Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File: 00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier: 4t/3VdI9zdhdfH5R1k3hoDFzb3AoKaitpcEWTx9sFOE=
Subject key identifier: 4E:C0:F4:48:ED:0C:44:71:13:10:C7:BE:FE:5F:97:C3:0D:9B:97:67
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial: 019D65749E8F752A1A3C036ED277E385622A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number: 122C
Signing time: Tue 07 Apr 2026 01:00:34 +0000
Manifest this update: Tue 07 Apr 2026 01:00:34 +0000
Manifest next update: Wed 08 Apr 2026 01:00:34 +0000
Files and hashes: 1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: 552vg0CuoAsQ6hOi4LLw/p1DW2kFbKUD/8prM+vUnkE=)
2: 9cUez0lt6Mmw_B9XzRcaxVFdcD4.roa (hash: nOpET7s1tBcctYg3BftSbHVRYi4Bukh6zTqeOERZX48=)
3: KiGqqB6_C_ieZKJBT6I3N4MMdDE.roa (hash: rhV7ftUdpJwNEXvedltkn1lDN8x7VUAPfzQjlu6gj8U=)
4: Km329xYl0mWvscl4C7smwLfJLZM.roa (hash: y92Zjmkk3O0mYFiCM2kvamv5Zo1ZKqAX4wwIWsbkyjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:65:74:9e:8f:75:2a:1a:3c:03:6e:d2:77:e3:85:62:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Validity
Not Before: Apr 7 01:00:34 2026 GMT
Not After : Apr 8 01:00:34 2026 GMT
Subject: CN=4ec0f448ed0c44711310c7befe5f97c30d9b9767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:de:40:e7:76:27:b5:fd:a5:d9:2c:24:e7:
52:67:38:96:2c:e3:3b:fd:bb:13:89:4f:b0:ad:b8:
db:2f:3a:25:f0:43:1c:d4:50:34:98:74:06:8b:8b:
91:7f:92:18:ee:4c:1e:a0:7f:a6:dd:7c:11:f0:a5:
1d:0e:88:d8:7f:12:cb:07:c7:d6:1b:3f:7a:a2:b6:
d9:a9:7b:16:a4:ac:70:17:62:44:55:99:c0:69:18:
34:55:cb:b0:b8:4f:cc:8e:71:e1:93:fc:76:eb:6a:
2a:93:99:fa:ff:2a:7c:d1:8c:5e:47:1a:20:66:61:
5e:3b:89:8a:c9:47:22:01:66:26:f4:6d:d0:aa:fa:
ce:28:f5:0c:00:66:3d:e3:dc:31:ec:59:0c:06:22:
96:2a:ae:9f:2f:81:1b:fe:5b:09:2b:5f:df:8e:a8:
92:48:36:c9:f4:47:04:33:67:f4:30:7c:b3:c5:c9:
a4:39:34:00:25:10:c0:a3:83:0a:1e:55:cc:2b:4f:
fd:db:70:3a:2e:e4:be:25:cc:2f:3c:5b:f3:6e:97:
b0:40:33:52:8e:bb:6d:80:f9:b8:74:d6:7a:d9:1c:
f6:bb:3d:21:07:0a:23:d3:ee:80:27:aa:ad:43:9c:
64:68:03:69:ec:7c:55:e0:11:e2:1b:f2:3c:a5:ed:
c9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C0:F4:48:ED:0C:44:71:13:10:C7:BE:FE:5F:97:C3:0D:9B:97:67
X509v3 Authority Key Identifier:
keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:35:26:71:7e:8c:95:e1:4b:81:53:6f:a2:2a:b5:16:0a:f6:
e3:66:0f:7b:9d:a8:98:1f:25:ca:10:70:a7:9d:8b:67:ef:3d:
cf:25:1c:95:92:38:6d:61:82:b7:0d:0b:75:4f:d7:8b:1a:2d:
05:a6:8d:05:05:f6:33:3e:11:05:64:06:1f:4a:03:6b:3b:05:
cc:97:d0:8e:f5:51:73:37:75:2a:29:f7:6f:2a:64:d4:23:26:
ba:e4:23:76:14:2c:4a:f1:39:a9:d4:21:05:31:9a:89:bd:8e:
4d:53:94:8e:a4:4a:82:00:1d:d4:ae:a0:73:29:d9:7b:49:06:
08:42:15:41:33:23:ac:b3:1b:07:85:d8:d1:13:2d:84:f7:a1:
6b:f7:0c:0d:81:80:b8:63:b7:e9:81:c2:f4:40:82:06:b7:b3:
8e:e4:59:ea:3f:01:7a:91:65:0f:53:d1:9e:25:26:b6:d8:78:
d2:b5:c0:60:13:e8:09:49:df:6f:bd:72:c3:e6:b9:5a:aa:e8:
c0:03:82:8a:21:c6:85:c5:21:b7:df:c7:2a:f3:d7:11:56:60:
d5:4d:52:44:62:75:18:66:13:fe:25:5b:f2:b5:1e:4b:28:b5:
5f:21:a6:9c:b0:3e:0c:8d:c1:d2:99:29:0e:f0:c5:cb:94:f0:
c6:d2:7d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:08:17 2026 by rpki-client