Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
File: MxvOLugG6TYhES29YYU293X0T7o.mft (raw, json)
Hash identifier: gBEMmtnzbHKvZ9w/W3fZQVq62YI/6bsoCNBcuVjCoog=
Subject key identifier: C3:C6:2A:4E:46:37:4E:CE:0E:41:AF:B7:F9:14:B3:B9:82:32:D6:53
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 01A166471584963173B74D7AFFA5535C6F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
Manifest number: 1AD2
Signing time: Fri 23 Oct 2026 01:01:36 +0000
Manifest this update: Fri 23 Oct 2026 01:01:36 +0000
Manifest next update: Sat 24 Oct 2026 01:01:36 +0000
Files and hashes: 1: MxvOLugG6TYhES29YYU293X0T7o.crl (hash: VeHTXMcxHOvqg0akpIpiw9e3cXpTNxRRY9oV+YNPFEk=)
2: _nsHDGsxSW2xMTXJcSwiD-J3Jl4.roa (hash: mF6gTp6ZB9piQiXwLO2UJXYdCQJiTLfpyOjrPM5peb0=)
3: gU4rt6UfX908kKCYCroARSroPkQ.roa (hash: j63IJzIDAdlriUlQV4IJaH+lIR+tUTSbCwMefhCYMjM=)
4: lOIMCulf3GuUI-StD1Yh4jlDqeM.roa (hash: 4dwpJqsJk7jN6O3n0GStqU7QEqIZidtJe8tQJ1wjz+Y=)
5: x5dZH_p1jpQNmkzAGadQtc_NwNA.roa (hash: j7kE+HBT1mrUTqWPhu4yo406PYqylXV+5uj+qLftudY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:47:15:84:96:31:73:b7:4d:7a:ff:a5:53:5c:6f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Oct 23 01:01:36 2026 GMT
Not After : Oct 24 01:01:36 2026 GMT
Subject: CN=c3c62a4e46374ece0e41afb7f914b3b98232d653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:58:96:b4:35:6e:f3:58:55:df:a0:c1:e9:
e2:e6:1a:cb:5a:d4:6f:1e:05:3e:c2:fc:ab:11:fe:
60:49:e6:2b:56:6a:08:f5:23:e8:71:c1:9c:9b:8e:
d0:73:ab:99:ad:5e:4c:0e:8b:79:41:72:aa:76:a1:
cd:64:62:0e:d5:75:02:7e:ea:9a:1d:6f:98:0d:ce:
e5:a5:77:40:4c:1e:11:de:a0:a0:64:1a:bf:dd:e8:
f7:24:10:a5:82:2e:a5:62:ad:26:9c:60:ea:65:f9:
0f:96:a7:0b:1f:0b:9d:8b:a8:5e:46:97:4b:67:3a:
d1:8e:36:13:29:20:66:0c:8f:6c:9e:7d:ac:2d:77:
d2:2f:10:b1:bd:d3:42:26:a5:51:e2:5d:f2:92:7f:
4d:bd:ff:32:cf:e5:3e:43:49:95:49:cd:bf:56:13:
12:bc:13:03:bf:f6:ab:f9:9e:05:97:84:63:20:06:
5d:1c:76:fe:6c:02:a1:55:7b:9e:32:d2:25:ad:fc:
e4:89:53:62:ce:49:3f:d9:5e:cf:41:70:8f:9a:1a:
c0:59:c3:65:81:d7:df:4c:7f:64:8c:a8:76:ba:cf:
70:64:31:87:fe:f3:08:17:f1:16:ad:8a:fd:74:a7:
4b:33:63:d2:a8:96:8e:c4:ea:b4:bc:c1:94:3d:9f:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C6:2A:4E:46:37:4E:CE:0E:41:AF:B7:F9:14:B3:B9:82:32:D6:53
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:47:fb:a0:66:a0:cc:80:16:72:f6:b7:a5:0f:79:52:68:1f:
1c:84:36:1c:e9:40:82:4a:ab:9f:fc:a3:8a:17:1a:e8:01:d9:
f1:78:5f:86:e2:c6:36:24:ae:11:c3:b0:5b:45:1c:e3:1c:b1:
74:6e:03:43:fc:a7:cb:55:8b:1c:a7:10:19:2c:b7:23:d9:2f:
c0:a5:06:4e:d4:ad:c1:58:0d:13:cf:7f:c8:aa:59:7d:04:c5:
b3:25:22:7a:a9:d3:97:d9:a1:74:6d:6c:52:1a:98:bf:39:92:
9b:c3:bf:2e:f1:77:d9:d6:e3:ab:08:3a:4d:8b:d2:cc:e5:16:
b3:31:be:2b:20:81:dd:2c:33:38:51:20:48:23:ac:54:59:a7:
94:c7:c1:e7:ec:41:09:a1:ec:0b:1f:5d:57:02:be:8c:09:48:
43:59:85:b1:aa:30:5e:36:b1:dd:40:c9:01:08:17:ce:ec:6d:
dc:b3:f4:4a:a8:70:95:b8:dc:84:29:c7:bb:e5:bd:6a:59:dc:
9a:ef:83:85:a9:26:2b:bd:6a:7c:a5:fc:44:85:62:40:e4:86:
d5:06:9d:0d:02:42:e1:2c:2a:b7:4f:ec:4f:6b:e5:da:bd:db:
35:fb:f0:d7:d8:90:38:ad:47:8c:cb:4e:52:97:ea:e6:ea:46:
a4:d5:4e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 13:28:40 2026 by rpki-client