Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
File: MVipNBic8FiR-MTlmdC5iVfplyk.mft (raw, json)
Hash identifier: mS/OSiotEIhXZCIm/nZgV0GQ0qu6GkZyEKSUOOurlWg=
Subject key identifier: 07:37:58:6C:75:70:70:55:AE:1E:65:24:EB:F3:FF:D3:32:F0:C7:9E
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial: 019DAF450C47DBCED0386497A24049B73AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
Manifest number: 0787
Signing time: Tue 21 Apr 2026 09:00:31 +0000
Manifest this update: Tue 21 Apr 2026 09:00:31 +0000
Manifest next update: Wed 22 Apr 2026 09:00:31 +0000
Files and hashes: 1: MVipNBic8FiR-MTlmdC5iVfplyk.crl (hash: 3lxVqcyYX+TVrFdryD7KNA1AoUKeOXOqs9/d2mTPnAA=)
2: SoUQ5tjPimIs5vL0jQz1k3-Y_k4.roa (hash: rxeG5Q9fjMcRXTA3/mQpeB3InL8UbHM8sXy68JYVcRc=)
3: WN6nm9P1utuZWbfPP4NpFvTEUfc.roa (hash: vxFDJKyu6Fl9t1C3JXTJl+d0N1fXG6sGHHUW42DW59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:45:0c:47:db:ce:d0:38:64:97:a2:40:49:b7:3a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
Validity
Not Before: Apr 21 09:00:31 2026 GMT
Not After : Apr 22 09:00:31 2026 GMT
Subject: CN=0737586c75707055ae1e6524ebf3ffd332f0c79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:fe:52:f4:ae:11:a3:8b:ef:2a:f4:87:ba:
16:6f:aa:80:1a:78:a4:d0:86:da:8d:61:35:85:40:
9f:5c:14:bc:b2:cd:1a:70:84:e6:17:50:96:ea:62:
b1:15:d6:87:f4:80:47:37:e3:e2:b8:0c:17:b3:99:
da:c5:94:1f:26:ad:d9:81:13:ff:3f:c1:6b:40:90:
14:66:ec:39:43:74:12:b2:48:e8:9f:2d:bc:64:84:
4d:3d:5e:7f:4e:a5:69:29:7e:4a:b6:7b:3a:b0:89:
31:33:9a:27:d2:81:16:f3:df:7a:81:49:04:09:3b:
2b:74:5e:d1:66:78:fe:46:1b:89:50:c8:d2:cf:e6:
cd:6f:ed:7b:57:60:8e:ed:5f:a1:f9:13:2d:bb:a9:
7c:d4:9f:f6:74:f5:90:14:75:39:aa:b3:61:28:ee:
a7:e7:3e:d2:12:a5:62:d0:c7:eb:73:02:b3:29:8c:
d2:e4:0a:22:e4:41:8e:11:5b:89:d5:e9:8f:9a:f2:
b1:8e:eb:3e:b8:1d:91:18:09:34:ca:dc:14:84:c7:
98:57:0e:b1:5a:2b:4a:a1:b3:d9:f1:99:0e:a0:9b:
eb:a7:0b:af:73:ba:ab:6c:da:26:03:a6:21:54:e3:
78:c8:ea:3e:d5:eb:cb:e0:3b:ae:e2:49:53:21:89:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:37:58:6C:75:70:70:55:AE:1E:65:24:EB:F3:FF:D3:32:F0:C7:9E
X509v3 Authority Key Identifier:
keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ba:af:76:e6:a9:10:54:4d:a1:d3:53:29:a4:56:87:c8:19:
34:9a:9d:13:7b:3d:0c:c5:81:99:c9:9a:f6:44:6c:45:2e:f7:
b0:c7:a0:07:31:07:be:98:c9:d7:19:7d:13:24:b9:eb:be:c2:
f5:87:46:08:57:73:d2:88:45:36:dd:ac:8d:a9:17:6b:67:89:
ff:b0:3a:a8:79:ac:f1:d1:96:3f:45:96:b4:a6:ab:ae:be:fb:
3d:40:4f:fb:5e:95:b5:31:42:bc:e0:8e:23:87:b8:e0:cd:6a:
0a:36:03:f3:00:d5:fc:6d:39:1d:d0:4c:d5:d3:cc:8d:4a:a7:
89:7c:f8:56:6d:b8:02:93:e4:a1:a6:8c:87:7b:a1:a2:24:66:
f1:69:d4:36:10:d5:9f:a9:55:75:9c:e6:27:af:83:66:ff:95:
cf:f0:13:17:9b:d0:58:97:a8:0e:88:2f:b4:0c:8e:6a:8d:2a:
e5:2f:e3:8d:04:d4:1d:39:57:60:23:f9:20:dd:9a:74:4e:df:
7f:39:46:bc:c0:98:9e:c6:6f:55:be:c8:fb:53:58:92:8d:35:
4f:05:c4:b0:c7:67:79:e5:8c:cb:b7:16:48:fa:3d:4a:9a:4b:
91:10:41:bc:07:17:7c:e5:1b:c3:22:13:88:b8:60:f1:32:e6:
33:aa:0d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:06:46 2026 by rpki-client