Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
File: MvG4X6XeV6X-Ej3jqQXzyzariv4.mft (raw, json)
Hash identifier: H2OS4bgI2yqDNC2D542VUVN8vIEgrKX2rPiP4zI9ZBg=
Subject key identifier: 16:D5:20:63:F5:44:85:11:E1:9F:42:83:03:2C:2A:A7:E9:13:81:59
Authority key identifier: 32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
Certificate issuer: /CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Certificate serial: 019CABD92910C053ECBFDDEAB71F034935A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
Manifest number: 075A
Signing time: Mon 02 Mar 2026 00:01:01 +0000
Manifest this update: Mon 02 Mar 2026 00:01:01 +0000
Manifest next update: Tue 03 Mar 2026 00:01:01 +0000
Files and hashes: 1: MvG4X6XeV6X-Ej3jqQXzyzariv4.crl (hash: gcrRf6gVJZIqnxmB1gxQzaM889Jktdb3DF/DPwcT1PQ=)
2: g299YTC_iLV4aJ1WAKAFuHKoAG8.roa (hash: RjwHc0a+p7SBX5dpTWoPHb71J5KbWW0USQUJuMMvXuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:29:10:c0:53:ec:bf:dd:ea:b7:1f:03:49:35:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Validity
Not Before: Mar 2 00:01:01 2026 GMT
Not After : Mar 3 00:01:01 2026 GMT
Subject: CN=16d52063f5448511e19f4283032c2aa7e9138159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:a1:16:b2:f5:46:01:3f:bb:7a:59:50:75:
65:2c:23:ba:4b:1f:75:0d:d1:9b:83:00:dc:2a:d9:
37:77:c6:e8:ee:24:6d:3c:e8:2d:10:1a:a1:a9:15:
e5:20:3a:9f:3e:47:95:4d:fb:c9:3c:14:b6:03:be:
50:e6:3b:44:89:cc:91:56:e8:f7:a8:71:9c:28:3d:
e1:78:a7:d1:39:07:9f:db:d4:16:b8:37:c2:f7:81:
93:d4:20:8a:98:19:f4:87:df:73:52:f6:88:45:60:
90:7f:23:0c:43:5b:4a:df:0e:74:dc:2f:ba:6f:3c:
23:3e:8a:04:03:c9:09:9c:b4:38:84:5c:03:04:77:
a9:07:fb:75:f0:04:b1:b8:13:6f:11:2d:ff:46:e9:
20:ab:66:1f:eb:79:11:5e:10:d7:f5:85:72:99:04:
67:ee:e4:35:0c:64:8a:e3:2c:ff:ac:09:94:13:92:
21:13:89:5b:b7:9a:ec:72:0c:36:32:7e:25:79:0c:
43:10:ba:bb:39:77:2b:ff:c8:c6:de:65:3e:ed:9e:
ec:dc:b9:c9:5a:1a:f7:03:28:46:bb:a7:ed:c9:e1:
98:68:50:a7:fe:6d:8e:4c:37:0e:1f:56:53:09:65:
93:65:45:6c:30:36:55:1c:0a:5b:5d:15:70:f2:c5:
cb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D5:20:63:F5:44:85:11:E1:9F:42:83:03:2C:2A:A7:E9:13:81:59
X509v3 Authority Key Identifier:
keyid:32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0c:2e:ae:71:bc:44:85:da:6c:b1:4c:85:1c:f0:3f:8a:2e:
2a:8c:64:d4:fe:e6:a1:31:0b:ef:0b:62:81:92:e3:92:0f:16:
57:62:25:fb:8e:86:7d:24:de:8a:20:0e:3b:40:b1:85:10:ab:
4a:be:2a:4f:4e:5e:85:a7:43:08:53:be:d9:37:42:fd:ef:04:
8a:5e:be:64:db:50:c2:cb:61:ad:65:7b:6e:6b:1e:60:10:8f:
b0:a4:ba:39:c1:e8:93:7e:0d:fa:db:88:29:3e:47:c4:ed:bc:
a1:82:84:b3:b3:77:52:74:55:50:c8:b6:48:89:61:f0:3e:cb:
47:16:19:bd:00:2c:31:e5:fa:81:a9:fd:fa:d9:14:43:32:6b:
e7:73:93:b9:9b:a4:65:10:75:97:f7:d9:83:66:e1:fb:9f:2c:
0a:28:3b:70:f4:62:cb:b2:79:b9:3a:b9:8d:5a:31:57:19:85:
83:fd:11:fc:0f:a4:a3:d0:bf:e2:9b:16:5d:f6:e0:97:7a:85:
6d:05:7c:62:d7:4d:21:ad:c5:4a:ea:c4:df:9a:a2:1a:63:d3:
c5:5f:39:43:43:af:eb:aa:03:e8:56:7e:a4:b8:3b:28:10:c4:
41:a8:ee:17:c8:02:05:a8:37:62:06:a0:a8:f8:86:9e:de:84:
9a:ef:da:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:41 2026 by rpki-client