RsD6xetL4t9KJ
Zrcnsc6hZ6ZkWjrVNSvZuHXUvwvpOdF0774fadKS1RwJwccL8xr9ZJ6mKfJPCCYC
nNgDOoHeDp+JrmyjISrlIhq6Y/LMUqZ7QRhuCuAvKYXG7uBZ+b0NEUUejbWSJf72
LVqm5ZWdBD3ueMLlH6iLJzjHZQpK+uSj2UHGkcTrDX/1BIcEXVoVt8Q0nRkGnAyr
ZaOdApiFyQBJPO03GlFJ1U9rDJPk1x30bRHalQcbeHtHjnxS6T2ZyOJxQ8rlRSSk
DbFVt7LcocqGtA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:05 2026 by rpki-client