Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: 72kEHMdfPjvYB0jQsRs/w46XBkp35tLuQ1OwrnEM7pc=
Subject key identifier: 54:28:C9:07:CD:EF:D3:E1:13:C8:56:39:DA:29:00:71:1B:06:73:FA
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 019E1EA320D81C1F948074943A17D079C9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 0925
Signing time: Wed 13 May 2026 00:01:07 +0000
Manifest this update: Wed 13 May 2026 00:01:07 +0000
Manifest next update: Thu 14 May 2026 00:01:07 +0000
Files and hashes: 1: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: AI9IskEC2uiCZGRBmmknuz7GShyPe0CXh44s8MXwXOk=)
2: RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa (hash: rLSLw6+T+Et0d1Efgq167+zRkvB4aSf6ep1NRZLeTMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:20:d8:1c:1f:94:80:74:94:3a:17:d0:79:c9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: May 13 00:01:07 2026 GMT
Not After : May 14 00:01:07 2026 GMT
Subject: CN=5428c907cdefd3e113c85639da2900711b0673fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:ca:e3:af:37:9c:85:12:63:a2:d4:47:8b:
32:76:30:cf:c8:b3:e9:4c:9c:45:29:36:a7:27:dd:
26:15:41:17:d9:23:82:01:d2:97:17:99:b3:25:14:
bd:32:a4:4d:35:e0:f1:05:4f:6a:df:53:cc:92:32:
3b:cb:5f:a9:d9:e3:d5:d9:e8:c8:ab:8e:fd:c4:2e:
3c:b5:56:2f:30:57:4c:d1:7a:63:bb:76:4a:67:9c:
a7:4c:e7:5b:17:a7:af:25:b6:9b:7a:cf:73:4f:94:
be:4a:39:85:77:18:49:ff:c3:54:cf:7e:b7:07:68:
80:bf:6a:9e:de:13:e0:4c:80:fd:6e:f6:67:76:c5:
c4:41:31:b4:c9:91:d3:a2:e0:f7:2d:e4:32:cc:ba:
a5:90:d5:7c:3f:a1:b7:35:5b:e7:43:b1:99:e1:9f:
de:7f:dd:db:e5:e0:06:eb:06:08:ff:80:28:35:c4:
03:48:58:1c:82:6f:64:bb:73:a7:90:ed:2a:ed:c7:
07:28:b2:c5:20:61:62:6b:dd:6b:62:32:41:d1:bb:
3f:bb:d5:d6:e7:67:3a:22:5c:ea:29:11:d7:97:b6:
b3:f1:a3:1e:62:8e:16:50:c5:c7:dd:64:70:c3:86:
a0:21:b0:73:f0:2d:24:d7:9f:a0:05:22:d4:1f:e1:
ed:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:28:C9:07:CD:EF:D3:E1:13:C8:56:39:DA:29:00:71:1B:06:73:FA
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:83:7e:e5:ae:4d:69:e1:73:98:26:0b:bc:8e:dd:9c:9e:91:
64:2e:4c:5b:3c:8f:ac:34:c3:64:af:cb:f0:47:ba:b1:e7:c4:
d3:62:e9:14:82:bf:cf:45:1e:85:ad:59:c1:05:f3:66:7f:d4:
28:95:0f:89:0c:41:6f:ba:23:ef:64:59:d3:96:7a:8e:13:30:
96:fa:70:17:d9:8d:96:5b:c8:17:b5:cb:a6:ab:3b:62:65:db:
5f:b1:71:61:49:53:f0:7f:39:f7:9b:92:4f:af:18:b0:44:a8:
77:f5:12:15:d1:0e:85:92:ac:de:2b:43:c1:28:d4:f1:cc:b9:
2a:cb:87:c7:93:87:39:7a:f2:6f:99:a1:a1:c9:de:1b:89:1e:
98:fc:a9:f4:3d:bf:04:c2:ec:cd:6f:70:31:79:8c:ed:c0:22:
3e:13:9a:36:9f:d4:80:9f:7e:72:66:15:02:25:9b:1e:0f:c1:
63:19:fc:9c:a4:71:43:b1:ba:bc:74:cf:ee:cd:53:73:84:f3:
7c:67:38:60:1a:e7:75:1d:1b:c9:5c:46:43:f7:d6:1a:b6:1d:
dd:8f:c8:1b:71:7c:c2:45:1c:50:b3:54:27:df:8c:5a:20:e4:
df:32:6b:d1:d6:2d:73:af:4c:0c:ea:a0:3d:02:69:44:9f:b9:
d6:ee:65:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:16 2026 by rpki-client