
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
File: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft (raw, json)
Hash identifier: qWJQEsPpsN03GkzEZFZQZ5P7gw2EngT5/4E06YdTrkk=
Subject key identifier: 4D:23:0D:F1:51:20:D2:73:46:46:A5:40:48:1E:73:37:7D:2B:EA:6D
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial: 01A0F29F157514D2EF5817B8495734C1F302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
Manifest number: 0BE2
Signing time: Wed 30 Sep 2026 14:01:46 +0000
Manifest this update: Wed 30 Sep 2026 14:01:46 +0000
Manifest next update: Thu 01 Oct 2026 14:01:46 +0000
Files and hashes: 1: 05HbW4vWO71TuXnlLUIhotjCjQA.roa (hash: wd8NR6jnQPtSkv4WqVTGTX5hWiMAv5m+dMvP8o7c5l8=)
2: GB3NFSp5PGT_22uM3aHhVVz0NOI.asa (hash: riAwsj8thI/YEdA1IIz5l7mENZ2/CQiAFbdBtgwfc6s=)
3: Ju3RYBGHfTVJ0ig9g8xu4WdMw30.roa (hash: 4oJ1sds8f+aiGxncxPG+ThQtMKqUYAuJ1K3qDV4TzDE=)
4: MyskQcDy1iD50lHwlkpWk2pfgJo.asa (hash: w0AAYte+BFKp1fuUqRZUMAG2wD4yxWoVL8PbWMANMLk=)
5: f2WeliHigZNRsPyfnuBo4tGwDZ0.roa (hash: 5slWSGWLG6ATTnZtrmt7Zpoe6VhaQcLSQgvXuDKX6jQ=)
6: j8BCdYiQ_67ATYFHPKfffD1u2xo.roa (hash: GLAbtmkKsyJcTcB7QC4FgMb+NJZzC1QoILdu2duEs9o=)
7: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl (hash: Ii13BrAOjFDpv+FDYj7FaPy8TdpZyUifLx3fkoTdFMQ=)
8: xQPEHMR54qpU7rtPLXUkM_1Hx94.roa (hash: X3FNnLjkWD8kAWDLkX6vbg0ozoLMqd9Yva8zbEk23n4=)
9: zKkJ8cE4zPKRxtqXHT19mxBaT9Q.roa (hash: uRT/X8Hvl3ZU07bilVhDl7B14HKulQ5Y0la+tuqFss4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 14:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:9f:15:75:14:d2:ef:58:17:b8:49:57:34:c1:f3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
Validity
Not Before: Sep 30 14:01:46 2026 GMT
Not After : Oct 1 14:01:46 2026 GMT
Subject: CN=4d230df15120d2734646a540481e73377d2bea6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ac:b8:f1:9f:66:55:34:72:86:f9:c3:24:54:
2a:fe:8f:5d:a4:48:a6:40:07:4d:79:26:c5:a8:2d:
5e:a5:87:1a:84:c0:f1:21:57:5e:3b:42:bb:aa:4e:
9b:f5:6a:fe:3a:aa:03:30:35:f4:1f:81:c2:af:de:
92:05:b0:4a:e1:58:1d:ba:4d:1e:05:cf:16:0c:03:
af:7c:2e:15:36:2a:1b:30:8f:80:79:1e:06:e0:a1:
e8:2c:aa:f0:6c:41:65:a0:a2:a1:30:e3:96:46:ae:
02:89:c9:32:eb:31:d2:7a:ec:43:eb:4b:21:98:b1:
5e:11:2b:39:73:71:45:cf:f5:7e:1a:0b:5f:21:15:
8e:5b:4e:dd:46:2e:39:68:17:5e:25:4d:6b:0b:9a:
21:b6:bc:85:3c:86:e7:d6:7a:60:91:4f:c7:a8:3b:
06:93:1c:b6:5a:6f:99:da:e9:a9:6c:66:c9:e1:0d:
77:a4:9b:d6:fa:a0:c9:b8:ec:d0:46:87:2b:c1:ab:
6a:f3:ec:74:16:24:bd:a3:bc:7a:65:0f:a4:42:87:
14:f3:b6:5b:ca:9b:82:d7:3a:62:31:a1:a5:22:a2:
c9:45:e3:d8:62:99:c2:b3:2f:7c:b9:63:a2:7f:b2:
14:08:c9:03:de:04:34:87:72:73:f3:8c:e7:43:c8:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:23:0D:F1:51:20:D2:73:46:46:A5:40:48:1E:73:37:7D:2B:EA:6D
X509v3 Authority Key Identifier:
keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:66:3e:28:87:a2:9d:4a:fb:29:92:c0:54:ee:61:70:af:27:
3e:fd:52:7c:89:20:68:d9:32:ce:33:2b:be:7c:7e:c3:97:a5:
97:03:4e:27:81:37:aa:be:c5:73:60:3f:25:2e:3d:9e:b2:a3:
7d:9a:37:42:75:41:45:ea:3e:7e:07:00:95:f6:02:de:8e:4a:
a0:96:15:fd:bc:77:82:71:6e:dc:e6:6e:b6:10:0e:04:4d:7d:
88:81:42:9d:99:65:47:20:97:2a:14:ba:ff:b0:cb:fe:5b:b7:
57:63:e4:b3:1b:7b:01:85:36:ac:28:87:10:ce:c5:44:86:21:
3d:bd:ff:c9:ae:8c:c0:2e:77:3d:df:c0:da:f9:b9:ae:27:16:
53:f2:82:a0:05:78:fe:b7:86:c9:05:f0:5e:c8:c5:5a:c4:52:
e9:1d:fd:7e:76:03:81:df:0a:c6:a0:a9:80:f6:b9:f1:20:10:
17:de:c5:25:82:9a:9c:24:0f:dc:74:42:4f:61:b3:a1:3a:4f:
d6:8f:e5:38:14:44:72:bd:b9:12:70:26:07:15:b5:54:02:3b:
c3:51:34:d6:2a:f8:20:24:88:be:9e:34:ec:45:62:dd:9e:08:
d0:fc:75:7e:f8:d0:81:fa:d0:42:23:a6:06:6d:de:be:3d:0b:
83:4b:1e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:41:35 2026 by rpki-client