Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File: MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier: tyJIiwsYoPPWvsxb61pRQTjnfXQEiMnMTotYoPzEaMQ=
Subject key identifier: BB:1D:47:84:F3:C6:8B:99:F2:C1:87:92:16:0D:88:C7:16:0C:55:F3
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 019E9CCECF22E978ABC8E9E01C25600BC228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number: 08F3
Signing time: Sat 06 Jun 2026 12:00:59 +0000
Manifest this update: Sat 06 Jun 2026 12:00:59 +0000
Manifest next update: Sun 07 Jun 2026 12:00:59 +0000
Files and hashes: 1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: ZIi76poGLJW5XxiitanTNSuBChJGFMovmL/RAVCv1ec=)
2: bdi1rZ-Hv8XYlMzG6p4dSyqynkQ.roa (hash: 87KIQ9XId5k9Ww9xMmtV6OZLD6Wry24vd0PmuggxAkY=)
3: d6m94tH0anOa-FWzt96zJw4rWqM.roa (hash: VXa480FkV+R92FQTcYLaqarEcGnxznUTZLh1NwOBPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:ce:cf:22:e9:78:ab:c8:e9:e0:1c:25:60:0b:c2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: Jun 6 12:00:59 2026 GMT
Not After : Jun 7 12:00:59 2026 GMT
Subject: CN=bb1d4784f3c68b99f2c18792160d88c7160c55f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:82:1f:95:b2:f7:4e:a0:30:d4:a0:41:a8:
17:c4:7d:97:aa:93:f0:7b:19:53:b5:81:fd:53:fa:
35:a4:55:04:d5:c4:14:13:a3:8c:83:6c:30:d5:29:
2c:2c:5b:6b:72:0e:7d:88:98:4c:6e:0f:53:1e:2c:
d7:fe:9a:4b:dc:1b:80:bc:bf:1c:12:e4:c3:6a:c3:
3b:10:a3:94:82:25:b5:97:68:13:65:e3:76:83:d6:
7c:6a:49:45:3c:29:c3:6f:5d:22:b6:1f:eb:9e:c6:
a1:2b:e9:fd:9c:fc:62:a7:6c:5b:38:aa:57:c1:d5:
79:51:8b:e2:33:b1:c8:28:e1:eb:25:fc:0b:aa:30:
35:9a:b9:b5:8f:5f:67:88:3c:48:00:7e:eb:00:57:
75:68:f3:4a:92:8c:6e:8f:f6:c5:e2:64:50:14:67:
6b:e6:47:a2:e7:95:ca:e8:7c:e6:79:ce:c1:ff:a0:
bf:81:b7:f6:1c:73:9b:fe:bd:c1:7d:b2:3e:53:9e:
75:ff:c6:8a:25:4b:06:a9:bd:5c:b0:f7:bc:fe:55:
26:e4:17:61:7b:81:b5:74:39:66:24:89:a4:16:91:
7a:0c:55:83:21:2f:be:f0:aa:54:b2:93:b8:7e:7d:
de:f1:12:48:c6:b4:61:8b:67:19:b2:f6:ba:84:b5:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1D:47:84:F3:C6:8B:99:F2:C1:87:92:16:0D:88:C7:16:0C:55:F3
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ae:d8:dd:b6:bf:0a:4c:a4:ce:c6:31:51:6b:cf:c7:3d:d7:
74:d8:28:4e:d3:62:6b:b7:ea:84:31:70:00:cf:3f:5c:7c:ba:
d8:dc:9f:10:ca:db:bf:e0:c5:26:1e:1c:bd:2f:90:ad:71:f0:
77:01:be:6a:fc:87:d3:6a:41:4d:be:da:9e:02:87:3f:b2:c3:
4e:16:1e:f6:9f:73:0d:d4:25:77:d8:a5:bb:ce:f2:34:b9:b2:
65:8e:77:58:c5:07:ed:73:9e:19:77:4d:f9:ed:18:89:28:12:
3d:f6:12:ee:83:a9:a7:21:1d:ac:cf:ea:86:c7:0c:db:16:2a:
52:61:ac:97:b0:50:46:93:da:2f:26:b1:c4:2d:0e:b0:c1:e7:
44:81:77:b4:b4:fb:fe:df:ec:b3:ed:fa:c5:0f:15:d1:3d:3a:
59:c4:cb:95:45:24:3d:b4:12:25:71:53:9d:4d:56:68:89:aa:
e2:c5:ef:3d:bd:bf:99:9a:f8:49:76:73:5e:90:4b:58:be:30:
9c:a9:99:70:d8:dc:ad:b1:9c:1a:6e:cb:4f:44:5f:bc:0b:a0:
3a:80:ce:41:d6:f4:11:2e:d1:5f:6f:53:1f:85:ee:61:05:5d:
ed:19:a9:9d:57:10:42:fe:5c:19:50:62:c6:d5:88:18:d3:38:
16:c4:bd:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6czs8i6XiryOngHCVgC8IoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZjA0N2EzNDIxMjg3MmIwYjFmZjgwNGVlMDIyYjAyYWY3
NWZmZWQwHhcNMjYwNjA2MTIwMDU5WhcNMjYwNjA3MTIwMDU5WjAzMTEwLwYDVQQD
EyhiYjFkNDc4NGYzYzY4Yjk5ZjJjMTg3OTIxNjBkODhjNzE2MGM1NWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkCCH5Wy906gMNSgQagXxH2XqpPw
exlTtYH9U/o1pFUE1cQUE6OMg2ww1SksLFtrcg59iJhMbg9THizX/ppL3BuAvL8c
EuTDasM7EKOUgiW1l2gTZeN2g9Z8aklFPCnDb10ith/rnsahK+n9nPxip2xbOKpX
wdV5UYviM7HIKOHrJfwLqjA1mrm1j19niDxIAH7rAFd1aPNKkoxuj/bF4mRQFGdr
5kei55XK6Hzmec7B/6C/gbf2HHOb/r3BfbI+U551/8aKJUsGqb1csPe8/lUm5Bdh
e4G1dDlmJImkFpF6DFWDIS++8KpUspO4fn3e8RJIxrRhi2cZsva6hLU9HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsdR4TzxouZ8sGHkhYNiMcWDFXzMB8GA1UdIwQY
MBaAFDLwR6NCEocrCx/4BO4CKwKvdf/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYt
N2ZhZTA2NWI2NDZhLzEvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYtN2ZhZTA2NWI2NDZh
LzEvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALa7Y3ba/
CkykzsYxUWvPxz3XdNgoTtNia7fqhDFwAM8/XHy62NyfEMrbv+DFJh4cvS+QrXHw
dwG+avyH02pBTb7angKHP7LDThYe9p9zDdQld9ilu87yNLmyZY53WMUH7XOeGXdN
+e0YiSgSPfYS7oOppyEdrM/qhscM2xYqUmGsl7BQRpPaLyaxxC0OsMHnRIF3tLT7
/t/ss+36xQ8V0T06WcTLlUUkPbQSJXFTnU1WaImq4sXvPb2/mZr4SXZzXpBLWL4w
nKmZcNjcrbGcGm7LT0RfvAugOoDOQdb0ES7RX29TH4XuYQVd7RmpnVcQQv5cGVBi
xtWIGNM4FsS9iA==
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:37:08 2026 by rpki-client