
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: 4upF7Fssqk8IhNg0FG2fOFUjRNVFLjPK5RObJJglaC8=
Subject key identifier: 3D:72:11:19:98:33:B3:ED:F2:EA:03:13:29:6D:6B:F2:7A:C4:5F:7E
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 01A08B314F7E1E9E0E978399D134634B32E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 1797
Signing time: Thu 10 Sep 2026 12:00:59 +0000
Manifest this update: Thu 10 Sep 2026 12:00:59 +0000
Manifest next update: Fri 11 Sep 2026 12:00:59 +0000
Files and hashes: 1: 5gNENNsVRr6Z3Z2kDivAVxx-WQg.roa (hash: jTpmttv4j/3i6QtQ6v5DJnqHH5NP5RbZJYeJEXUUVHc=)
2: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: t12AjJD684h1LCrnvlyPWsgNYTuesAP72nFjbn7wT7U=)
3: e4_jL8KhurdfWGIKdZ4NxeDCLAY.roa (hash: x4bxfJaUc0PN6qNdfp4xGbKJbKuhcjLAJVJr8mf8ECY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:4f:7e:1e:9e:0e:97:83:99:d1:34:63:4b:32:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Sep 10 12:00:59 2026 GMT
Not After : Sep 11 12:00:59 2026 GMT
Subject: CN=3d7211199833b3edf2ea0313296d6bf27ac45f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:c3:43:2d:94:40:75:e8:36:45:22:65:ad:
1b:e8:30:33:a0:95:78:e0:61:77:26:97:ca:74:5f:
dd:58:05:7d:8a:d9:01:35:11:fc:57:c8:f2:89:72:
f9:78:6e:87:da:5c:7e:f9:09:cc:88:c6:50:74:82:
3e:4d:3d:c8:f1:e2:25:e9:fb:7a:3c:5f:80:7c:fe:
4e:21:8a:4a:88:28:0b:27:61:0c:b7:60:be:53:21:
b2:80:eb:b5:2a:a8:54:05:96:30:b5:8c:ac:db:bd:
2c:bd:21:fa:3a:c4:5d:91:b6:0d:39:93:9c:dd:8a:
a7:be:e0:d8:6a:53:f9:29:50:a8:df:35:06:ff:b3:
1d:10:53:b4:c5:21:b9:09:85:c5:11:74:dc:73:5c:
35:69:4c:da:d3:bf:c8:3f:bc:83:70:0e:57:c8:5a:
bf:20:4c:c4:14:c5:d7:07:b2:6b:8b:4f:0b:8e:34:
d7:6f:ae:26:c8:ac:5d:b4:d5:93:46:74:55:bb:7c:
c7:ab:74:ca:88:4f:e8:30:11:e3:f0:3e:9d:04:e6:
87:dc:91:05:02:04:c9:8f:e0:27:9e:4d:b6:2a:39:
87:a8:92:e7:ec:0e:6d:25:08:86:c8:26:69:d6:a6:
67:00:be:2c:bd:12:a0:15:b9:82:a6:c9:a0:36:14:
8b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:72:11:19:98:33:B3:ED:F2:EA:03:13:29:6D:6B:F2:7A:C4:5F:7E
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5f:05:ac:2d:b1:37:01:7a:2c:c9:21:24:fe:7b:b4:6f:b6:
fc:a7:6d:f5:ee:9a:97:ca:cc:5a:6b:0f:2f:60:72:17:21:cc:
40:ff:21:92:05:48:ba:64:08:68:2e:b0:c2:13:f1:4d:82:0c:
8f:d7:4f:c7:de:77:09:7e:8d:b2:25:35:3d:ad:16:3b:c6:13:
fe:62:44:02:a1:b9:74:8a:1f:23:c8:37:7c:c9:49:1f:8a:45:
61:b2:29:c2:13:70:da:9c:e9:b5:93:ce:84:d3:76:08:b7:91:
70:fd:b2:e8:6d:df:c0:91:ce:7a:06:1a:3e:78:8b:54:5c:27:
19:71:2f:f6:4b:66:2c:02:df:c5:ba:b1:f0:6c:26:1d:88:9f:
ae:84:b4:da:78:4f:64:21:ef:5b:b2:26:f7:d0:7d:bb:04:14:
44:b3:7c:6c:d9:9c:bd:85:5c:ae:15:aa:f9:19:1d:fc:ba:c4:
7f:06:1d:8e:b3:9b:2f:60:af:dc:f7:9b:a0:9c:bb:2a:66:bb:
cb:65:09:cb:4a:41:16:4d:24:2c:46:8e:ac:ad:d1:c5:4a:d2:
ac:d4:16:ed:d5:25:91:05:4d:ef:15:ca:44:66:d2:c3:6f:d3:
aa:b0:0c:9f:78:e0:a9:7e:91:4b:c6:5d:29:e3:8b:98:7d:8d:
16:d9:8d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:41:34 2026 by rpki-client