Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: PD99nJoaC66YnOHMysnBVRtYgRZ7zspdagp+rLaSQbI=
Subject key identifier: 87:8C:48:0D:BF:2F:25:BA:F9:63:AF:EE:EF:C1:F0:38:9A:5E:42:80
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 019E1D90E2EB9BD01400ABF41F912454155C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 14A4
Signing time: Tue 12 May 2026 19:01:34 +0000
Manifest this update: Tue 12 May 2026 19:01:34 +0000
Manifest next update: Wed 13 May 2026 19:01:34 +0000
Files and hashes: 1: Bk9vyq1LgRpU9QeZwN0V_GD5gHw.roa (hash: yNE44jpnjgZHS9ufgLSJ6WIuzBw3d04Exh56Z7CxQ4s=)
2: KKpHDDFH2cfzrNDJZuhoGv_wS_w.roa (hash: ATx2mcVJOEtuVh1BU96vsI8Si7Mn1Bxh+fLVIbYJBSM=)
3: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: +UkYhwdzCJdoHF98KfBwGa1Qo1tejaNmkb5tkAQ+Huo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:e2:eb:9b:d0:14:00:ab:f4:1f:91:24:54:15:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: May 12 19:01:34 2026 GMT
Not After : May 13 19:01:34 2026 GMT
Subject: CN=878c480dbf2f25baf963afeeefc1f0389a5e4280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8d:bb:e8:55:49:67:44:16:cc:8b:98:dd:f1:
46:22:30:70:15:15:6b:e9:5e:29:0b:27:a5:74:c1:
56:ec:7c:a6:31:0d:75:27:9d:92:61:b5:1e:6c:c5:
e6:17:af:68:23:b9:ae:31:58:d0:55:53:1d:6e:3c:
af:7d:73:2c:83:61:e4:6e:f3:b0:36:8b:6c:63:0d:
83:09:2d:29:6a:54:cb:07:e7:e3:8d:8c:46:01:84:
7d:10:94:e9:64:00:34:30:e2:34:88:8b:0f:8b:c3:
ae:c7:a6:5a:f7:7f:42:3e:30:9b:d4:42:11:33:10:
ff:8c:b9:98:1a:5a:96:a4:a7:b5:55:5d:d9:58:40:
dc:63:6d:a8:70:54:fe:39:90:2f:70:70:fb:8c:9b:
ed:ef:77:c0:3f:70:ed:4a:dc:cd:ae:8d:32:ef:61:
06:9d:ed:be:34:f2:7e:ab:14:d2:87:ee:82:3e:4b:
4d:ff:b6:c1:23:4e:e8:a6:6c:f3:73:30:24:39:b4:
97:96:8a:55:8c:2e:20:f9:f4:11:81:98:fb:03:22:
0b:c3:fc:bb:67:ed:21:fa:5c:3a:6f:9e:71:67:b3:
e3:a2:8f:01:51:b9:0e:ee:f9:c6:2e:20:2e:ac:e4:
5a:b8:d8:f3:55:e0:04:06:ae:3a:9f:d2:94:ba:df:
29:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8C:48:0D:BF:2F:25:BA:F9:63:AF:EE:EF:C1:F0:38:9A:5E:42:80
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1f:ac:50:df:b1:c3:23:ee:94:23:a2:ac:15:36:1d:ba:9b:
09:76:ba:81:fa:86:2e:99:c9:0a:5a:ab:02:20:bb:cc:2d:c8:
f0:f5:23:0d:d7:dd:ff:4c:b0:1a:8f:09:af:f0:37:64:7b:aa:
fe:6a:96:a2:b9:d1:3f:52:60:c1:11:a6:43:77:f9:4b:14:51:
5b:50:02:74:50:8b:ea:2a:a6:c2:b5:e1:26:ee:7c:6d:d0:89:
e5:17:a0:a2:57:5e:d7:7c:77:de:e5:da:01:a0:f9:5e:a2:bf:
c7:5d:37:cb:7c:20:6f:6f:b3:5a:e6:93:b2:b2:3c:26:d2:d7:
d4:9e:c8:29:f9:c5:7b:2b:0f:53:e3:e4:28:c6:ea:67:5c:94:
38:00:08:18:0e:22:7f:2f:1f:4c:1b:04:5d:54:b2:c5:9a:09:
9b:2b:1a:fd:c2:51:58:a2:a3:7c:37:95:52:ba:eb:b1:6a:eb:
44:07:91:db:27:23:bd:ae:7d:a8:dc:15:1a:7d:e6:8f:1c:a9:
af:dc:d7:3e:cf:d6:23:9d:63:d1:d2:40:20:3f:7e:61:5d:0e:
79:7b:72:f4:72:36:cd:8c:a2:3d:b9:4a:69:de:54:c0:b7:bd:
a0:a9:ce:9e:22:0d:ce:70:3c:40:fa:ca:87:8f:4c:3c:6d:40:
02:16:0f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:58 2026 by rpki-client