Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
File: MvbeMKm492SENE0M07bAJz6t028.mft (raw, json)
Hash identifier: m+hvlQ2hiqRXZzrRJeTABNLcvjon0XqlSWxFcsp5L8Y=
Subject key identifier: 4D:23:D0:00:2C:D1:19:F0:00:62:B6:2F:6B:24:68:6E:5B:1C:9D:8D
Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
Certificate issuer: /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Certificate serial: 019CAB34B4C02594887612FD95FD57E513A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
Manifest number: 04F2
Signing time: Sun 01 Mar 2026 21:01:23 +0000
Manifest this update: Sun 01 Mar 2026 21:01:23 +0000
Manifest next update: Mon 02 Mar 2026 21:01:23 +0000
Files and hashes: 1: MvbeMKm492SENE0M07bAJz6t028.crl (hash: ZlQf9I1p1gYtLrdg19rWAQm+JsMvW0+EDxYsg8qkUJo=)
2: fTxk1v0fF8AuZDNoAxUqc_RyNH4.roa (hash: Lw+QNTmoYW+7xrFoYnex4ne1svS2EO7auyLRmtTAxxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:b4:c0:25:94:88:76:12:fd:95:fd:57:e5:13:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Validity
Not Before: Mar 1 21:01:23 2026 GMT
Not After : Mar 2 21:01:23 2026 GMT
Subject: CN=4d23d0002cd119f00062b62f6b24686e5b1c9d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:d7:de:72:55:a6:7d:54:36:48:2e:bd:fa:
b6:09:84:58:42:f5:1d:f8:8e:d8:b6:ae:b3:dc:0d:
a1:e7:34:8d:99:fd:45:7f:15:0b:60:fe:86:2c:32:
c9:4c:a9:1b:db:bf:43:1d:51:b7:2d:47:eb:6c:81:
cd:e2:b1:80:38:ba:90:8f:6c:ee:29:e7:d6:c9:d3:
7f:c2:5d:11:03:93:66:8b:6b:93:53:6c:f0:db:e5:
49:1c:11:a7:4e:b7:97:5c:a3:56:8d:b1:4d:f1:17:
7e:f1:27:55:91:3e:11:e4:fd:50:75:81:07:ff:c4:
90:87:2e:e8:9e:4e:f7:ea:92:a6:a1:36:c9:5c:fd:
29:37:b7:cc:7c:8a:bd:2c:fb:40:19:22:02:d4:79:
a4:5a:cb:4a:13:10:50:3d:93:98:91:9d:eb:04:61:
45:c5:a7:e4:e0:78:76:a2:66:78:3c:1d:cf:95:0f:
3b:6a:03:d3:63:fd:f0:36:08:11:7e:8d:c5:ca:af:
8c:5e:3a:e6:5b:05:8a:36:bb:8d:0c:75:8e:ea:3a:
a1:0d:fc:82:9d:61:76:20:f6:db:41:f7:80:31:7a:
01:5b:8b:a8:41:91:fc:e2:6b:bd:22:e2:70:54:e2:
c2:ec:15:36:79:5c:d2:71:08:03:ee:85:74:ea:d7:
d1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:23:D0:00:2C:D1:19:F0:00:62:B6:2F:6B:24:68:6E:5B:1C:9D:8D
X509v3 Authority Key Identifier:
keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fe:59:40:65:ec:84:04:8f:95:1d:a6:7b:6e:b6:04:04:22:
74:02:af:3a:8d:3e:6b:5e:3b:99:68:45:4b:f9:3a:25:53:87:
20:0e:0a:69:63:69:c3:02:42:d7:6d:31:15:e6:22:a8:59:b4:
bb:16:74:a9:68:b7:c6:45:87:71:3f:67:9a:17:9a:a8:28:b3:
2d:b9:64:74:be:33:b6:7f:24:64:ff:9a:7b:78:e8:ef:58:77:
aa:51:cd:18:96:3c:c0:90:b2:e2:4e:d2:61:aa:48:47:a9:90:
63:29:9d:0c:42:09:97:04:87:8a:49:32:c5:24:7a:6b:cb:a1:
cd:ee:61:0d:14:ca:47:06:52:c7:c9:e1:9b:f7:47:f1:4a:8c:
77:78:29:88:aa:11:06:d5:e1:24:49:c2:07:59:b8:7e:85:94:
1c:fa:f3:1b:a8:34:0c:36:96:43:c3:9d:6f:80:39:95:d3:2f:
41:42:b6:aa:ed:0b:57:e2:7d:f2:1c:0c:67:fa:9e:57:bc:6b:
15:6c:da:c8:61:7c:f1:98:46:50:c6:eb:14:99:05:e7:78:68:
97:f9:df:27:97:51:89:d6:b0:96:41:5e:9c:c1:43:08:cd:f2:
35:69:6d:73:a5:9b:b4:fa:12:16:13:68:cf:cb:3d:fa:c9:57:
a0:1c:46:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:44 2026 by rpki-client