Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
File: MVipNBic8FiR-MTlmdC5iVfplyk.mft (raw, json)
Hash identifier: efOg8/zHrOSTf5dXLWnSCeEmNawO26RGVmiGQWxTvew=
Subject key identifier: 1F:3B:57:76:23:03:1E:3B:C5:C7:19:13:E5:DE:A8:1C:AD:F7:AE:6B
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial: 019F848CE954FC54621ACED05926C78BE62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
Manifest number: 087A
Signing time: Tue 21 Jul 2026 12:00:55 +0000
Manifest this update: Tue 21 Jul 2026 12:00:55 +0000
Manifest next update: Wed 22 Jul 2026 12:00:55 +0000
Files and hashes: 1: MVipNBic8FiR-MTlmdC5iVfplyk.crl (hash: TUTDESnkwK2na8E98rXlYdu7ySTcckfU3LWT9LSxZDs=)
2: SoUQ5tjPimIs5vL0jQz1k3-Y_k4.roa (hash: rxeG5Q9fjMcRXTA3/mQpeB3InL8UbHM8sXy68JYVcRc=)
3: WN6nm9P1utuZWbfPP4NpFvTEUfc.roa (hash: vxFDJKyu6Fl9t1C3JXTJl+d0N1fXG6sGHHUW42DW59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:e9:54:fc:54:62:1a:ce:d0:59:26:c7:8b:e6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
Validity
Not Before: Jul 21 12:00:55 2026 GMT
Not After : Jul 22 12:00:55 2026 GMT
Subject: CN=1f3b577623031e3bc5c71913e5dea81cadf7ae6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:4b:c6:f3:ca:e8:00:2b:c0:6a:b5:78:0a:
93:25:6a:3d:a2:85:d9:df:27:58:1c:82:e9:44:61:
f6:05:92:4d:e4:47:af:b6:98:02:d2:db:a9:c1:10:
f8:a8:cb:8b:8d:13:dc:59:d9:e7:73:c8:90:da:91:
af:52:b6:a1:71:a4:89:c7:2e:49:bb:07:2b:08:47:
02:ac:6e:94:2b:8b:5c:23:fe:ef:af:c6:b5:9b:3d:
5a:01:54:9f:b7:c7:71:56:72:cc:6e:1a:88:6b:e7:
dd:1d:f8:df:31:b6:0d:ef:24:75:71:e6:e3:a3:87:
7a:a5:c8:7d:94:ba:9b:98:65:14:e1:7b:39:8d:c2:
68:f2:31:5a:91:af:69:76:9e:12:dc:16:55:66:5b:
92:41:ce:e7:a9:c1:91:1c:aa:05:5e:ec:c5:01:77:
98:40:88:b3:08:18:32:1d:95:d3:ca:13:76:84:b5:
91:db:14:fc:5b:a5:fc:3c:12:07:56:75:dd:1f:49:
e6:5a:89:d6:8a:d6:f0:e8:c4:df:84:4a:ab:b1:2c:
02:e2:64:1d:81:6b:fb:65:bd:13:ab:51:de:62:62:
1c:c0:47:1b:82:97:d3:9b:47:5c:c8:1a:0b:29:0a:
9f:71:52:af:ad:41:b9:20:ff:d7:31:c1:89:ac:9a:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3B:57:76:23:03:1E:3B:C5:C7:19:13:E5:DE:A8:1C:AD:F7:AE:6B
X509v3 Authority Key Identifier:
keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:26:8f:c0:65:b8:e2:b3:6c:4d:26:2c:b0:39:36:55:5b:3d:
31:2b:38:1b:b9:7b:5c:d7:d7:6e:1b:43:c2:8b:cf:12:6a:e6:
09:fc:18:65:e9:7f:0f:50:b7:56:96:b1:7a:fc:85:f9:90:03:
58:5c:c1:d6:d4:d0:47:d8:99:85:5a:24:8d:65:fb:b9:6b:93:
7d:dd:21:3a:a7:55:8c:77:8c:bc:44:00:0c:06:83:68:99:16:
fe:1e:7c:b7:2f:48:03:d9:99:10:94:7c:ec:15:41:5c:1a:a4:
87:d8:11:51:49:e8:7c:8e:48:0c:dc:ce:e0:78:6c:ee:8e:4a:
d8:60:da:e9:6c:87:1e:5f:cd:4b:ce:82:7c:4b:7e:85:ea:75:
e6:f6:a4:52:0d:55:e9:eb:ab:64:bb:6b:dd:65:1f:27:f0:40:
1d:49:c4:2c:96:82:63:63:4d:7d:a7:97:fe:b4:0f:79:a5:c1:
26:11:48:c3:4f:0b:57:9b:71:19:5f:b5:54:c7:eb:67:19:d0:
95:e5:02:e1:8e:24:59:6f:09:03:c6:34:77:e1:e8:6b:76:2d:
5f:75:93:54:1b:a6:20:2e:4f:4c:e7:79:e4:0a:51:99:a2:19:
8c:08:39:77:fc:47:f9:f3:63:99:22:a9:b1:11:99:0b:43:47:
ef:73:a5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:26:40 2026 by rpki-client