Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
File: MVipNBic8FiR-MTlmdC5iVfplyk.mft (raw, json)
Hash identifier: cUg7nZy1kLVGFJnocUob4wzmYEy8EUctG67u07diqhk=
Subject key identifier: B1:9A:92:56:D8:B2:38:54:A0:0F:21:03:57:AA:58:0A:E5:1A:31:3F
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial: 01A06E39C6458A8CE1ACC38F3068B46C8C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
Manifest number: 08F3
Signing time: Fri 04 Sep 2026 21:01:14 +0000
Manifest this update: Fri 04 Sep 2026 21:01:14 +0000
Manifest next update: Sat 05 Sep 2026 21:01:14 +0000
Files and hashes: 1: MVipNBic8FiR-MTlmdC5iVfplyk.crl (hash: Sj/UQ9TamEMW0N0CWnx96VlyOppkaPnSWk3CjfgNFIM=)
2: SoUQ5tjPimIs5vL0jQz1k3-Y_k4.roa (hash: rxeG5Q9fjMcRXTA3/mQpeB3InL8UbHM8sXy68JYVcRc=)
3: WN6nm9P1utuZWbfPP4NpFvTEUfc.roa (hash: vxFDJKyu6Fl9t1C3JXTJl+d0N1fXG6sGHHUW42DW59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:c6:45:8a:8c:e1:ac:c3:8f:30:68:b4:6c:8c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
Validity
Not Before: Sep 4 21:01:14 2026 GMT
Not After : Sep 5 21:01:14 2026 GMT
Subject: CN=b19a9256d8b23854a00f210357aa580ae51a313f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:74:62:15:f7:93:79:93:a9:75:a1:8c:9f:
05:09:60:b6:8f:b7:4e:ba:dc:fc:ca:14:af:5e:04:
14:7e:4c:8e:d9:e0:3c:c8:fb:87:92:03:b8:1a:1f:
08:03:ab:3c:76:8f:46:4f:06:f2:f6:3b:73:fe:bd:
97:32:27:42:01:95:82:bc:15:f8:06:b1:b6:12:7c:
ef:7e:58:e4:61:a1:a0:b5:d1:9d:ee:89:fb:0f:27:
2b:b0:33:28:92:cd:7b:a8:40:47:33:02:14:23:53:
c2:72:36:80:3d:7a:f4:56:a7:41:a3:8e:22:0e:ac:
82:2a:12:1d:08:6a:fa:6e:25:e9:53:68:a7:20:c7:
e2:d9:1a:9a:d6:37:a7:a9:c7:2b:58:8b:b3:1f:17:
30:f7:6d:5c:82:7a:4e:f0:c0:df:39:fb:80:00:6f:
c9:69:02:48:83:13:ab:7b:20:e1:0a:23:91:fb:2b:
a7:c2:59:91:d4:b4:cf:63:24:ee:47:a8:17:6e:fa:
0d:c8:07:04:68:f4:73:9b:37:8e:d4:cd:8f:76:6d:
6b:58:ed:d1:67:04:50:ff:59:5c:aa:8c:2d:cc:28:
cd:5c:ce:86:2a:9c:5f:54:1c:b4:45:a4:ea:c1:71:
01:31:59:80:05:5f:46:4f:e1:60:38:c5:d5:a9:81:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9A:92:56:D8:B2:38:54:A0:0F:21:03:57:AA:58:0A:E5:1A:31:3F
X509v3 Authority Key Identifier:
keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:14:b7:40:cf:29:5b:c3:97:e9:29:a2:93:30:3c:0f:68:dd:
61:e8:63:80:2a:eb:c8:75:0b:55:fc:06:d6:d3:f2:a2:5a:85:
22:d6:83:1e:aa:6d:14:a1:47:a4:13:8b:d2:85:4e:8d:ed:ff:
b3:1e:a0:b2:99:23:53:6f:02:64:a0:2c:29:6c:17:88:7d:da:
a9:67:7d:bd:63:83:e0:fc:3c:b5:16:ae:3b:87:e5:05:45:a0:
a3:6a:c9:c1:56:e1:e7:a6:66:53:b7:f8:5c:65:a4:f7:2b:01:
b3:04:be:90:c7:93:39:c5:4a:2c:97:88:ac:d3:8c:e9:23:7a:
6c:ec:9a:11:09:af:62:bf:33:f0:33:2e:84:de:de:85:60:06:
dc:f0:f8:11:53:18:68:80:da:ae:fc:bc:84:bc:bd:d8:38:73:
74:0d:9a:c0:99:1f:8c:1c:59:76:3a:eb:ef:30:ce:5a:85:5f:
ab:be:62:a8:2f:98:e8:f8:9d:7b:5e:93:6f:ad:94:87:5f:a3:
66:9c:f3:48:a5:b4:82:32:91:67:66:18:33:0d:b1:e1:58:2d:
0d:ae:dc:37:b5:f3:98:f5:64:bd:0e:3c:ef:1f:f1:fa:6c:e5:
05:7b:ee:1a:02:7d:a9:df:bc:e8:4d:30:f4:56:74:a2:32:0e:
66:0a:f8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:01:59 2026 by rpki-client