Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
File: MvG4X6XeV6X-Ej3jqQXzyzariv4.mft (raw, json)
Hash identifier: c/aUnHQMl/yNViFi7ExcE316IK5+2gqQpiPWdjuw7xM=
Subject key identifier: 62:D3:09:23:CD:6F:4F:A4:9E:82:EF:11:66:35:CE:01:F0:0E:97:58
Authority key identifier: 32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
Certificate issuer: /CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Certificate serial: 019D9B512274D8F02B07D8725AF48C0FDD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
Manifest number: 07D6
Signing time: Fri 17 Apr 2026 12:01:18 +0000
Manifest this update: Fri 17 Apr 2026 12:01:18 +0000
Manifest next update: Sat 18 Apr 2026 12:01:18 +0000
Files and hashes: 1: MvG4X6XeV6X-Ej3jqQXzyzariv4.crl (hash: QacKX/ReOi/erB6I8jsp+eUGdUovqXRAkoiCpQvOW/4=)
2: g299YTC_iLV4aJ1WAKAFuHKoAG8.roa (hash: RjwHc0a+p7SBX5dpTWoPHb71J5KbWW0USQUJuMMvXuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:22:74:d8:f0:2b:07:d8:72:5a:f4:8c:0f:dd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Validity
Not Before: Apr 17 12:01:18 2026 GMT
Not After : Apr 18 12:01:18 2026 GMT
Subject: CN=62d30923cd6f4fa49e82ef116635ce01f00e9758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:34:17:84:dd:9e:16:f6:fc:ad:64:fd:e2:39:
db:29:e1:15:7c:7f:9b:eb:c7:06:c3:47:47:f3:ee:
fc:49:01:09:01:38:ff:11:bc:0d:66:ff:5d:00:97:
aa:ff:df:93:ac:a3:10:bc:33:b0:0b:aa:77:01:9a:
ee:0f:7b:3e:30:3f:ce:6a:df:d1:6f:46:c3:d8:8d:
6b:02:aa:98:3a:cb:37:a5:b5:9c:13:0f:0c:56:e9:
2c:01:fc:82:ba:35:f5:25:50:d7:81:2a:93:02:91:
f5:04:da:d9:f0:4d:7a:ab:02:55:6f:3b:8e:44:62:
98:27:f6:a0:00:a6:2f:16:6f:f9:1d:dc:dc:bf:2e:
a1:d1:34:89:1e:b4:c8:11:b1:a0:84:06:93:c3:f0:
ad:a1:dd:0d:47:44:24:8c:19:58:49:e9:a8:7b:3e:
75:ad:62:2f:c7:bf:31:77:37:a4:a8:25:10:a0:e5:
31:40:9e:bd:e1:1e:23:a3:25:7d:88:5c:56:f3:ac:
dc:af:e8:19:76:53:67:5c:1b:d3:da:3d:c4:e6:3a:
be:4a:26:90:49:bb:c7:f3:4b:36:21:8e:f9:e6:92:
74:6d:9a:4b:85:de:9f:4f:da:50:5a:17:4d:3d:53:
8e:6b:ab:22:5d:b0:ae:66:c2:2e:79:07:e8:92:de:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D3:09:23:CD:6F:4F:A4:9E:82:EF:11:66:35:CE:01:F0:0E:97:58
X509v3 Authority Key Identifier:
keyid:32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b7:e6:3c:a3:df:4d:c8:1d:33:83:b8:0e:06:a6:74:69:a5:
ee:2e:bc:77:26:5f:b9:90:2a:25:9b:21:2a:9a:67:5d:53:72:
ad:b1:b2:d9:84:ac:d6:09:69:1d:1e:b4:7f:15:62:8d:67:aa:
17:6e:a2:56:21:fb:59:e7:00:65:cd:83:d8:da:6a:42:7c:83:
5f:36:d1:cc:9a:a1:98:8b:49:0c:77:60:fd:cd:8e:53:e2:b3:
6a:48:d2:0c:cb:34:17:6f:5b:f0:28:80:80:30:e4:62:3d:0b:
d2:7d:f8:7d:f4:9f:01:80:59:b5:02:23:62:3a:cb:68:e5:65:
09:56:dc:be:83:99:9e:72:59:a0:c1:72:30:86:fa:da:61:93:
88:d2:92:8b:db:e1:c9:cf:4c:7e:c3:bd:dc:9b:18:cd:6d:73:
ae:47:37:b1:ec:52:36:40:58:b3:4e:47:aa:d2:f6:8a:8d:cc:
ee:53:ae:eb:32:da:17:00:55:a4:a9:e9:4f:93:ff:1a:d8:6f:
c0:be:78:01:ac:69:2c:d4:8d:88:c4:d1:91:81:f3:ae:13:e5:
0c:f0:bc:55:e2:ac:bb:78:78:06:08:50:6b:a1:69:7c:bd:af:
cc:81:e4:a6:d5:5a:f3:12:0d:a3:80:43:47:51:ce:8a:60:7c:
bd:71:45:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:03:01 2026 by rpki-client