Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File: 00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier: k8rxal79zmTbWXZI1d0unr3P919Sg5Ukk3Wjxyprrpg=
Subject key identifier: 4D:EC:62:17:B9:4B:D6:49:4D:C7:0B:FC:D4:80:08:08:AA:13:3D:CC
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial: 019F36E0C4E0A4E9801DDAC722A8140AA53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number: 131D
Signing time: Mon 06 Jul 2026 10:02:07 +0000
Manifest this update: Mon 06 Jul 2026 10:02:07 +0000
Manifest next update: Tue 07 Jul 2026 10:02:07 +0000
Files and hashes: 1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: 6yk80JYp6UfS25FAXwjdZn9SNwGkBKjrnRacrPePQFY=)
2: 9cUez0lt6Mmw_B9XzRcaxVFdcD4.roa (hash: nOpET7s1tBcctYg3BftSbHVRYi4Bukh6zTqeOERZX48=)
3: KiGqqB6_C_ieZKJBT6I3N4MMdDE.roa (hash: rhV7ftUdpJwNEXvedltkn1lDN8x7VUAPfzQjlu6gj8U=)
4: Km329xYl0mWvscl4C7smwLfJLZM.roa (hash: y92Zjmkk3O0mYFiCM2kvamv5Zo1ZKqAX4wwIWsbkyjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 10:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:e0:c4:e0:a4:e9:80:1d:da:c7:22:a8:14:0a:a5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Validity
Not Before: Jul 6 10:02:07 2026 GMT
Not After : Jul 7 10:02:07 2026 GMT
Subject: CN=4dec6217b94bd6494dc70bfcd4800808aa133dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:c0:8c:75:2d:9e:2f:cf:5e:ed:8a:dd:22:
a3:29:72:4f:57:6c:a1:34:35:b5:ab:04:9a:bc:85:
c5:ad:f4:a1:b6:75:93:75:a5:fa:02:a4:a6:ec:f8:
74:ef:83:d0:5d:eb:db:1a:aa:5b:bd:ee:e5:05:1b:
8e:b7:cd:a7:e6:bb:6b:b7:91:cf:8a:38:bd:28:b2:
8f:b4:21:c1:68:d0:3d:b8:dc:4a:e4:a9:c7:0f:f2:
91:4b:51:36:da:74:4d:e2:98:27:90:cb:86:57:21:
91:cd:ca:74:79:ab:7e:38:b0:ea:24:53:c9:5a:09:
1a:7a:d7:fb:f4:f2:ba:e8:ea:11:5c:c2:02:21:d6:
44:ea:40:4f:a0:13:c0:1d:c9:af:a3:82:e6:f3:42:
12:3b:31:e3:db:d2:73:a6:b4:75:1b:19:35:4d:a2:
af:cc:5d:6e:ce:05:da:2f:7c:d3:c2:ac:66:8d:4a:
c8:24:53:c3:07:ea:a7:8c:d1:53:07:e4:32:16:05:
46:9e:14:ae:43:7f:2d:d9:88:54:ca:d8:cd:a4:b8:
86:ec:94:48:a7:3e:b2:44:13:66:2b:29:32:26:f1:
a4:6c:65:69:4c:ce:79:d5:db:4c:22:69:ea:68:0c:
bf:5d:59:fb:31:31:db:94:28:b0:02:40:af:30:06:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EC:62:17:B9:4B:D6:49:4D:C7:0B:FC:D4:80:08:08:AA:13:3D:CC
X509v3 Authority Key Identifier:
keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ed:02:56:7c:06:37:aa:4f:11:ef:b3:a2:63:04:0a:ee:c8:
07:20:21:36:3e:1c:75:06:b0:50:d0:4e:1d:61:9f:c6:e5:05:
b8:b0:40:e2:ed:32:cc:43:3a:c0:94:99:13:da:7f:83:27:d5:
1a:2b:01:bd:c8:19:fd:37:87:66:08:9a:d9:15:b2:ae:4f:a9:
30:c9:0c:02:21:cf:e2:62:d1:40:3a:1b:67:a6:5c:95:d3:2c:
cb:ee:7d:ec:62:db:a9:fb:5b:69:da:81:9c:d7:ba:bc:d6:f3:
ca:95:78:ae:b3:ce:70:b6:03:06:05:0c:04:26:68:c4:1f:db:
04:ac:7c:cb:7e:88:df:b2:ed:10:18:63:18:bc:2f:f7:0d:96:
c9:4f:7b:9f:3e:55:a7:2c:3e:2c:ee:3e:82:07:3d:0d:d3:16:
f4:62:94:e8:5d:44:36:c2:83:13:51:40:b5:71:5d:ec:52:65:
32:9a:b3:2b:8b:21:72:1f:88:62:16:c1:9c:94:04:e0:8d:3c:
04:bb:20:38:e2:10:64:9f:6b:1f:f4:ce:47:63:c8:2a:d1:fd:
8e:c8:3a:49:a9:b2:21:0f:95:8d:9e:64:77:b2:2f:44:eb:6b:
31:83:10:cf:64:66:e1:df:65:a8:3a:fa:a7:2d:a0:f4:e1:4b:
a3:c5:b8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:07:53 2026 by rpki-client