Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: pf7MtHuGRGyG2KW8LuRXXlYkrFua+zHtNO5dYYxdjZg=
Subject key identifier: CA:0D:6B:A4:9A:63:A5:ED:7F:4D:4D:3F:A0:28:C0:10:CB:0D:BA:A6
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 019CF015F65DBEC5907620543AAC4958C7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 15B9
Signing time: Sun 15 Mar 2026 06:01:37 +0000
Manifest this update: Sun 15 Mar 2026 06:01:37 +0000
Manifest next update: Mon 16 Mar 2026 06:01:37 +0000
Files and hashes: 1: 5gNENNsVRr6Z3Z2kDivAVxx-WQg.roa (hash: jTpmttv4j/3i6QtQ6v5DJnqHH5NP5RbZJYeJEXUUVHc=)
2: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: Khq6n/UoXSneAM4Fbjx+PC/NFd24a8B6NzkA+FKB7AE=)
3: e4_jL8KhurdfWGIKdZ4NxeDCLAY.roa (hash: x4bxfJaUc0PN6qNdfp4xGbKJbKuhcjLAJVJr8mf8ECY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f0:15:f6:5d:be:c5:90:76:20:54:3a:ac:49:58:c7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Mar 15 06:01:37 2026 GMT
Not After : Mar 16 06:01:37 2026 GMT
Subject: CN=ca0d6ba49a63a5ed7f4d4d3fa028c010cb0dbaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:29:7b:6f:ac:8f:39:d9:d9:66:d9:c2:bd:
33:b6:b1:a8:6f:83:db:bb:e6:99:26:f8:7a:2f:12:
89:14:7c:fa:e4:61:5b:87:f4:d4:ce:cf:07:52:ae:
2f:05:3b:50:f3:8e:c1:13:32:06:c7:4a:81:75:99:
c7:fc:c3:b8:dd:a8:d3:ef:be:22:3c:f9:ac:3a:6d:
ce:f6:23:30:af:a3:2c:b2:55:75:2b:fa:f1:54:ed:
f3:30:06:98:29:2b:b0:e1:00:3f:a6:ef:21:37:9f:
21:eb:20:7d:a5:07:51:85:84:ba:e7:9c:08:50:d5:
96:c8:fb:f9:60:aa:f0:7a:27:79:e2:45:bd:19:43:
43:9a:b4:14:d5:86:4b:2c:da:c1:ac:93:a6:d9:92:
a8:b2:73:cd:e0:bc:6d:1e:e3:37:a9:ea:06:c9:43:
0d:e2:01:58:ab:87:12:89:a7:4e:a4:aa:03:32:a5:
3f:65:c2:0d:86:57:6c:35:3a:2c:bb:aa:3e:c9:18:
53:ce:48:30:56:6c:46:c1:9c:80:43:2d:59:66:ab:
bb:57:a9:df:42:ba:01:b7:55:f7:cf:56:61:32:18:
08:c8:f2:88:46:35:00:75:a5:e0:42:80:12:a1:a5:
73:ed:36:a2:9f:44:98:53:29:38:24:3d:d0:a6:50:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0D:6B:A4:9A:63:A5:ED:7F:4D:4D:3F:A0:28:C0:10:CB:0D:BA:A6
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:61:d9:20:cc:8f:ab:93:f2:c1:8e:0c:cf:d5:4f:60:be:78:
db:41:ce:45:67:02:e4:02:f0:51:12:33:af:99:ff:61:35:cc:
5c:96:9a:f9:2a:df:c8:6c:b9:79:b7:80:4e:4a:30:61:6d:91:
a2:52:05:d6:ec:0f:c1:15:2a:82:57:c8:4d:c5:f1:c2:da:02:
43:68:e1:49:06:42:88:80:58:0d:66:b4:38:76:ae:51:77:b2:
71:d2:b1:bb:5d:9e:d6:71:65:1d:ac:51:ae:2b:24:90:77:ff:
96:5d:33:b9:bf:91:df:c5:e4:c5:a8:33:ad:f6:24:eb:67:4f:
3e:3c:04:2b:44:37:f1:fa:b9:8e:dd:2c:23:e6:6a:2b:1c:ab:
1f:24:7a:c4:de:91:e8:ee:6d:72:a1:ee:5d:66:96:13:4c:16:
2e:91:17:d2:69:f8:1e:1b:4c:70:24:34:cb:65:11:6f:f0:fb:
67:06:fd:c1:da:ce:7b:72:65:2a:2c:3b:18:e9:6e:b6:ab:ad:
18:b7:c6:0c:f7:87:59:60:14:c7:12:3e:cd:b5:06:99:db:46:
82:f2:44:34:31:83:61:7a:23:15:a3:bd:88:f3:f2:d0:d2:84:
de:ce:31:49:59:3e:89:d8:bb:37:01:f6:2d:e2:5c:74:ac:27:
16:ff:aa:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 09:29:17 2026 by rpki-client