Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
File: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft (raw, json)
Hash identifier: fkllrCtt4WPTeZGulFbyESxdDTLR8XoU+QTAHPTvMfM=
Subject key identifier: 85:23:59:4C:46:AA:20:67:4C:43:45:90:1E:15:54:9B:24:47:45:67
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial: 019CF504BFCD221ED149C1FD62CB17945D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
Manifest number: 09D1
Signing time: Mon 16 Mar 2026 05:00:54 +0000
Manifest this update: Mon 16 Mar 2026 05:00:54 +0000
Manifest next update: Tue 17 Mar 2026 05:00:54 +0000
Files and hashes: 1: 05HbW4vWO71TuXnlLUIhotjCjQA.roa (hash: wd8NR6jnQPtSkv4WqVTGTX5hWiMAv5m+dMvP8o7c5l8=)
2: GB3NFSp5PGT_22uM3aHhVVz0NOI.asa (hash: riAwsj8thI/YEdA1IIz5l7mENZ2/CQiAFbdBtgwfc6s=)
3: Ju3RYBGHfTVJ0ig9g8xu4WdMw30.roa (hash: 4oJ1sds8f+aiGxncxPG+ThQtMKqUYAuJ1K3qDV4TzDE=)
4: MyskQcDy1iD50lHwlkpWk2pfgJo.asa (hash: w0AAYte+BFKp1fuUqRZUMAG2wD4yxWoVL8PbWMANMLk=)
5: f2WeliHigZNRsPyfnuBo4tGwDZ0.roa (hash: 5slWSGWLG6ATTnZtrmt7Zpoe6VhaQcLSQgvXuDKX6jQ=)
6: j8BCdYiQ_67ATYFHPKfffD1u2xo.roa (hash: GLAbtmkKsyJcTcB7QC4FgMb+NJZzC1QoILdu2duEs9o=)
7: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl (hash: EhzGoECLm9aVVp136hsVAC4Rb5wJo/INVfvWyI/p1ng=)
8: xQPEHMR54qpU7rtPLXUkM_1Hx94.roa (hash: X3FNnLjkWD8kAWDLkX6vbg0ozoLMqd9Yva8zbEk23n4=)
9: zKkJ8cE4zPKRxtqXHT19mxBaT9Q.roa (hash: uRT/X8Hvl3ZU07bilVhDl7B14HKulQ5Y0la+tuqFss4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:04:bf:cd:22:1e:d1:49:c1:fd:62:cb:17:94:5d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
Validity
Not Before: Mar 16 05:00:54 2026 GMT
Not After : Mar 17 05:00:54 2026 GMT
Subject: CN=8523594c46aa20674c4345901e15549b24474567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:e8:1c:21:b8:34:84:34:b0:d5:82:60:c0:
24:a0:ce:8c:52:92:d8:3a:0a:62:70:ab:eb:45:df:
24:b4:65:8e:ee:fd:36:f1:90:eb:99:0f:b7:c3:5e:
59:70:4f:8f:94:23:a7:6d:c0:11:77:8d:4b:5e:55:
c9:8a:fc:d6:54:88:25:57:88:8a:d9:76:5f:bc:78:
cd:b1:d6:ed:22:69:0f:54:c8:54:d6:4e:9b:47:e5:
89:1a:e8:c6:61:72:c9:be:7d:6e:bd:e3:85:b4:0d:
da:82:a3:47:d9:43:56:b4:e9:c6:e8:2d:d4:c2:b3:
fa:b2:de:24:6d:a7:f1:21:fb:6d:5e:ae:76:24:af:
ad:53:35:5a:b5:58:76:b0:b0:57:b1:80:92:b8:ea:
25:4e:d1:9a:aa:d6:b6:78:53:31:d5:28:95:ac:62:
05:5c:85:55:d3:03:2e:4f:10:77:b5:eb:5d:4a:02:
09:e9:ae:43:dc:1a:f4:a1:b3:89:dc:ed:8c:7b:cd:
88:11:43:ed:23:3a:53:dc:62:2d:bb:75:d8:ed:0a:
78:fb:58:be:85:37:e4:e1:ae:3f:d6:b0:50:d7:c2:
27:a2:c7:d1:b3:8d:c2:d9:e9:e6:b1:44:32:ea:e8:
2d:6b:1f:df:4b:df:67:c0:c6:b7:7e:b6:88:cc:bc:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:23:59:4C:46:AA:20:67:4C:43:45:90:1E:15:54:9B:24:47:45:67
X509v3 Authority Key Identifier:
keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2b:f9:18:22:9c:21:6b:22:8c:c6:09:25:27:89:5d:ac:f5:
4c:61:c4:1e:dd:2c:d4:aa:f6:52:c9:66:e2:fc:bf:32:d3:76:
12:eb:d3:db:13:ae:e2:2f:66:25:8a:90:19:d4:c2:65:ae:19:
37:38:4e:9e:3b:d5:c1:6d:12:fd:52:e7:5d:e8:26:e3:e0:3f:
95:20:09:7c:7b:a2:58:5d:28:a8:e0:e1:86:9d:77:8b:aa:a5:
95:4f:b9:74:71:88:ac:b4:ad:a7:1d:83:46:6b:eb:16:8d:8d:
78:dd:5f:e1:99:46:d9:54:84:5d:f6:a2:6c:0e:15:fb:6e:84:
2c:d5:67:37:c1:f5:66:7a:ac:00:ab:20:65:c6:42:aa:8e:e7:
18:12:cd:3f:9e:80:8d:56:6a:98:af:ee:aa:84:e1:20:c0:12:
a0:fa:17:8f:7f:62:af:2b:76:e0:4c:e4:8c:5a:fd:09:c3:1a:
c2:a5:99:93:05:c9:a1:b5:bf:b0:18:61:ed:20:de:5e:77:3a:
c6:df:8d:cf:c8:6c:6b:8a:5e:56:48:f4:c6:b1:2d:f4:88:89:
c2:8c:55:78:24:c0:4e:21:81:df:29:c6:03:ec:90:55:b1:55:
c1:75:b0:89:39:ae:1a:26:ec:e0:d6:46:e2:dc:80:34:6e:68:
42:d2:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:04:08 2026 by rpki-client