Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File: MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier: +Nte+AMbM3zEVMcgET4h9UIeFabfJQ3EwMR2oolEGhw=
Subject key identifier: 28:58:13:D4:60:5F:F8:28:D5:14:78:A7:C5:6C:D4:D1:40:20:38:05
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 019DB133BE5EC61F39ACCD3CEA4AFA639E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number: 0879
Signing time: Tue 21 Apr 2026 18:00:51 +0000
Manifest this update: Tue 21 Apr 2026 18:00:51 +0000
Manifest next update: Wed 22 Apr 2026 18:00:51 +0000
Files and hashes: 1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: q9m+v1vmXOHCDmBZLpiX+7snrsvYmL+JuYgpzhNn7gQ=)
2: bdi1rZ-Hv8XYlMzG6p4dSyqynkQ.roa (hash: 87KIQ9XId5k9Ww9xMmtV6OZLD6Wry24vd0PmuggxAkY=)
3: d6m94tH0anOa-FWzt96zJw4rWqM.roa (hash: VXa480FkV+R92FQTcYLaqarEcGnxznUTZLh1NwOBPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:33:be:5e:c6:1f:39:ac:cd:3c:ea:4a:fa:63:9e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: Apr 21 18:00:51 2026 GMT
Not After : Apr 22 18:00:51 2026 GMT
Subject: CN=285813d4605ff828d51478a7c56cd4d140203805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:97:e7:50:58:a4:4a:b4:1f:b2:23:91:32:
c5:3d:fb:af:5e:a3:df:e8:e5:e5:47:52:b2:c5:1e:
af:3a:3a:11:cf:73:f5:67:9b:67:f0:d2:55:2e:c0:
31:10:1a:42:97:fa:54:3a:cf:1f:e6:ec:b7:43:a6:
ea:9a:a9:e6:59:e8:16:4c:b9:dd:2f:85:6f:a0:d3:
4c:ce:fd:35:01:c5:02:5d:02:c3:a9:f2:de:9d:da:
d7:2e:86:0a:92:2e:8e:24:61:3c:4d:63:17:e8:05:
a6:dd:f0:d3:17:86:0a:22:a5:c1:4d:a7:f6:06:47:
58:c4:fe:4e:76:26:c4:7c:d0:96:b3:e7:48:81:3d:
e7:ae:6f:ae:d1:7d:85:10:98:62:9e:55:72:f7:19:
de:b4:91:4b:f3:87:ec:4d:af:5d:1b:93:df:fe:1f:
19:1c:c3:ed:6f:d8:a5:89:a5:a8:82:df:9e:67:7d:
c0:d7:29:2e:18:b7:28:a4:39:e4:dd:7a:47:18:a6:
50:d2:12:a4:79:fd:16:bc:d9:81:28:ba:61:ae:2f:
f2:8a:f1:35:8f:1b:cd:39:68:04:3f:14:0b:e2:6a:
86:5e:31:09:4c:d3:37:11:f4:96:fa:85:17:a9:31:
67:79:e8:51:9f:21:c7:56:02:b1:70:9c:40:95:7a:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:58:13:D4:60:5F:F8:28:D5:14:78:A7:C5:6C:D4:D1:40:20:38:05
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e7:0d:19:d8:7a:61:bf:6c:9b:57:ae:97:61:f6:67:b5:eb:
00:16:53:98:ed:3e:a3:c2:c2:9b:4e:d9:59:4b:4a:4d:89:8c:
3e:8c:a8:c8:17:31:e1:5a:9c:ab:41:50:de:58:db:a2:62:ae:
68:9f:13:b8:57:c6:43:ae:d3:9b:a2:a6:79:ab:f3:69:8c:32:
dc:60:c7:5c:3c:15:ea:6d:e4:7d:3b:47:4b:3b:9b:11:65:72:
9b:63:90:0a:f6:74:49:38:fe:6d:87:24:b3:66:89:f8:18:b1:
92:0d:58:db:d4:60:17:db:98:c1:0d:45:b6:fb:53:37:58:fa:
3a:40:c9:60:c2:2c:1b:97:99:b7:b1:3b:e6:5a:f7:57:2f:f9:
43:fd:4d:47:11:e7:e5:0c:8c:bf:2c:f2:b6:29:74:0b:46:c3:
68:a4:c5:ef:0f:0e:c7:b3:ae:bf:0b:95:0c:18:ee:5f:76:fb:
61:0b:34:cd:e9:8c:7f:4b:98:c0:34:12:7e:91:d8:82:81:52:
d9:66:1b:11:fa:07:88:f7:e8:25:df:f7:5c:2b:1a:a7:4e:11:
c3:3b:c6:ff:c8:4b:cf:db:3b:3c:63:a6:34:2c:41:a3:c5:d8:
35:e5:8b:d0:1d:47:c0:20:3d:48:01:13:49:4b:0d:b8:90:ba:
f1:6f:df:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2xM75exh85rM086kr6Y54WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZjA0N2EzNDIxMjg3MmIwYjFmZjgwNGVlMDIyYjAyYWY3
NWZmZWQwHhcNMjYwNDIxMTgwMDUxWhcNMjYwNDIyMTgwMDUxWjAzMTEwLwYDVQQD
EygyODU4MTNkNDYwNWZmODI4ZDUxNDc4YTdjNTZjZDRkMTQwMjAzODA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CmX51BYpEq0H7IjkTLFPfuvXqPf
6OXlR1KyxR6vOjoRz3P1Z5tn8NJVLsAxEBpCl/pUOs8f5uy3Q6bqmqnmWegWTLnd
L4VvoNNMzv01AcUCXQLDqfLendrXLoYKki6OJGE8TWMX6AWm3fDTF4YKIqXBTaf2
BkdYxP5OdibEfNCWs+dIgT3nrm+u0X2FEJhinlVy9xnetJFL84fsTa9dG5Pf/h8Z
HMPtb9iliaWogt+eZ33A1ykuGLcopDnk3XpHGKZQ0hKkef0WvNmBKLphri/yivE1
jxvNOWgEPxQL4mqGXjEJTNM3EfSW+oUXqTFneehRnyHHVgKxcJxAlXqhgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChYE9RgX/go1RR4p8Vs1NFAIDgFMB8GA1UdIwQY
MBaAFDLwR6NCEocrCx/4BO4CKwKvdf/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYt
N2ZhZTA2NWI2NDZhLzEvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYtN2ZhZTA2NWI2NDZh
LzEvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASucNGdh6
Yb9sm1eul2H2Z7XrABZTmO0+o8LCm07ZWUtKTYmMPoyoyBcx4Vqcq0FQ3ljbomKu
aJ8TuFfGQ67Tm6KmeavzaYwy3GDHXDwV6m3kfTtHSzubEWVym2OQCvZ0STj+bYck
s2aJ+Bixkg1Y29RgF9uYwQ1FtvtTN1j6OkDJYMIsG5eZt7E75lr3Vy/5Q/1NRxHn
5QyMvyzytil0C0bDaKTF7w8Ox7OuvwuVDBjuX3b7YQs0zemMf0uYwDQSfpHYgoFS
2WYbEfoHiPfoJd/3XCsap04RwzvG/8hLz9s7PGOmNCxBo8XYNeWL0B1HwCA9SAET
SUsNuJC68W/fXw==
-----END CERTIFICATE-----
Generated at Wed Apr 22 02:58:47 2026 by rpki-client