Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: O0KYRUd6pz96559ezWSOh3QnOVACBgUUWW/Bag1gr94=
Subject key identifier: 82:8A:1A:26:31:A9:20:19:9D:C0:EC:89:0B:9D:FB:6D:C6:75:39:3A
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 019D284E1F4109419AB859784247331A35A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 1425
Signing time: Thu 26 Mar 2026 04:01:41 +0000
Manifest this update: Thu 26 Mar 2026 04:01:41 +0000
Manifest next update: Fri 27 Mar 2026 04:01:41 +0000
Files and hashes: 1: Bk9vyq1LgRpU9QeZwN0V_GD5gHw.roa (hash: yNE44jpnjgZHS9ufgLSJ6WIuzBw3d04Exh56Z7CxQ4s=)
2: KKpHDDFH2cfzrNDJZuhoGv_wS_w.roa (hash: ATx2mcVJOEtuVh1BU96vsI8Si7Mn1Bxh+fLVIbYJBSM=)
3: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: Ds/o6YzXt75jq85sc/YkaN/g4NTLGfes3H93NCRUd8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:1f:41:09:41:9a:b8:59:78:42:47:33:1a:35:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Mar 26 04:01:41 2026 GMT
Not After : Mar 27 04:01:41 2026 GMT
Subject: CN=828a1a2631a920199dc0ec890b9dfb6dc675393a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:49:5a:e7:7c:0d:ac:a7:3e:03:07:83:3d:
45:df:81:aa:43:ad:24:16:fb:7f:7b:35:a4:b6:27:
23:a1:37:6c:cc:64:22:65:32:5a:5b:91:09:b6:41:
51:80:31:29:9a:c6:79:94:0c:fe:4e:1a:f8:5b:e7:
a6:01:bb:04:b6:1f:eb:b2:32:4e:3b:2d:75:c5:45:
db:45:5a:56:c4:ea:9a:f0:f3:7e:00:4c:e6:d5:b8:
76:87:61:3a:e3:f9:94:aa:1b:c0:f4:13:c4:40:eb:
2b:4b:f6:80:a5:e1:52:9f:a8:67:a1:70:95:73:d5:
83:ac:51:a4:18:30:c6:39:4a:46:61:2f:d9:24:8a:
a1:22:c6:25:9b:e7:05:e0:5d:38:f0:24:23:31:c1:
c9:07:ea:09:72:ec:cb:17:5f:16:74:45:ff:1d:41:
f9:34:78:54:94:3f:62:ca:66:e3:d3:11:72:0b:44:
c3:90:2c:94:fb:e9:49:67:0d:01:f1:59:6d:ff:74:
ad:2e:6f:98:ac:1f:90:5c:80:9a:cb:29:c6:bb:36:
17:e2:42:70:a7:af:a9:a2:af:42:74:5d:49:61:a5:
80:67:45:0a:a5:fb:3e:d7:84:46:14:46:2e:5a:60:
16:18:a8:e1:85:53:33:c0:94:e6:fb:f7:91:ee:be:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8A:1A:26:31:A9:20:19:9D:C0:EC:89:0B:9D:FB:6D:C6:75:39:3A
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:92:ce:8c:a7:b2:05:72:20:36:fb:40:5e:0e:53:96:45:2e:
7d:4f:6f:be:1b:20:a0:53:eb:cf:18:3f:77:e0:1b:68:ef:81:
9a:f2:ec:98:15:e3:63:2f:e5:cb:a7:07:58:d4:76:41:2b:3e:
e8:ff:55:09:01:12:05:3e:b3:00:7d:a0:89:ea:58:85:42:2e:
27:44:d6:b0:a7:39:62:5b:31:b0:af:92:20:67:fa:92:6b:33:
b1:e6:96:cc:8c:f5:10:cf:32:7c:f6:05:a1:2a:59:88:05:82:
d7:a6:d6:02:13:86:0e:7c:45:c1:0c:00:fc:26:35:30:d4:16:
7c:14:54:5f:5b:db:6e:ce:4f:59:f2:ce:78:63:88:a9:32:0f:
75:cf:1d:5a:fc:a1:3b:7e:29:8f:e2:8e:96:bc:a5:7b:d0:1f:
3c:80:52:84:71:67:da:19:dd:c1:10:bb:49:7d:5f:68:94:b8:
9e:ed:72:51:9d:85:72:ef:92:e6:e3:b0:97:a3:3a:da:b2:03:
76:e9:0d:76:52:71:78:82:ea:5f:90:50:8e:29:4e:81:10:0b:
5c:fd:be:63:07:f8:d7:85:8b:60:75:7a:f7:20:79:df:ee:eb:
4c:56:8c:d9:94:11:df:05:a5:0e:35:b9:7c:c1:6c:22:46:e7:
63:42:f3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:25 2026 by rpki-client