
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File: mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier: j3FZdO/vmv9SPrA1YPiCPTG6Pa/Rn2Q8jwRl+FHTK6o=
Subject key identifier: BB:40:D1:53:28:2A:39:AD:09:E5:90:AF:27:F3:FA:E2:81:E2:19:C7
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer: /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial: 01A129FAC195651F5271DA3CD4325BDD90F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number: 1A98
Signing time: Sun 11 Oct 2026 08:01:01 +0000
Manifest this update: Sun 11 Oct 2026 08:01:01 +0000
Manifest next update: Mon 12 Oct 2026 08:01:01 +0000
Files and hashes: 1: iFAn1u3EcEzNKFFEGLpbIFooV4w.roa (hash: QNlIF2jmeLo4oV4a+RaHCBWLuy9tqbGyVZgSq0+yZ+A=)
2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: HOe46jliBH1jIEeySqvc5zyBo3qDpc+fxJSpbMbBOCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:fa:c1:95:65:1f:52:71:da:3c:d4:32:5b:dd:90:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Validity
Not Before: Oct 11 08:01:01 2026 GMT
Not After : Oct 12 08:01:01 2026 GMT
Subject: CN=bb40d153282a39ad09e590af27f3fae281e219c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:1e:58:c2:b2:df:1f:86:d4:2b:a9:41:a0:
23:e9:dc:66:46:72:8e:e7:a8:77:83:0a:a6:fa:21:
9a:ed:92:6b:91:c8:03:88:ba:d6:dd:aa:77:36:27:
4e:6d:1e:5b:90:e0:07:1f:fe:10:51:90:7a:99:49:
f6:48:24:9f:0f:27:df:ed:52:a9:22:ef:01:81:91:
54:10:d2:a5:ba:db:01:51:6d:97:dd:66:19:ae:84:
12:ed:2d:21:a6:4e:34:11:65:72:58:6b:78:b2:cc:
2a:21:a3:ef:24:35:fc:9b:54:8f:07:e7:a7:46:97:
94:1f:51:94:9c:b7:cb:34:8b:54:43:f6:58:64:2f:
36:6f:fc:86:eb:c0:5e:bb:e5:f2:c1:bb:4d:74:b5:
91:fb:1a:ea:43:ff:50:15:b2:29:bf:29:12:1a:e8:
40:65:9f:5e:77:46:1b:3b:c7:7d:82:ef:e0:23:d6:
91:ab:9a:90:50:a0:49:c1:93:0a:cb:cb:62:12:aa:
d6:6c:5b:29:13:35:41:cc:5e:25:69:ff:28:bf:ca:
d4:f1:2e:46:c3:51:16:11:24:b8:80:4a:e4:5d:16:
5e:fa:21:51:e5:77:ae:bd:7a:a5:b2:08:a3:0f:7b:
e4:b4:07:76:42:55:37:e3:92:8f:22:02:5e:3f:10:
2f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:40:D1:53:28:2A:39:AD:09:E5:90:AF:27:F3:FA:E2:81:E2:19:C7
X509v3 Authority Key Identifier:
keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0c:83:7d:b7:f9:70:9f:6b:6a:7a:6d:b6:0c:31:3a:80:9d:
58:13:69:e0:74:e3:33:9a:07:c3:ab:40:bc:b1:16:64:3d:86:
be:d1:a7:c3:3e:35:d9:ab:7a:55:dd:94:01:f5:1a:2e:c6:34:
50:59:cf:50:fe:f0:af:6a:76:06:23:bc:93:6a:1f:62:cd:c2:
70:32:23:fc:35:3c:14:3e:3e:bf:f6:05:d7:c2:ed:f6:4e:36:
32:31:3a:5c:d3:47:47:ec:6a:72:66:c0:d5:69:81:e8:6c:69:
c4:08:e8:ce:a5:57:5a:dc:d9:96:d3:06:87:19:91:3a:17:13:
f6:2d:f5:ef:04:14:6c:c2:63:e5:51:65:2d:cd:14:b4:2a:fb:
e8:61:35:1c:f8:0c:ba:af:22:5a:df:dd:a9:c5:49:ff:48:3e:
60:81:b4:2d:17:5a:a3:a2:5f:ba:37:8e:5c:3a:98:7e:12:25:
29:46:65:dd:f6:20:a5:2c:fa:ea:5f:2f:2e:0a:44:07:40:c6:
2d:b1:7b:9a:3c:32:f8:c0:64:10:55:9e:ca:33:2a:1d:cd:d3:
a1:39:5e:5e:eb:11:f7:9f:a2:d9:bf:a0:bb:47:a7:48:3a:95:
03:62:b1:d4:d1:ee:bd:20:86:ef:61:74:12:6b:b9:98:f0:4c:
b9:10:3e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:35:47 2026 by rpki-client