Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File: mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier: bChMoRM6eWSMf3WmfWogvbucki4X5WXi/7radHVr8jw=
Subject key identifier: 07:45:5A:29:09:70:FD:A5:22:5B:B0:59:FE:57:DF:94:22:64:8C:AD
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer: /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial: 01A12FC5F056D99BF6D16CB819DC8D2B8D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number: 1A9B
Signing time: Mon 12 Oct 2026 11:01:03 +0000
Manifest this update: Mon 12 Oct 2026 11:01:03 +0000
Manifest next update: Tue 13 Oct 2026 11:01:03 +0000
Files and hashes: 1: iFAn1u3EcEzNKFFEGLpbIFooV4w.roa (hash: QNlIF2jmeLo4oV4a+RaHCBWLuy9tqbGyVZgSq0+yZ+A=)
2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: Mv5dcCuFQmOVieYcWOe/yrVPynQ1aQI3TufCe3BAS0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c5:f0:56:d9:9b:f6:d1:6c:b8:19:dc:8d:2b:8d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Validity
Not Before: Oct 12 11:01:03 2026 GMT
Not After : Oct 13 11:01:03 2026 GMT
Subject: CN=07455a290970fda5225bb059fe57df9422648cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:7a:0c:89:33:d0:e5:83:5e:75:48:3b:b9:
01:fa:c0:1f:cf:fb:38:b5:74:f7:a9:a0:5b:ef:4b:
12:55:90:7b:4e:a1:9f:ff:10:a4:92:c9:f5:e2:96:
ca:cb:2e:fa:c0:5e:74:f8:04:c9:74:e1:d6:d9:33:
92:2b:00:83:d9:bd:e6:8d:58:e4:f4:63:4e:54:33:
3f:69:e2:6a:c5:d6:db:81:0a:a8:4e:95:6c:01:fd:
9c:ec:5f:ca:ef:cb:bf:26:37:78:19:86:70:26:fc:
7e:2b:a7:ec:f2:9b:f8:19:18:0a:4e:5d:fb:06:d8:
12:00:1d:7c:f8:67:cc:55:67:33:71:2d:61:44:75:
e5:4d:85:0b:95:fc:9c:53:8f:79:80:44:6a:c3:2f:
3a:3c:33:40:d1:c9:e4:ef:2f:e9:30:da:7a:11:0f:
54:46:55:81:9c:a8:37:be:bb:17:8f:6b:f2:20:62:
51:7f:99:63:f4:2f:8b:f7:a4:6a:bc:24:53:b0:f0:
ae:40:39:ea:73:bb:a4:58:79:4d:93:64:32:85:de:
00:54:e9:a4:46:2a:1b:c4:48:92:55:91:1f:fd:8e:
18:18:2b:bb:a3:09:a6:1e:14:d7:1c:53:1a:e3:c1:
f2:a1:ea:b7:c9:da:76:f3:60:cb:b5:ad:6e:6f:9a:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:45:5A:29:09:70:FD:A5:22:5B:B0:59:FE:57:DF:94:22:64:8C:AD
X509v3 Authority Key Identifier:
keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e0:12:9f:88:13:ae:17:08:4e:90:6a:eb:df:b5:b2:e8:32:
05:21:0c:dd:84:05:12:17:1a:f3:1f:47:08:5b:07:06:67:68:
e1:c4:22:b9:88:83:d7:9f:8b:bf:bf:c0:44:7c:15:d5:00:69:
16:14:62:48:c3:31:3d:52:b9:db:7b:91:36:b5:0d:cd:45:2b:
2e:9d:1f:ea:a3:73:19:9b:bb:bc:2f:a0:40:a5:12:8a:30:c4:
66:c5:2a:b5:2f:b1:54:e9:6c:67:36:1d:5c:b9:c5:bf:fc:e0:
fa:f4:5e:88:4d:ca:8f:6c:eb:4a:7d:82:4f:04:68:fc:00:a6:
03:22:68:be:67:00:38:78:73:a1:68:63:4b:35:c9:98:0d:94:
73:8b:fa:7d:87:1a:8e:90:30:68:4c:6b:c0:39:b7:fa:8a:da:
ba:cd:28:cc:55:e9:b0:bf:6b:b2:c6:d1:60:ca:e2:c8:be:c4:
72:e0:f9:ce:8e:f4:de:87:03:ef:e7:20:ad:cf:58:21:6f:d9:
80:46:94:0f:5d:78:8f:bc:cc:5d:55:15:b3:e2:ba:67:99:6e:
12:e8:8f:05:f7:36:70:b3:12:7f:d7:28:35:86:2f:36:fd:83:
1c:c5:8c:37:35:34:e3:08:98:17:5d:0a:ab:84:dd:a5:9d:ce:
2b:77:b4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:03:22 2026 by rpki-client