Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
File: MvacygDXMkCpbJMio-lzeQ8vYcQ.mft (raw, json)
Hash identifier: LHLadKwdXhzyEgsdrjkVU4GOXXL7bVds/ih1b/n86dQ=
Subject key identifier: 6E:B5:2C:2D:7A:29:EC:12:01:62:B7:CE:18:C1:5F:DE:AB:B3:5D:6A
Authority key identifier: 32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4
Certificate issuer: /CN=32f69cca00d73240a96c9322a3e973790f2f61c4
Certificate serial: 019D382E623B76C4CD8BC8CF3C4E547D87C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 06:00:56 +0000
Manifest this update: Sun 29 Mar 2026 06:00:56 +0000
Manifest next update: Mon 30 Mar 2026 06:00:56 +0000
Files and hashes: 1: MvacygDXMkCpbJMio-lzeQ8vYcQ.crl (hash: 368nHqpfXXEL/6VKk1DIIMKsPkBv5goWVFm4xJ2KzBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:62:3b:76:c4:cd:8b:c8:cf:3c:4e:54:7d:87:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f69cca00d73240a96c9322a3e973790f2f61c4
Validity
Not Before: Mar 29 06:00:56 2026 GMT
Not After : Mar 30 06:00:56 2026 GMT
Subject: CN=6eb52c2d7a29ec120162b7ce18c15fdeabb35d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b8:2b:e4:5c:00:3e:15:76:eb:bc:a1:e2:cb:
00:8a:0d:dd:77:a6:43:27:4b:27:fb:20:be:25:10:
b0:3f:21:0a:73:b2:54:90:ac:c5:f1:69:cb:2b:b2:
ca:09:a5:43:e8:7e:14:d7:95:d3:6f:04:b7:1d:0d:
3d:c2:df:7b:e6:f0:25:7e:e0:f2:6b:1d:5d:3e:c3:
ca:db:29:86:b4:db:3f:a0:95:18:1e:4f:ef:e7:c9:
95:69:2d:46:93:bc:17:81:cf:39:53:e1:dc:bb:9f:
c5:d9:53:b2:d0:e0:67:8a:c0:56:28:90:14:53:a4:
a3:6f:c6:06:55:09:ed:df:3f:eb:c1:5c:a4:ab:ee:
e0:7b:c4:19:94:13:c6:2a:9f:30:2c:a4:49:12:26:
0e:b6:5d:10:1b:76:db:e1:89:93:82:20:96:90:21:
96:12:de:95:3d:95:16:64:37:55:d3:e3:96:0a:74:
26:f5:ec:e4:cd:d2:11:ef:de:ac:9f:20:1b:96:ce:
b6:6e:d0:59:d9:9b:1c:6a:95:fd:41:a3:be:d3:0f:
d9:3d:34:c0:ac:83:bd:4d:50:ed:d7:9c:86:5b:e8:
f8:76:af:8a:13:d2:52:9d:8a:4d:5b:0d:2d:ea:56:
00:39:75:22:00:54:f3:ba:57:b7:67:5e:45:a1:c7:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B5:2C:2D:7A:29:EC:12:01:62:B7:CE:18:C1:5F:DE:AB:B3:5D:6A
X509v3 Authority Key Identifier:
keyid:32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5a:6b:36:2b:44:8a:e8:09:c7:11:3c:55:6e:cd:75:d0:d5:
ea:61:83:30:df:66:bf:16:54:22:26:e5:9d:22:14:2d:29:5e:
9c:7d:f5:c2:23:31:c0:1e:d3:5c:db:c7:00:4d:49:cf:80:f4:
b8:eb:05:22:c0:38:11:dd:67:48:b4:c1:82:13:be:64:3d:3e:
d5:b8:1e:af:93:c0:ce:dc:d0:43:33:78:c9:95:63:e4:bb:17:
3d:90:e2:bf:a7:7f:af:1d:a8:6a:fd:3a:51:cf:04:93:80:92:
10:6a:13:7d:9c:73:eb:95:b5:d4:2b:16:13:ce:df:fb:d1:57:
f4:ae:1d:8e:96:e5:5a:c6:64:e5:df:d8:fa:ee:39:a4:84:a9:
27:7c:8e:28:18:20:68:ce:fc:02:24:b6:9d:69:90:a6:1d:cb:
38:ff:74:90:0f:2b:af:fe:c9:6c:0a:77:38:fe:df:bd:99:fa:
5b:83:a4:07:63:86:cc:2d:b6:bb:cb:2d:0f:2f:a3:3e:69:b9:
23:ed:7e:8b:a9:4f:c2:d0:bc:eb:e6:f4:4a:4b:be:92:77:48:
49:98:5b:03:4d:25:da:5c:c2:8b:ea:ba:bf:38:37:42:92:b3:
2f:e3:48:9d:24:85:21:ad:48:63:3c:a0:ff:6c:bc:0a:a0:59:
7a:d3:b8:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LmI7dsTNi8jPPE5UfYfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZjY5Y2NhMDBkNzMyNDBhOTZjOTMyMmEzZTk3Mzc5MGYy
ZjYxYzQwHhcNMjYwMzI5MDYwMDU2WhcNMjYwMzMwMDYwMDU2WjAzMTEwLwYDVQQD
Eyg2ZWI1MmMyZDdhMjllYzEyMDE2MmI3Y2UxOGMxNWZkZWFiYjM1ZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bgr5FwAPhV267yh4ssAig3dd6ZD
J0sn+yC+JRCwPyEKc7JUkKzF8WnLK7LKCaVD6H4U15XTbwS3HQ09wt975vAlfuDy
ax1dPsPK2ymGtNs/oJUYHk/v58mVaS1Gk7wXgc85U+Hcu5/F2VOy0OBnisBWKJAU
U6Sjb8YGVQnt3z/rwVykq+7ge8QZlBPGKp8wLKRJEiYOtl0QG3bb4YmTgiCWkCGW
Et6VPZUWZDdV0+OWCnQm9ezkzdIR796snyAbls62btBZ2ZscapX9QaO+0w/ZPTTA
rIO9TVDt15yGW+j4dq+KE9JSnYpNWw0t6lYAOXUiAFTzule3Z15FocfFmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG61LC16KewSAWK3zhjBX96rs11qMB8GA1UdIwQY
MBaAFDL2nMoA1zJAqWyTIqPpc3kPL2HEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZhY3lnRFhNa0NwYkpNaW8tbHplUTh2WWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iMTk5YmQtMDNmZS00NzM0LWI3OTkt
OTg3OWQ2ODcyOGM5LzEvTXZhY3lnRFhNa0NwYkpNaW8tbHplUTh2WWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iMTk5YmQtMDNmZS00NzM0LWI3OTktOTg3OWQ2ODcyOGM5
LzEvTXZhY3lnRFhNa0NwYkpNaW8tbHplUTh2WWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlprNitE
iugJxxE8VW7NddDV6mGDMN9mvxZUIiblnSIULSlenH31wiMxwB7TXNvHAE1Jz4D0
uOsFIsA4Ed1nSLTBghO+ZD0+1bger5PAztzQQzN4yZVj5LsXPZDiv6d/rx2oav06
Uc8Ek4CSEGoTfZxz65W11CsWE87f+9FX9K4djpblWsZk5d/Y+u45pISpJ3yOKBgg
aM78AiS2nWmQph3LOP90kA8rr/7JbAp3OP7fvZn6W4OkB2OGzC22u8stDy+jPmm5
I+1+i6lPwtC86+b0Sku+kndISZhbA00l2lzCi+q6vzg3QpKzL+NInSSFIa1IYzyg
/2y8CqBZetO4fA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:36 2026 by rpki-client