Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: bA1Ke/2Gb/yNk1GP91R32jKMUiTK371WnBiAU8XpSAY=
Subject key identifier: 75:BF:CF:E9:11:57:FD:93:5D:75:C5:40:82:4C:C1:CA:42:19:31:8E
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 019F916DBBB749234FDA9D1D4A6BAE788785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 09E5
Signing time: Fri 24 Jul 2026 00:01:55 +0000
Manifest this update: Fri 24 Jul 2026 00:01:55 +0000
Manifest next update: Sat 25 Jul 2026 00:01:55 +0000
Files and hashes: 1: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: Iepv9bsf4CODIy/91P1cg0zS/MmvvdgzP+ONsDyAqbo=)
2: RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa (hash: rLSLw6+T+Et0d1Efgq167+zRkvB4aSf6ep1NRZLeTMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:bb:b7:49:23:4f:da:9d:1d:4a:6b:ae:78:87:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Jul 24 00:01:55 2026 GMT
Not After : Jul 25 00:01:55 2026 GMT
Subject: CN=75bfcfe91157fd935d75c540824cc1ca4219318e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:48:48:0e:e4:c1:3d:d6:bc:92:9f:7c:eb:
cf:56:a4:db:22:de:ab:d0:05:13:f4:64:8f:d9:f5:
f8:b5:9f:c1:a4:81:81:4f:4a:72:9f:a1:71:33:72:
de:24:f4:0b:ba:d0:27:82:b2:2f:6d:f3:91:72:8b:
f2:04:df:f5:8c:73:d6:69:a7:72:c4:71:85:e6:13:
5d:07:33:32:31:4e:c4:0c:ed:0e:ab:ea:01:26:fe:
50:ef:52:56:ff:83:c6:57:65:f4:b3:cf:a3:98:12:
3d:78:58:d4:9d:e2:ea:a9:7b:20:f2:49:54:c1:fd:
a0:b1:cf:02:3a:9e:3d:ce:30:6b:1d:a9:4c:1c:5a:
8f:bd:6b:4f:a5:05:3e:19:e4:7b:a0:17:b4:76:cb:
18:92:84:06:b7:07:bc:cd:71:0d:16:33:b4:4f:07:
f6:0c:92:5a:a3:09:4f:bb:37:d7:84:ad:60:03:fa:
1b:10:23:39:84:84:89:c3:3a:22:01:f8:f2:2f:04:
9e:a9:0d:02:b2:a0:bf:33:79:35:78:84:4d:f9:38:
45:15:c0:2b:0f:a2:33:8c:86:af:eb:00:7b:28:af:
d6:d2:ad:69:12:13:7b:95:ba:eb:0f:9b:97:3b:ad:
66:38:1e:95:91:dc:87:8d:86:6c:7b:a3:44:91:6e:
e4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BF:CF:E9:11:57:FD:93:5D:75:C5:40:82:4C:C1:CA:42:19:31:8E
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1a:c7:4e:23:ae:4f:16:90:bb:4c:9b:67:db:36:de:f0:73:
8a:ac:66:28:60:da:86:75:e7:46:80:a2:74:a7:28:e0:ab:51:
85:2d:96:d2:59:ba:ee:6c:b8:fb:58:a3:ae:98:8a:af:19:67:
e9:27:e8:b6:64:a4:c5:3f:c9:4d:d0:48:fd:a8:62:54:93:34:
89:29:f6:b9:e2:5f:5e:07:d3:5d:dd:e8:00:60:0c:1b:56:5c:
24:44:79:5e:38:2f:ee:bd:86:c3:81:fb:a7:e3:da:02:34:65:
ba:14:e4:82:62:70:8c:21:ea:d0:ab:d9:17:58:a8:13:22:90:
9c:e8:79:89:d0:b4:7e:54:f3:69:d6:23:2d:8f:2d:87:92:6e:
8b:36:16:4c:92:28:d6:12:27:b6:32:6f:ba:50:d0:9e:b1:56:
fa:a4:5f:d6:97:a3:f2:cc:d7:eb:af:c1:cf:2a:80:99:30:4e:
c0:6a:aa:50:af:4e:fa:5d:3b:5c:47:fc:1e:9b:53:96:b7:3a:
4d:e2:0a:b8:bf:e3:de:f3:29:03:d6:f9:0d:d3:a3:23:3e:42:
40:2e:ea:60:b8:7e:a7:4f:a6:b8:cf:98:e3:ee:95:33:9e:6d:
19:0e:66:1f:ac:8c:f3:43:df:f3:f4:88:98:52:bf:ed:db:64:
64:40:6a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:57:21 2026 by rpki-client