Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: r6e0FTe6V+SXHl9JD/dQJ8FWnOvQTMmn1H0aYQhQ18w=
Subject key identifier: 72:B4:9C:B3:71:A7:5E:D4:6A:6D:BC:CD:BF:F5:66:0A:2D:4A:76:8E
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 019CAA9010193AB88AAE60BF9AD50CAF3446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 1595
Signing time: Sun 01 Mar 2026 18:01:33 +0000
Manifest this update: Sun 01 Mar 2026 18:01:33 +0000
Manifest next update: Mon 02 Mar 2026 18:01:33 +0000
Files and hashes: 1: 5gNENNsVRr6Z3Z2kDivAVxx-WQg.roa (hash: jTpmttv4j/3i6QtQ6v5DJnqHH5NP5RbZJYeJEXUUVHc=)
2: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: RlGOb19QmhEB4hoQVsRTgj4YuK2kBinI2MLYjd5n7r8=)
3: e4_jL8KhurdfWGIKdZ4NxeDCLAY.roa (hash: x4bxfJaUc0PN6qNdfp4xGbKJbKuhcjLAJVJr8mf8ECY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:10:19:3a:b8:8a:ae:60:bf:9a:d5:0c:af:34:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Mar 1 18:01:33 2026 GMT
Not After : Mar 2 18:01:33 2026 GMT
Subject: CN=72b49cb371a75ed46a6dbccdbff5660a2d4a768e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:13:d5:81:85:0e:08:be:03:a2:16:f3:99:
1d:44:8f:d5:7a:e1:53:dd:72:32:03:a8:5a:7b:f4:
b9:33:c9:76:0c:6b:07:b2:ca:46:c8:aa:79:a4:b0:
61:4f:cd:a0:c1:4d:e7:cd:83:e8:00:4f:3d:90:ce:
2d:60:ef:7e:0a:83:1f:b5:66:5c:4a:49:e6:42:9c:
2f:2d:03:ec:c7:9b:25:8a:20:48:92:87:06:41:71:
de:83:fe:33:fc:26:81:20:5d:18:85:d2:b8:69:6a:
75:bb:29:a1:ae:6a:9a:04:09:f0:9f:b5:02:b8:0c:
f6:1a:23:6e:02:74:4a:32:5c:9c:d4:01:d2:62:a7:
47:d7:bb:21:96:dc:64:32:d4:81:5e:99:57:90:0a:
2d:4c:5f:a1:5d:69:7b:75:15:34:39:89:a9:ae:4c:
57:ee:88:26:d6:2c:e3:88:55:84:6c:7e:aa:c7:a8:
d4:7c:93:f3:ce:c2:ae:b3:7c:cc:52:5d:3a:e1:63:
77:94:e6:a9:df:9a:0f:3e:fc:cf:18:7e:aa:74:bf:
94:8f:2a:6a:3c:54:12:41:a8:2c:9f:ba:3e:62:87:
79:3d:6e:37:92:0a:2f:d1:83:57:57:82:d2:4d:76:
61:a3:ef:df:35:0f:6f:be:65:12:7f:e2:ec:b0:13:
e0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B4:9C:B3:71:A7:5E:D4:6A:6D:BC:CD:BF:F5:66:0A:2D:4A:76:8E
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:11:1d:d0:45:5f:ca:83:b5:b1:75:8f:9b:10:99:59:cb:3e:
69:68:e2:88:2f:15:05:95:ea:76:6d:8d:ef:24:6e:a5:4a:bb:
ae:cc:b0:15:d8:7b:66:a8:cc:bd:68:ec:43:a4:1f:04:5d:28:
14:3f:29:44:01:e6:d6:75:00:7d:6c:73:63:34:e4:dd:68:60:
3c:c2:01:55:5e:d1:e0:ae:d3:40:9a:5a:60:46:6a:12:c1:0f:
df:01:ce:dd:af:c1:45:a7:f9:e4:23:b6:29:54:e9:f4:b6:ee:
44:61:6e:94:39:43:bc:c5:6f:44:dc:e6:e8:e9:69:8f:06:41:
cd:5f:a4:1e:29:60:8d:a3:c2:50:31:22:e7:8a:5b:95:c6:56:
51:46:0f:c2:53:e1:d3:34:57:28:90:81:d0:07:ab:c5:c7:fd:
52:92:05:0e:92:1b:3b:52:ba:08:0f:06:7a:9a:98:76:de:72:
39:1d:a5:39:9f:c7:03:f5:f8:5e:9b:66:cc:62:f0:0c:a9:2b:
92:81:0b:b6:ba:b5:69:c0:af:ed:65:8b:08:f6:09:84:7b:27:
d8:db:00:05:15:49:ef:9e:9e:54:d7:b6:d9:29:b2:57:fc:03:
bc:cf:38:16:a1:db:00:97:66:a9:a5:82:44:68:05:03:97:fe:
6d:1b:96:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:41 2026 by rpki-client