Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
File: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft (raw, json)
Hash identifier: /K926SRvcoMwZks1oI+7HAn7qgy8AQ4gnz5jSGJooWs=
Subject key identifier: 9F:F9:05:15:6A:E7:05:FC:92:EB:66:DF:EC:82:24:D5:A0:ED:B0:04
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial: 019DDCC35B1BF8A5EA938ADA2FDCD28A1899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
Manifest number: 0A49
Signing time: Thu 30 Apr 2026 05:01:23 +0000
Manifest this update: Thu 30 Apr 2026 05:01:23 +0000
Manifest next update: Fri 01 May 2026 05:01:23 +0000
Files and hashes: 1: 05HbW4vWO71TuXnlLUIhotjCjQA.roa (hash: wd8NR6jnQPtSkv4WqVTGTX5hWiMAv5m+dMvP8o7c5l8=)
2: GB3NFSp5PGT_22uM3aHhVVz0NOI.asa (hash: riAwsj8thI/YEdA1IIz5l7mENZ2/CQiAFbdBtgwfc6s=)
3: Ju3RYBGHfTVJ0ig9g8xu4WdMw30.roa (hash: 4oJ1sds8f+aiGxncxPG+ThQtMKqUYAuJ1K3qDV4TzDE=)
4: MyskQcDy1iD50lHwlkpWk2pfgJo.asa (hash: w0AAYte+BFKp1fuUqRZUMAG2wD4yxWoVL8PbWMANMLk=)
5: f2WeliHigZNRsPyfnuBo4tGwDZ0.roa (hash: 5slWSGWLG6ATTnZtrmt7Zpoe6VhaQcLSQgvXuDKX6jQ=)
6: j8BCdYiQ_67ATYFHPKfffD1u2xo.roa (hash: GLAbtmkKsyJcTcB7QC4FgMb+NJZzC1QoILdu2duEs9o=)
7: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl (hash: JzRxaoslpYys2MAwbsga3W6JlQxitl/oIoT3nMf5e2I=)
8: xQPEHMR54qpU7rtPLXUkM_1Hx94.roa (hash: X3FNnLjkWD8kAWDLkX6vbg0ozoLMqd9Yva8zbEk23n4=)
9: zKkJ8cE4zPKRxtqXHT19mxBaT9Q.roa (hash: uRT/X8Hvl3ZU07bilVhDl7B14HKulQ5Y0la+tuqFss4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:c3:5b:1b:f8:a5:ea:93:8a:da:2f:dc:d2:8a:18:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
Validity
Not Before: Apr 30 05:01:23 2026 GMT
Not After : May 1 05:01:23 2026 GMT
Subject: CN=9ff905156ae705fc92eb66dfec8224d5a0edb004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:60:7a:3f:e4:39:0d:9d:5c:3b:73:d9:43:
6b:80:82:8e:ac:c0:0f:6b:a5:56:c6:54:db:46:82:
f2:6d:c2:05:d4:c7:7b:ad:68:1a:17:95:9c:d0:bd:
f3:1b:aa:98:7d:61:a8:b0:f2:7f:d3:83:53:b5:01:
d4:d8:f4:52:d2:c3:51:06:57:52:fc:fc:1c:86:73:
d0:14:ac:ec:43:2c:05:71:f5:9b:22:ed:f0:7f:58:
6d:6e:88:c7:da:41:66:b4:d2:d4:32:61:d8:aa:bf:
1a:d5:a6:dd:d9:86:8c:8a:6f:30:9d:c3:24:af:2a:
17:09:b1:cd:b8:86:e4:4d:9b:b7:da:29:19:6c:61:
12:da:28:93:53:d2:ad:3b:a8:d5:da:ae:ba:42:8a:
7a:0e:65:93:5c:55:37:8c:70:d2:5a:fe:94:11:a7:
1f:72:9c:52:5b:c5:38:53:ae:f4:95:04:cb:4d:c6:
ac:40:9e:80:66:54:c3:18:44:2d:5e:7b:a3:5c:8b:
1f:04:f9:70:95:67:e2:68:87:17:a9:99:24:9e:cb:
86:70:9d:ee:93:78:49:3e:05:df:b0:17:c8:7c:0f:
35:b0:31:4f:7d:18:f7:2e:fa:9f:58:13:cb:61:53:
c2:5c:0c:ad:b7:a8:6b:17:83:d1:ae:1c:40:1d:59:
3b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F9:05:15:6A:E7:05:FC:92:EB:66:DF:EC:82:24:D5:A0:ED:B0:04
X509v3 Authority Key Identifier:
keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:db:f9:d4:3d:04:7b:94:02:fd:7f:c4:2a:f2:91:94:f9:70:
86:ee:42:7a:d6:f9:9f:42:30:bf:42:0b:de:17:f1:44:42:5e:
58:67:a0:cf:92:1f:3a:e8:63:40:ac:2a:b8:a0:f7:8b:af:3c:
a3:9c:87:cf:aa:e1:64:51:8f:1d:28:84:f2:c7:90:59:f3:f7:
1e:6a:2a:e2:07:c7:ca:fd:bc:ca:d5:06:70:f4:e6:9e:c9:be:
dc:93:77:12:c6:67:53:58:f3:4f:e8:79:e0:1a:f9:e8:1d:05:
52:ea:ad:90:41:fb:b1:4e:cd:87:a0:a8:c0:86:ab:51:e2:fc:
18:aa:2f:6b:87:76:d3:73:c4:f8:08:be:35:03:43:c3:a0:5e:
53:cd:63:2c:2c:c6:ce:cd:bc:12:4f:b8:f7:a8:fe:85:c2:d1:
06:ed:b5:84:bc:da:ce:7f:34:2b:bc:b2:05:c9:8d:78:dc:ec:
1b:c8:e1:19:e5:3b:32:57:72:b9:88:80:03:a2:0b:5c:dc:5b:
20:b9:f1:1c:e6:55:a7:c1:8f:49:3c:ae:b0:90:f1:02:24:c4:
0a:39:58:9f:1f:0e:92:79:97:84:e2:8b:90:37:f9:24:f6:e2:
57:dd:fa:29:7e:f5:80:45:41:ac:95:62:ed:24:ac:c9:98:2f:
02:3b:82:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:55:45 2026 by rpki-client