Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: aly+WN23g1HoDcyEQJrpDNATyzgsR5hWLKOZSXIjnuY=
Subject key identifier: 69:2D:96:8F:D3:25:A9:D4:9D:2D:06:1D:AF:E1:4C:59:0D:6B:0C:B0
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 01A0CCD9FC5DB912B13F9EB91D9DA06C194E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 17B9
Signing time: Wed 23 Sep 2026 06:00:33 +0000
Manifest this update: Wed 23 Sep 2026 06:00:33 +0000
Manifest next update: Thu 24 Sep 2026 06:00:33 +0000
Files and hashes: 1: 5gNENNsVRr6Z3Z2kDivAVxx-WQg.roa (hash: jTpmttv4j/3i6QtQ6v5DJnqHH5NP5RbZJYeJEXUUVHc=)
2: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: 8cpA/8yTxA+J2E1qqnB1iycmB19WF4hgRNtqsMc82S0=)
3: e4_jL8KhurdfWGIKdZ4NxeDCLAY.roa (hash: x4bxfJaUc0PN6qNdfp4xGbKJbKuhcjLAJVJr8mf8ECY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:fc:5d:b9:12:b1:3f:9e:b9:1d:9d:a0:6c:19:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Sep 23 06:00:33 2026 GMT
Not After : Sep 24 06:00:33 2026 GMT
Subject: CN=692d968fd325a9d49d2d061dafe14c590d6b0cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:89:68:e7:be:b0:56:34:a7:15:db:0e:4f:
96:24:26:11:ed:b6:05:e0:49:30:42:77:5c:a3:a6:
7e:67:07:5c:70:20:00:28:5c:07:a5:17:f9:96:35:
ac:a1:79:5b:d8:03:a6:ba:f5:d3:bc:b3:53:d2:41:
54:78:33:b9:0f:8b:95:0c:81:bd:13:43:9b:3c:00:
af:65:ae:ec:89:88:2c:0a:14:49:5a:3b:1f:34:8f:
09:95:f7:53:cf:97:d9:ae:e3:68:e6:ba:d3:f0:29:
17:9d:88:b0:b1:ed:6e:e2:7e:27:d2:38:5d:92:f1:
dd:20:6e:4a:75:ef:2f:37:80:17:a9:b4:30:b0:db:
b8:7a:79:04:e6:f5:44:74:f9:b2:f6:8b:59:1f:c9:
26:11:bf:d0:12:c8:ad:34:b9:58:38:0a:85:5a:33:
93:c0:83:6c:53:3a:92:bb:37:49:3b:3a:e8:ec:73:
cf:ec:62:c6:19:64:06:95:6c:95:82:b9:c2:43:42:
47:6c:0b:45:0c:ee:87:43:a3:6b:0c:8c:02:a0:36:
4b:96:9a:08:46:dd:9e:2b:c7:c2:6e:a3:ba:37:6c:
6b:a9:91:a7:df:31:8c:9c:56:30:b2:f3:01:80:4b:
1f:62:59:7c:f2:23:1b:f9:54:fd:d2:53:7c:7a:0b:
1a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2D:96:8F:D3:25:A9:D4:9D:2D:06:1D:AF:E1:4C:59:0D:6B:0C:B0
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4f:83:b3:1f:0b:f1:7f:b7:ef:92:9f:1d:14:04:b1:0c:4c:
0e:1d:86:c4:92:0e:8b:4c:ab:0f:0b:0e:10:b7:29:6d:b5:dd:
70:a5:fe:08:61:66:90:00:1d:9b:fe:fd:4b:f6:9d:bc:84:ef:
77:a5:47:bd:89:5b:51:3d:ca:7c:f2:2e:d5:32:bf:03:40:ef:
87:64:48:7f:44:05:f4:29:12:86:a7:2d:ea:46:5f:92:b3:35:
89:ee:62:95:eb:94:be:22:19:40:fe:c1:df:7f:96:77:18:58:
cf:9b:89:23:8b:a0:69:cb:1a:94:25:c0:81:4c:5f:5f:24:e9:
78:04:12:fd:bc:b1:d0:6f:15:47:8b:a4:aa:3c:d3:2f:96:62:
2b:35:03:57:92:4f:20:a6:13:43:e3:6f:6b:ad:62:29:68:a4:
13:4f:8c:f1:ff:44:ec:b6:ca:85:47:8f:22:54:0e:f7:b8:1a:
d7:88:6f:e6:48:0c:be:1d:7a:89:3a:23:b7:1d:48:c0:83:b4:
1c:1c:f6:42:c1:db:70:04:20:6c:ad:0a:8a:29:aa:57:6c:4d:
a0:9e:fe:31:fc:89:6a:e2:5e:41:83:38:d8:73:4b:19:c1:d9:
2f:05:65:51:ec:0a:80:13:7e:7a:00:7c:0d:33:f3:10:09:62:
c6:72:7a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:11:13 2026 by rpki-client