Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: 3BFkSuNxLYUB/5CsyOTQeqlVo8ICiAWZTSI/Oab3IDs=
Subject key identifier: 6B:2A:53:27:99:0A:3E:25:2A:8E:A6:DD:C3:9C:7A:66:93:8A:4D:A2
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 019FAD1B0E8E0BB78B8C021D3E565B5AB13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 1724
Signing time: Wed 29 Jul 2026 09:00:59 +0000
Manifest this update: Wed 29 Jul 2026 09:00:59 +0000
Manifest next update: Thu 30 Jul 2026 09:00:59 +0000
Files and hashes: 1: 5gNENNsVRr6Z3Z2kDivAVxx-WQg.roa (hash: jTpmttv4j/3i6QtQ6v5DJnqHH5NP5RbZJYeJEXUUVHc=)
2: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: VMSNOfAn9ihYV9WHkGwxEQEdt/Rz5nJcY25MC1uiEbM=)
3: e4_jL8KhurdfWGIKdZ4NxeDCLAY.roa (hash: x4bxfJaUc0PN6qNdfp4xGbKJbKuhcjLAJVJr8mf8ECY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:0e:8e:0b:b7:8b:8c:02:1d:3e:56:5b:5a:b1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Jul 29 09:00:59 2026 GMT
Not After : Jul 30 09:00:59 2026 GMT
Subject: CN=6b2a5327990a3e252a8ea6ddc39c7a66938a4da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:88:82:b2:bc:a2:51:42:fa:9b:23:5b:e7:
fb:8a:bc:f0:74:7d:1d:fd:57:1c:7e:22:e8:90:7c:
ea:a2:c0:91:6b:f6:c8:05:ff:27:d4:dc:2e:47:54:
ae:d1:3a:57:17:c7:06:be:01:d4:f8:6d:c0:2c:4f:
c2:78:08:83:9e:51:be:79:53:db:8e:2a:59:5c:8f:
e5:de:29:40:fd:58:da:59:b2:99:07:b5:6d:a8:4a:
18:14:ed:b6:3d:fa:cb:34:28:84:04:52:09:66:52:
91:3d:65:5f:85:29:a3:2e:11:a8:1c:17:d0:4b:94:
e5:9b:94:f8:52:a0:20:8a:97:b5:df:71:69:ee:2c:
b1:71:04:b5:f5:1a:42:6e:1f:15:54:38:66:ef:fb:
e7:7c:b6:bc:d1:72:91:44:a7:9f:f4:ad:7d:cb:6f:
2a:a6:01:40:72:b9:3e:4d:03:01:e5:b7:e8:63:89:
ed:65:5a:0d:60:84:98:1c:da:5b:c3:f4:b9:56:62:
95:f8:d5:2e:00:cb:3e:53:4f:f6:e1:87:69:d4:06:
e8:7d:b2:2a:f1:4b:17:7a:69:b5:f5:d4:fb:9d:e4:
9d:5f:07:c9:e7:02:9d:45:6c:1b:4d:cb:b0:37:2b:
e2:d5:b4:79:89:72:fe:46:07:1b:77:90:89:73:24:
6c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2A:53:27:99:0A:3E:25:2A:8E:A6:DD:C3:9C:7A:66:93:8A:4D:A2
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:43:fa:c5:e8:e7:de:c7:1d:fb:74:ee:e9:c9:97:11:68:dd:
25:e7:c6:6c:a1:74:16:0b:7e:cb:31:c0:9d:f1:9e:9e:e9:4a:
76:8d:81:9c:f9:fb:ad:f8:9f:3c:3f:ba:04:90:ae:1a:29:d4:
93:b6:d1:1a:75:58:92:ae:14:10:40:af:34:38:10:9b:ee:44:
76:1a:44:37:7d:41:fe:11:bf:5b:da:ab:b6:c0:4f:9a:e6:b3:
f0:0e:cf:f5:af:68:e4:18:11:f1:78:87:c8:f7:33:2d:c2:16:
02:88:9d:ac:b7:ea:51:d1:4a:4e:7d:40:60:38:48:22:e8:7b:
8a:6e:ed:98:5f:49:c9:d4:8a:89:14:41:18:91:99:16:98:33:
1a:0a:d3:fa:0b:51:e7:0e:42:4c:21:72:31:33:0d:d4:6b:6c:
31:7f:5a:69:bc:51:04:92:89:e4:3a:ca:53:90:6f:c7:58:db:
41:81:fc:15:9c:17:b3:11:80:22:78:4c:b4:2e:06:8f:37:da:
7f:83:e3:be:06:f4:90:12:16:07:8d:4f:d2:fc:88:61:ec:98:
38:ee:a9:9c:70:54:65:9a:02:04:6f:63:82:e9:9c:6e:d9:30:
4c:98:b2:86:77:9d:d4:19:48:59:51:54:25:93:b3:f3:f3:f4:
1e:9b:26:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGw6OC7eLjAIdPlZbWrE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZmFjZjVkMDI3MzAyNjhkM2IxZTc2Yzk2YjBmODU4OGQ5
OThiNGYwHhcNMjYwNzI5MDkwMDU5WhcNMjYwNzMwMDkwMDU5WjAzMTEwLwYDVQQD
Eyg2YjJhNTMyNzk5MGEzZTI1MmE4ZWE2ZGRjMzljN2E2NjkzOGE0ZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupOIgrK8olFC+psjW+f7irzwdH0d
/VccfiLokHzqosCRa/bIBf8n1NwuR1Su0TpXF8cGvgHU+G3ALE/CeAiDnlG+eVPb
jipZXI/l3ilA/VjaWbKZB7VtqEoYFO22PfrLNCiEBFIJZlKRPWVfhSmjLhGoHBfQ
S5Tlm5T4UqAgipe133Fp7iyxcQS19RpCbh8VVDhm7/vnfLa80XKRRKef9K19y28q
pgFAcrk+TQMB5bfoY4ntZVoNYISYHNpbw/S5VmKV+NUuAMs+U0/24Ydp1AbofbIq
8UsXemm19dT7neSdXwfJ5wKdRWwbTcuwNyvi1bR5iXL+Rgcbd5CJcyRsoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsqUyeZCj4lKo6m3cOcemaTik2iMB8GA1UdIwQY
MBaAFDL6z10CcwJo07HnbJaw+FiNmYtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAt
OWU0ZTQ2ZjYwYTY4LzEvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAtOWU0ZTQ2ZjYwYTY4
LzEvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUP6xejn
3scd+3Tu6cmXEWjdJefGbKF0Fgt+yzHAnfGenulKdo2BnPn7rfifPD+6BJCuGinU
k7bRGnVYkq4UEECvNDgQm+5EdhpEN31B/hG/W9qrtsBPmuaz8A7P9a9o5BgR8XiH
yPczLcIWAoidrLfqUdFKTn1AYDhIIuh7im7tmF9JydSKiRRBGJGZFpgzGgrT+gtR
5w5CTCFyMTMN1GtsMX9aabxRBJKJ5DrKU5Bvx1jbQYH8FZwXsxGAInhMtC4Gjzfa
f4Pjvgb0kBIWB41P0vyIYeyYOO6pnHBUZZoCBG9jgumcbtkwTJiyhned1BlIWVFU
JZOz8/P0Hpsm8A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:49:43 2026 by rpki-client