Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: J4jPY+XSLggUxDD5+kcFwthZElJJQzLszTf3TcPl6Og=
Subject key identifier: 13:35:B1:92:6C:A7:93:54:B5:F6:48:C7:BC:24:A2:3F:4D:0C:9B:48
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 01A1DD5E498D5423EED86709210B9D51ABC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 1695
Signing time: Sun 15 Nov 2026 04:01:46 +0000
Manifest this update: Sun 15 Nov 2026 04:01:46 +0000
Manifest next update: Mon 16 Nov 2026 04:01:46 +0000
Files and hashes: 1: Bk9vyq1LgRpU9QeZwN0V_GD5gHw.roa (hash: yNE44jpnjgZHS9ufgLSJ6WIuzBw3d04Exh56Z7CxQ4s=)
2: KKpHDDFH2cfzrNDJZuhoGv_wS_w.roa (hash: ATx2mcVJOEtuVh1BU96vsI8Si7Mn1Bxh+fLVIbYJBSM=)
3: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: IVY1x7k2B37teuGpyJ239lW7v7sbTDsr8A26fOoGEa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:49:8d:54:23:ee:d8:67:09:21:0b:9d:51:ab:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Nov 15 04:01:46 2026 GMT
Not After : Nov 16 04:01:46 2026 GMT
Subject: CN=1335b1926ca79354b5f648c7bc24a23f4d0c9b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:16:25:3e:b7:33:7a:2b:6c:9a:1d:ac:c7:
7f:af:5c:07:ff:52:7a:ef:5d:01:c5:78:26:e6:a9:
43:c4:94:10:ab:cb:45:18:d8:e9:48:9a:17:35:b8:
f5:cd:4a:5b:6f:e6:99:28:55:7e:5a:f6:a0:e4:02:
a8:62:1e:e5:a6:de:27:a2:3e:8d:1b:68:eb:91:e9:
2e:6a:19:29:13:fe:cb:d1:42:4f:9e:7f:cc:04:25:
0c:27:3a:b2:9c:72:80:49:32:e5:00:75:b7:70:35:
b4:ac:51:8a:96:c6:c0:fb:06:37:cc:e9:8d:f9:86:
c1:0a:b3:9b:9b:5b:75:d1:2f:ef:ea:ca:a4:88:d8:
40:c1:f0:62:31:d0:8e:3b:30:d9:0a:37:fe:3a:d9:
26:66:76:36:77:2d:9d:c1:67:b4:8f:36:2e:c9:ec:
87:67:ce:e5:60:d9:f0:76:2b:8a:26:0f:6c:2f:af:
36:c6:a6:ab:df:d0:98:d7:49:85:a4:84:64:a9:92:
55:5f:64:39:cc:19:c9:ed:d1:fd:e5:bc:25:60:fc:
cd:54:09:16:84:7f:71:9a:d6:c1:a9:92:aa:50:db:
75:be:46:67:a5:47:84:65:28:83:c1:51:ce:ac:8a:
04:da:35:7e:7a:16:14:34:ec:55:a4:e2:8f:82:e9:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:35:B1:92:6C:A7:93:54:B5:F6:48:C7:BC:24:A2:3F:4D:0C:9B:48
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b1:4e:3a:bd:1c:53:39:bd:20:f5:f3:da:ba:80:a5:a3:13:
d3:47:3f:67:db:64:b1:5f:3a:26:df:bf:22:fb:82:3f:87:21:
91:8f:14:f3:5f:4b:db:e7:be:ce:b9:20:fc:c5:7b:b4:f5:0e:
ef:7c:47:ba:33:e4:61:be:2c:91:15:3e:3b:f9:9c:7e:0d:3f:
75:26:2f:1d:21:7e:ee:12:d1:ac:9f:6a:9b:7b:ed:1e:d2:a9:
0e:13:05:6d:36:63:d3:16:1c:0e:39:66:8e:11:58:b7:1b:f5:
ff:ea:54:21:3f:be:be:9a:9b:9f:a1:77:ae:71:0b:b6:bc:a4:
2b:4d:67:29:b8:f9:de:0e:74:ba:02:d9:ac:22:a2:9c:5b:9c:
b5:c6:a4:8d:84:9d:78:31:63:16:d6:1a:62:c4:c9:b0:57:90:
3b:89:13:35:0f:64:06:61:b3:59:88:18:6d:fd:a7:4b:ec:5e:
a0:0d:6d:16:77:48:7f:64:f9:a1:b9:3c:7a:64:03:55:7c:26:
ff:bc:2f:f4:8a:31:a3:8c:b8:f5:2a:e2:a6:cd:20:46:83:c0:
2c:4b:bd:b0:a0:19:b0:d8:4a:c9:ca:e5:c8:6f:a9:99:12:0e:
3f:3c:9e:e3:cb:b7:f2:d5:96:03:a2:fd:1f:48:8b:45:0e:71:
f5:9d:36:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:35:14 2026 by rpki-client