Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: tE1SqrHgh45HYhIXPeTjMcVFT1vyLh6UvCDcuaHcmJo=
Subject key identifier: 07:D9:DD:E2:F1:49:F5:54:51:12:00:2F:AF:F5:14:F0:8C:F8:A7:63
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 01A0D3EF8E092598C2EF4602DB2FED31D551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 0A8C
Signing time: Thu 24 Sep 2026 15:01:26 +0000
Manifest this update: Thu 24 Sep 2026 15:01:26 +0000
Manifest next update: Fri 25 Sep 2026 15:01:26 +0000
Files and hashes: 1: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: 0inq/aKL6ncnDvpAnx/IYXFxIr1O2VG6B6T7xgesgC0=)
2: RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa (hash: rLSLw6+T+Et0d1Efgq167+zRkvB4aSf6ep1NRZLeTMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:8e:09:25:98:c2:ef:46:02:db:2f:ed:31:d5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Sep 24 15:01:26 2026 GMT
Not After : Sep 25 15:01:26 2026 GMT
Subject: CN=07d9dde2f149f5545112002faff514f08cf8a763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:97:b4:58:9a:4c:f2:30:90:8f:11:ac:c9:
a7:14:dc:e5:0c:6c:7c:a7:4a:40:d3:e8:9e:b7:4a:
31:63:d3:a2:54:4f:b2:fd:39:c6:d1:c5:a5:db:85:
52:44:ef:cb:93:23:9b:5d:c4:3d:3d:f5:e2:a7:9e:
6a:ea:9e:89:c3:ad:9f:08:79:4f:52:15:1a:6f:e5:
9e:7d:32:e5:c4:ca:ab:2a:ae:51:8a:e5:56:f8:aa:
28:0f:2a:06:d4:ea:2a:4d:5c:b0:3a:49:e5:56:54:
84:89:b7:07:46:d3:08:e9:36:a2:af:6d:24:35:43:
f7:53:2d:06:f8:7c:00:c6:3b:0d:5a:11:1a:78:b3:
4f:cd:22:05:d2:8a:fe:b3:80:36:a8:92:13:95:95:
c7:ca:9a:a0:8d:75:da:41:bf:d7:1f:c5:b2:18:51:
53:b7:29:cc:aa:2a:b8:e3:6f:fc:ad:13:5b:c7:2e:
d5:6e:a4:1c:6d:7f:9d:03:2d:fb:bd:06:0e:a2:1a:
51:69:e8:b1:d4:ce:5a:b0:54:46:eb:4f:cb:3e:61:
84:9d:21:22:1e:e6:21:1a:16:8d:32:c3:32:3a:82:
19:7e:cc:e2:26:cc:23:4e:7b:2c:70:46:07:d6:4f:
f9:87:59:45:45:12:a3:e5:3a:7d:00:1a:1e:78:db:
1a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D9:DD:E2:F1:49:F5:54:51:12:00:2F:AF:F5:14:F0:8C:F8:A7:63
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ef:ff:e8:04:0d:2c:f4:7a:78:91:18:5a:60:8f:00:d0:7f:
ab:46:1d:52:ec:86:bf:d3:ba:89:d6:35:8a:35:00:f5:2d:55:
20:bd:be:e8:c4:90:48:82:0e:34:c5:5c:ca:95:6d:80:13:62:
50:74:64:a0:81:5b:77:79:70:ae:c1:05:58:e4:bf:7b:de:f8:
35:20:94:2c:e2:c8:e6:9e:94:fb:ff:3e:b0:8c:1a:9e:df:a2:
fd:f0:72:61:51:be:80:7b:b3:a4:2a:c8:a7:23:82:8f:d4:d1:
4e:35:a8:31:75:aa:42:04:96:be:c4:67:ca:6d:0b:44:31:35:
b6:13:f4:b9:ae:b4:a5:c2:f3:e7:4c:80:ff:c7:94:85:3d:13:
bc:1c:55:04:27:d8:f8:7d:1c:04:87:e1:a6:bf:e3:3f:c6:df:
c5:30:47:ab:96:61:94:c4:30:e7:db:ee:1e:a8:06:8c:18:b0:
ef:e9:86:7f:32:10:bc:69:41:a8:a2:55:b6:de:52:57:dc:e4:
fe:60:6b:46:0c:a2:6f:1a:90:cc:74:44:e2:96:b2:eb:37:b1:
ec:d3:c7:b9:0f:2f:6a:34:fb:da:a4:b4:9c:33:cc:83:9f:a5:
5c:a4:8b:8b:8f:53:f0:f1:cc:e5:97:b4:f7:4e:0e:25:ce:c1:
6a:78:22:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT744JJZjC70YC2y/tMdVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDZiMWQyMDdiNjVjMGViZDNmMjNmYTc2MzAwMTZkODdi
NDEzNDkwHhcNMjYwOTI0MTUwMTI2WhcNMjYwOTI1MTUwMTI2WjAzMTEwLwYDVQQD
EygwN2Q5ZGRlMmYxNDlmNTU0NTExMjAwMmZhZmY1MTRmMDhjZjhhNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pCXtFiaTPIwkI8RrMmnFNzlDGx8
p0pA0+iet0oxY9OiVE+y/TnG0cWl24VSRO/LkyObXcQ9PfXip55q6p6Jw62fCHlP
UhUab+WefTLlxMqrKq5RiuVW+KooDyoG1OoqTVywOknlVlSEibcHRtMI6Tair20k
NUP3Uy0G+HwAxjsNWhEaeLNPzSIF0or+s4A2qJITlZXHypqgjXXaQb/XH8WyGFFT
tynMqiq442/8rRNbxy7VbqQcbX+dAy37vQYOohpRaeix1M5asFRG60/LPmGEnSEi
HuYhGhaNMsMyOoIZfsziJswjTnsscEYH1k/5h1lFRRKj5Tp9ABoeeNsanwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfZ3eLxSfVUURIAL6/1FPCM+KdjMB8GA1UdIwQY
MBaAFDIGsdIHtlwOvT8j+nYwAW2HtBNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdheDBnZTJYQTY5UHlQNmRqQUJiWWUwRTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82OTNmZTItZmJhZi00MzBmLThhMjIt
MWJhZTkzY2ZhMDc4LzEvTWdheDBnZTJYQTY5UHlQNmRqQUJiWWUwRTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy82OTNmZTItZmJhZi00MzBmLThhMjItMWJhZTkzY2ZhMDc4
LzEvTWdheDBnZTJYQTY5UHlQNmRqQUJiWWUwRTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQu//6AQN
LPR6eJEYWmCPANB/q0YdUuyGv9O6idY1ijUA9S1VIL2+6MSQSIIONMVcypVtgBNi
UHRkoIFbd3lwrsEFWOS/e974NSCULOLI5p6U+/8+sIwant+i/fByYVG+gHuzpCrI
pyOCj9TRTjWoMXWqQgSWvsRnym0LRDE1thP0ua60pcLz50yA/8eUhT0TvBxVBCfY
+H0cBIfhpr/jP8bfxTBHq5ZhlMQw59vuHqgGjBiw7+mGfzIQvGlBqKJVtt5SV9zk
/mBrRgyibxqQzHRE4pay6zex7NPHuQ8vajT72qS0nDPMg5+lXKSLi49T8PHM5Ze0
904OJc7BangivA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:18:45 2026 by rpki-client