Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: T8NDWwpqfV8zNX/jRCurM8UMcWYR3/LGH7alV1yrauI=
Subject key identifier: 61:90:59:27:DC:83:27:DD:A3:4A:FF:BD:A2:82:F6:68:48:88:EB:2C
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 019F9248006EED64C3E8B3668EAF6EB9D611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 1565
Signing time: Fri 24 Jul 2026 04:00:19 +0000
Manifest this update: Fri 24 Jul 2026 04:00:19 +0000
Manifest next update: Sat 25 Jul 2026 04:00:19 +0000
Files and hashes: 1: Bk9vyq1LgRpU9QeZwN0V_GD5gHw.roa (hash: yNE44jpnjgZHS9ufgLSJ6WIuzBw3d04Exh56Z7CxQ4s=)
2: KKpHDDFH2cfzrNDJZuhoGv_wS_w.roa (hash: ATx2mcVJOEtuVh1BU96vsI8Si7Mn1Bxh+fLVIbYJBSM=)
3: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: t92UT25rJQKRRT++keZcKUnOe2aTbM1V75uU40au9Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:00:6e:ed:64:c3:e8:b3:66:8e:af:6e:b9:d6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Jul 24 04:00:19 2026 GMT
Not After : Jul 25 04:00:19 2026 GMT
Subject: CN=61905927dc8327dda34affbda282f6684888eb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:a0:1a:d3:0d:89:ba:4c:f6:80:fc:93:0e:
a4:68:1a:ff:f0:de:66:c6:ec:57:aa:85:fa:4b:65:
48:e5:c8:50:55:31:9c:c3:ba:b1:17:e0:39:55:67:
68:77:c2:72:f0:9a:26:6f:05:c5:0a:54:d0:fb:d3:
ac:56:79:5f:70:e5:41:21:9b:58:9d:7f:64:65:e5:
fd:f2:c7:6d:63:20:d4:eb:c1:d7:10:22:0c:5e:a0:
f2:02:b7:87:1d:e1:0f:89:81:54:b5:16:c8:83:67:
b0:b7:7d:ed:6c:b2:c9:a0:5d:6b:ba:3f:2a:c7:14:
c8:ec:e5:46:f0:15:d6:7e:98:ff:1e:eb:14:75:59:
36:f7:28:82:80:f6:a2:14:b3:4c:a1:93:6f:b0:74:
7a:e9:0d:f3:01:2e:fa:d4:d9:71:2a:8a:b3:1b:3d:
19:17:f0:af:c5:a3:67:98:ae:f3:2f:a5:52:39:9c:
85:dc:a1:bb:41:cb:17:b7:30:aa:e2:ea:a2:19:55:
79:28:d5:f8:63:e4:8f:cf:90:45:84:72:b1:ee:e7:
1b:51:c0:58:ab:28:c6:37:ee:fa:54:f5:bf:bf:c3:
eb:ee:eb:30:00:6b:03:4a:24:2c:43:a7:a9:14:20:
e5:e9:ba:62:e6:38:85:7b:b9:79:76:b2:30:29:a9:
8f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:90:59:27:DC:83:27:DD:A3:4A:FF:BD:A2:82:F6:68:48:88:EB:2C
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:12:7a:03:a6:74:ba:e1:36:af:d9:31:7b:fa:d0:2e:f8:bd:
b2:51:3a:9a:76:27:de:05:35:1b:80:ad:d4:9b:ad:f3:83:6f:
7a:87:a0:13:ba:08:00:f5:ef:5a:20:29:76:a4:cc:2b:32:c4:
2b:56:20:3a:89:41:24:9a:08:9b:d9:bf:5d:be:12:bf:a1:fc:
ea:bf:c9:a3:1d:ac:60:6e:ee:83:e0:e7:67:c0:b9:e5:7d:3d:
c3:96:fb:ec:9f:44:88:cd:a9:58:52:74:70:75:b0:8f:60:50:
d0:9f:59:af:4b:ed:70:49:7c:f5:80:05:c3:a2:4e:ad:78:9f:
20:a4:b1:e9:11:1e:62:a5:0d:11:bc:6d:11:1a:14:ea:21:ce:
a9:2f:d0:63:ea:9b:26:87:c7:cf:8d:eb:83:53:51:9f:33:9a:
9f:b1:f3:78:22:f6:eb:d7:7d:86:48:89:83:a0:8f:45:6e:8f:
37:b0:c7:fa:7f:51:28:59:0d:9e:71:a8:b6:cd:0b:e1:63:7f:
49:75:ea:46:ce:2d:9f:c6:61:57:68:18:f0:d8:ab:59:ae:a6:
c4:31:3c:d2:2d:d0:01:4a:92:20:d1:72:30:fc:f5:9b:08:72:
82:14:b8:5c:6f:f2:c8:f4:f4:e4:63:f1:27:62:3c:7e:62:a2:
2a:52:b1:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSABu7WTD6LNmjq9uudYRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNmQ2MTgzNTViZDg5MzdmNzViYjQ2NTBiYjVjMWFmNzBm
OWExMmUwHhcNMjYwNzI0MDQwMDE5WhcNMjYwNzI1MDQwMDE5WjAzMTEwLwYDVQQD
Eyg2MTkwNTkyN2RjODMyN2RkYTM0YWZmYmRhMjgyZjY2ODQ4ODhlYjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSmgGtMNibpM9oD8kw6kaBr/8N5m
xuxXqoX6S2VI5chQVTGcw7qxF+A5VWdod8Jy8JombwXFClTQ+9OsVnlfcOVBIZtY
nX9kZeX98sdtYyDU68HXECIMXqDyAreHHeEPiYFUtRbIg2ewt33tbLLJoF1ruj8q
xxTI7OVG8BXWfpj/HusUdVk29yiCgPaiFLNMoZNvsHR66Q3zAS761NlxKoqzGz0Z
F/CvxaNnmK7zL6VSOZyF3KG7QcsXtzCq4uqiGVV5KNX4Y+SPz5BFhHKx7ucbUcBY
qyjGN+76VPW/v8Pr7uswAGsDSiQsQ6epFCDl6bpi5jiFe7l5drIwKamP3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGQWSfcgyfdo0r/vaKC9mhIiOssMB8GA1UdIwQY
MBaAFDBtYYNVvYk391u0ZQu1wa9w+aEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2Ut
NTE2ZmZkODczNzZjLzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2UtNTE2ZmZkODczNzZj
LzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhJ6A6Z0
uuE2r9kxe/rQLvi9slE6mnYn3gU1G4Ct1Jut84NveoegE7oIAPXvWiApdqTMKzLE
K1YgOolBJJoIm9m/Xb4Sv6H86r/Jox2sYG7ug+DnZ8C55X09w5b77J9EiM2pWFJ0
cHWwj2BQ0J9Zr0vtcEl89YAFw6JOrXifIKSx6REeYqUNEbxtERoU6iHOqS/QY+qb
JofHz43rg1NRnzOan7HzeCL269d9hkiJg6CPRW6PN7DH+n9RKFkNnnGots0L4WN/
SXXqRs4tn8ZhV2gY8NirWa6mxDE80i3QAUqSINFyMPz1mwhyghS4XG/yyPT05GPx
J2I8fmKiKlKxvA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:45:44 2026 by rpki-client