Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: 9NhY4fOX/Yuj9pjCI+/nYs5cZ4L67oO/3BvS9HQDIZM=
Subject key identifier: E2:6F:36:16:DA:66:6E:52:FC:83:72:F6:FB:B0:F9:22:C4:5E:11:B1
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 01A182627C56BFA1E7E172A1BEC06EEC5D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 1817
Signing time: Wed 28 Oct 2026 12:00:54 +0000
Manifest this update: Wed 28 Oct 2026 12:00:54 +0000
Manifest next update: Thu 29 Oct 2026 12:00:54 +0000
Files and hashes: 1: 5gNENNsVRr6Z3Z2kDivAVxx-WQg.roa (hash: jTpmttv4j/3i6QtQ6v5DJnqHH5NP5RbZJYeJEXUUVHc=)
2: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: axlVkPRnJR1ksanUkh+h6F4q+z2IKavL1WLXgW6rWS8=)
3: e4_jL8KhurdfWGIKdZ4NxeDCLAY.roa (hash: x4bxfJaUc0PN6qNdfp4xGbKJbKuhcjLAJVJr8mf8ECY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:62:7c:56:bf:a1:e7:e1:72:a1:be:c0:6e:ec:5d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Oct 28 12:00:54 2026 GMT
Not After : Oct 29 12:00:54 2026 GMT
Subject: CN=e26f3616da666e52fc8372f6fbb0f922c45e11b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:67:28:d6:6c:6e:9c:57:ae:40:53:8a:9b:6a:
dc:2c:26:63:85:23:1c:09:15:aa:17:78:a1:7d:17:
33:8c:25:55:7a:51:54:7b:61:77:1d:28:e9:a5:8b:
03:bd:e3:db:b2:56:6a:46:74:a6:84:54:20:7d:bd:
a1:b1:ea:3e:cd:20:0f:b3:d0:c3:f6:fe:eb:13:e4:
e1:2c:bf:3a:b1:b6:46:d3:41:30:20:e3:1d:00:87:
de:0c:1d:fb:42:c0:d6:4c:4c:54:85:52:12:b6:5e:
b3:bd:01:34:61:f2:3c:11:aa:32:3f:7a:cc:ad:12:
f4:c3:0e:c9:33:e7:14:51:15:25:7b:7a:12:20:4d:
6b:12:72:8f:19:9a:c6:e5:83:49:c0:de:30:a3:c1:
0d:80:62:7e:f8:f2:99:8c:73:35:b3:49:ed:17:4a:
cd:41:33:e6:82:ec:d6:c5:0e:97:cb:5a:d2:d7:94:
ef:9b:b5:40:59:3e:53:2a:62:8c:f2:01:1f:94:63:
1b:37:d4:9a:a7:0f:41:b0:53:ec:ab:b8:de:d8:61:
da:56:5d:d7:e3:33:1d:77:0c:7f:01:73:5b:0b:2a:
54:7a:60:73:6a:fb:ae:98:07:00:3b:03:f6:b3:e9:
64:73:36:99:b8:f5:28:94:a7:6a:e0:c6:49:a3:58:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6F:36:16:DA:66:6E:52:FC:83:72:F6:FB:B0:F9:22:C4:5E:11:B1
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fe:96:7d:61:65:8b:07:77:b5:7b:be:b4:02:16:04:41:26:
8a:94:64:ab:2e:e1:99:e8:a8:29:a4:af:c1:69:5d:5d:ee:2d:
8d:2b:89:fa:50:88:0d:12:d6:2c:ac:75:05:93:e0:9a:05:bc:
7a:69:88:f9:1e:30:66:41:c2:71:ea:26:f8:31:54:b7:a3:08:
aa:33:a0:cf:03:0c:30:d0:97:da:ac:64:35:b3:8d:96:d1:71:
c8:e3:69:fb:ae:7d:77:86:78:e0:3d:78:42:7b:99:e0:4f:4c:
df:0c:bf:aa:98:53:5a:2b:37:56:23:0c:30:24:49:fd:1c:4c:
d8:78:34:32:cb:67:9b:fc:07:ef:79:ec:d5:4b:60:d7:22:71:
0c:91:7e:02:43:da:e7:89:8e:0c:f4:5f:36:75:63:72:22:99:
91:ac:e2:b4:26:82:94:5c:6d:8a:4e:cb:a1:2b:2c:20:17:43:
d7:e4:ce:ce:52:47:bc:52:80:84:37:78:c5:67:58:40:35:e8:
98:08:21:4d:09:00:19:1b:a0:6c:6b:9f:14:18:2c:3f:b1:c4:
e3:d7:38:5b:34:7d:ca:43:df:65:34:aa:f9:ea:46:0a:b6:33:
2a:2f:e1:a0:df:8f:29:8e:e1:f5:33:23:ad:ef:bb:48:5c:b0:
08:42:de:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:45:14 2026 by rpki-client