Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: d4Ajz/OI98QjzAl4nebAVFGSbVESogxN6FLB8J3qPLc=
Subject key identifier: 26:37:F6:38:49:9F:1D:B3:E4:64:34:3A:54:16:A4:CE:AB:E4:38:7D
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 019D258332B296348496F4FB93C710F082F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 08A4
Signing time: Wed 25 Mar 2026 15:00:48 +0000
Manifest this update: Wed 25 Mar 2026 15:00:48 +0000
Manifest next update: Thu 26 Mar 2026 15:00:48 +0000
Files and hashes: 1: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: igd++6dNX/RVjGzoRhbt0vIIh+gWRRjXlKJSHY1IY0U=)
2: RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa (hash: rLSLw6+T+Et0d1Efgq167+zRkvB4aSf6ep1NRZLeTMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:32:b2:96:34:84:96:f4:fb:93:c7:10:f0:82:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Mar 25 15:00:48 2026 GMT
Not After : Mar 26 15:00:48 2026 GMT
Subject: CN=2637f638499f1db3e464343a5416a4ceabe4387d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:66:f1:8b:9b:4e:bf:a7:72:46:34:db:38:fd:
2b:c3:ad:46:98:13:35:ee:17:f3:cd:34:60:6f:21:
b2:07:c6:98:30:2e:e6:a7:6b:de:c0:60:6b:7b:3c:
f6:9a:6d:36:f3:fa:da:21:25:09:f7:b5:61:4a:17:
34:69:05:7b:0d:d0:89:1c:ed:d5:8d:86:da:38:f0:
7a:84:65:b9:2e:c1:db:89:82:ce:83:0b:7b:82:ee:
15:fc:d0:29:7e:42:bf:10:77:d2:0a:a8:e1:9f:8d:
75:26:08:21:dd:c7:11:63:b9:34:a0:f4:2a:d8:e3:
fe:1b:b6:95:c5:e3:00:1b:6f:bb:03:1b:88:e8:3d:
95:d3:94:2d:10:74:53:91:3d:57:eb:6d:f1:47:f2:
f9:12:de:b0:2a:c8:36:dd:6c:bf:ca:17:06:98:ef:
e8:7e:b4:e8:59:dc:3c:38:27:83:ce:1f:1e:85:e7:
e7:3b:38:f6:ed:2b:bc:90:a5:80:b2:27:49:65:7e:
17:a5:7e:31:92:af:f9:b5:9b:d2:28:13:fc:5b:65:
f5:b4:0c:57:fc:70:c3:81:35:71:83:52:2e:29:59:
1f:4c:d1:cb:92:ef:36:4d:9b:cf:c7:43:24:82:3b:
89:20:6a:86:c8:f3:1d:03:1d:58:7f:bc:08:8b:a8:
bc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:37:F6:38:49:9F:1D:B3:E4:64:34:3A:54:16:A4:CE:AB:E4:38:7D
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8f:bd:c2:38:f6:ea:47:2e:b2:2b:5c:33:eb:7a:07:c5:de:
b3:09:4a:c4:96:9e:f8:0e:78:c3:e1:6a:74:1f:ea:78:2e:b7:
b0:48:36:5d:3e:c9:6a:12:1f:5a:98:6a:ea:8d:3d:39:01:97:
af:fd:d1:86:67:a5:99:e4:2e:44:07:0e:bf:2f:3b:01:e6:97:
e0:51:dc:48:ef:aa:86:7b:a7:cb:b3:c2:c8:cb:d4:45:b2:63:
b8:cc:b6:ed:d6:ef:8c:ae:e4:8d:58:eb:84:9d:9c:66:90:cc:
31:15:48:90:67:26:71:c0:bb:7a:c9:c3:a7:fe:81:41:01:e9:
c7:02:a2:e3:fe:f0:33:3e:d7:0d:31:b3:2a:38:1c:44:fd:12:
00:a7:7d:fe:8b:22:a1:5d:7f:e2:f0:3a:22:47:48:22:64:78:
d2:21:66:ff:c4:86:04:93:09:45:b1:21:f0:f7:e5:3f:99:f0:
17:e4:3f:98:5c:42:7d:00:34:e0:72:40:c2:2e:5b:6c:c0:34:
28:f9:13:ec:84:16:6c:22:60:98:f3:8a:32:3a:c1:85:87:0b:
f5:bd:fa:aa:5f:26:8e:52:d7:5a:4a:ad:a4:a8:39:cd:47:5d:
2a:e3:97:ca:f9:3d:c0:55:43:c4:96:2f:21:34:3d:76:82:e1:
80:3d:34:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:42 2026 by rpki-client