Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: Ei3GYjcHLjEtnbhg0luA5rlQ37jbkVuPG/DbyG14yZI=
Subject key identifier: 5A:72:DF:52:20:5F:98:CD:D1:7D:36:78:70:25:FE:D6:08:B1:D0:98
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 01A1DE712E7B3A57A55DF01CF9F2AF03367C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 0B16
Signing time: Sun 15 Nov 2026 09:02:01 +0000
Manifest this update: Sun 15 Nov 2026 09:02:01 +0000
Manifest next update: Mon 16 Nov 2026 09:02:01 +0000
Files and hashes: 1: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: uIfWW2vXFkDoX54aiyo2OFnvmTww7QVrFcYjlLVFz/o=)
2: RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa (hash: rLSLw6+T+Et0d1Efgq167+zRkvB4aSf6ep1NRZLeTMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:2e:7b:3a:57:a5:5d:f0:1c:f9:f2:af:03:36:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Nov 15 09:02:01 2026 GMT
Not After : Nov 16 09:02:01 2026 GMT
Subject: CN=5a72df52205f98cdd17d36787025fed608b1d098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:6f:c9:b9:40:f1:be:c1:65:fc:70:41:96:
71:e6:5c:ba:7b:c9:b3:e8:b2:8b:4f:7c:a1:c4:a9:
ce:95:d9:6c:73:3a:f0:9f:b7:30:ab:f3:b2:ad:30:
26:44:51:76:b8:94:cb:69:f0:21:f8:4d:04:82:93:
8e:fe:88:0c:e1:c5:6f:14:6e:5b:05:d0:19:ba:bb:
16:75:a2:fc:8d:91:f3:b7:ff:36:40:90:67:3d:cf:
32:8d:c6:1e:67:c5:7d:80:18:b9:e4:d0:bb:49:c6:
72:05:3a:8c:2b:72:68:c7:9b:81:c6:cc:08:5a:37:
6e:5a:8d:fe:af:e5:b4:52:0e:e9:1f:a8:72:fd:b6:
26:6b:7a:0c:3b:76:bb:66:1f:a7:7e:d3:5e:30:9e:
6c:7e:a9:30:e3:dd:d5:62:9e:5b:5c:2e:10:33:ac:
b5:b7:98:8e:2b:7b:5f:ec:33:cc:ee:aa:e5:59:a0:
48:5c:2a:42:bb:60:d4:41:4b:75:f6:99:74:41:d5:
99:6b:23:ce:97:75:b1:9c:45:db:f0:f1:75:e6:8b:
0c:fe:5c:ee:33:ef:47:ff:49:ba:4f:cf:f3:04:dd:
21:5c:1e:6a:71:f5:2f:e1:70:53:37:e8:60:d9:18:
7e:d3:c8:88:6f:66:c0:9c:c9:23:15:9f:da:e2:ee:
a2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:72:DF:52:20:5F:98:CD:D1:7D:36:78:70:25:FE:D6:08:B1:D0:98
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:06:fa:e6:bd:dd:fb:4f:1b:1b:48:53:95:e8:ff:64:44:16:
a6:f1:bd:e9:f7:6c:2b:4b:50:9d:08:29:46:07:aa:28:0b:ab:
cf:07:9b:5a:5e:3e:2c:65:66:b3:19:86:b0:d2:7c:85:6e:bf:
3e:1c:fc:92:dc:14:e5:3e:b1:78:b8:df:8d:bc:91:20:4a:9c:
c0:3b:1f:d9:d4:22:ab:bc:71:29:2d:79:30:3d:10:33:0f:f3:
33:2a:38:ab:7f:83:e0:14:94:e0:91:96:e0:63:06:14:5c:fc:
dc:69:ae:68:ec:dd:39:81:3a:13:4d:9a:0b:9c:8c:3e:8d:96:
32:40:46:a4:74:da:c6:ef:6a:9d:82:83:b2:38:f6:41:7e:df:
59:40:71:66:74:f1:93:dd:70:25:52:8e:78:03:76:c0:8c:cb:
de:cb:07:8c:42:1f:90:04:32:13:49:ae:59:a8:a4:f8:a3:78:
f6:a9:01:5a:1b:b9:1c:3d:6c:39:fd:ee:1e:24:9b:e0:dd:1d:
54:68:61:0f:85:8d:47:44:4f:74:13:4f:ce:f4:79:40:96:c8:
34:83:2b:f7:4d:ac:1d:5a:15:1e:cb:d4:26:b6:d5:cf:19:21:
3b:af:d8:e9:2f:eb:96:e2:c7:cd:af:f2:cc:60:97:38:2f:6a:
e4:9e:79:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:09:32 2026 by rpki-client