Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
File: MvG4X6XeV6X-Ej3jqQXzyzariv4.mft (raw, json)
Hash identifier: 9L4gjrd7OF86VV3xFQGl1qB4FjPL5D60fcfc/GwTKVg=
Subject key identifier: A7:C0:11:09:FE:C6:89:7E:C1:CD:1D:15:04:E6:35:D1:42:58:CA:D0
Authority key identifier: 32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
Certificate issuer: /CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Certificate serial: 019D38D339FBC57240E58F93E903D34F83C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
Manifest number: 07A3
Signing time: Sun 29 Mar 2026 09:01:00 +0000
Manifest this update: Sun 29 Mar 2026 09:01:00 +0000
Manifest next update: Mon 30 Mar 2026 09:01:00 +0000
Files and hashes: 1: MvG4X6XeV6X-Ej3jqQXzyzariv4.crl (hash: ANXZuWKFdl0LggxGR9LSlLcZyd47ofayE5dE/A7jY10=)
2: g299YTC_iLV4aJ1WAKAFuHKoAG8.roa (hash: RjwHc0a+p7SBX5dpTWoPHb71J5KbWW0USQUJuMMvXuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:39:fb:c5:72:40:e5:8f:93:e9:03:d3:4f:83:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Validity
Not Before: Mar 29 09:01:00 2026 GMT
Not After : Mar 30 09:01:00 2026 GMT
Subject: CN=a7c01109fec6897ec1cd1d1504e635d14258cad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:42:b6:78:d7:42:09:0a:78:03:09:e8:7e:d9:
8f:f4:89:15:5b:6b:db:76:aa:9e:a9:72:2b:b2:79:
92:2f:38:d7:f1:57:b3:1f:28:09:24:03:3b:00:c7:
2f:06:27:3b:04:07:95:03:6a:c1:00:6b:0c:9c:fa:
ab:da:9c:5e:71:bd:bf:1b:21:36:08:b9:d0:cf:03:
71:64:1b:8e:4f:3b:b4:1f:b2:e1:1a:43:c0:a6:03:
cc:26:53:64:ad:29:fb:55:0f:91:2f:b2:0d:61:c7:
0e:eb:e3:cc:ac:dc:bf:90:1a:b2:57:a6:0f:71:2a:
60:7a:d9:12:bd:dd:35:76:48:0a:95:06:ad:bf:7c:
1d:6c:92:42:ba:9b:54:81:0f:b9:26:1b:c0:c5:0d:
b0:d5:54:55:61:ad:ef:c2:f8:6b:76:3b:21:ed:aa:
21:73:87:ed:b4:77:f2:9c:da:21:89:12:67:17:b7:
ca:ca:a0:0b:ba:49:0e:39:f0:5b:fa:04:54:d2:77:
0f:a8:b2:29:04:bd:1e:fb:6d:bc:c0:02:4b:0d:d4:
10:e2:85:a0:90:8e:2d:2f:f0:65:90:2b:29:bd:fb:
ea:47:7b:ed:87:fe:92:08:11:f1:07:95:32:e9:12:
f2:bd:a8:fa:2f:08:c5:2e:84:32:eb:81:21:d8:00:
20:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C0:11:09:FE:C6:89:7E:C1:CD:1D:15:04:E6:35:D1:42:58:CA:D0
X509v3 Authority Key Identifier:
keyid:32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6d:12:21:6d:70:99:0b:36:a7:5e:36:a0:a7:7f:90:c0:12:
7d:83:fe:74:55:a7:54:19:8e:03:ca:b7:f7:31:b8:54:10:a2:
a0:30:0f:21:69:a9:49:31:c5:2b:04:d3:b9:d7:fa:25:22:cf:
4e:27:cb:d1:63:a5:60:a7:72:6b:2d:37:9b:82:bb:99:80:f7:
6e:3c:f1:e8:77:9f:ea:5c:39:9c:c4:e1:5e:10:91:66:64:72:
30:d3:b9:8e:a1:cc:3f:80:bf:24:ee:bb:e8:ff:22:1f:02:3e:
84:9d:b5:1b:72:10:d1:76:f2:2a:b0:ff:24:b2:b6:2b:67:72:
4d:08:91:ff:f4:e0:13:0d:50:e7:48:d2:cc:50:f2:3b:ac:39:
5b:d3:62:ee:0b:4b:5b:06:91:4a:37:1c:31:7e:50:22:5b:b6:
89:31:1b:0d:7a:bf:02:11:e6:83:bd:16:4e:a0:c9:fb:21:e0:
cd:4d:16:bb:83:18:30:77:f2:b9:c1:cb:3c:26:2e:e6:ea:63:
23:18:03:d9:a3:09:76:54:8a:d7:04:57:83:45:08:34:90:3d:
b8:5b:65:d5:a8:09:79:92:2f:ff:30:c4:6b:6b:08:77:12:95:
8f:8e:94:dc:0e:60:41:8a:9c:7e:86:60:99:73:fd:80:61:ed:
4a:22:b7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:27 2026 by rpki-client