Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
File: MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft (raw, json)
Hash identifier: kA1GGRfKN7BIC4kQSxAtg2xfeGQ2nD8GW5T8m6013Yg=
Subject key identifier: FA:BB:5C:92:09:DF:FD:D8:16:91:3B:44:17:FD:A3:C8:81:8E:B6:75
Authority key identifier: 30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
Certificate issuer: /CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Certificate serial: 019D284DF5796990FA7D39FFA70794116922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
Manifest number: 16FB
Signing time: Thu 26 Mar 2026 04:01:30 +0000
Manifest this update: Thu 26 Mar 2026 04:01:30 +0000
Manifest next update: Fri 27 Mar 2026 04:01:30 +0000
Files and hashes: 1: MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl (hash: Efxc/nSYjYI3c8bkbvf+unZD1X8Bjh5sY16XnAcU1qY=)
2: Yu04gumNqmxDDsAMYIJ-hffsWcY.roa (hash: 8vXideqaEPDtO6JjBhHN3fg9eNVSWDG1rxsZHPrJ598=)
3: xxNKD__MfC3tXrljCZUMrUeng0c.roa (hash: FfDe8iy9Ky+2+Rcak20KsuzuWHSUYNBDy8CSykrzm6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:f5:79:69:90:fa:7d:39:ff:a7:07:94:11:69:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Validity
Not Before: Mar 26 04:01:30 2026 GMT
Not After : Mar 27 04:01:30 2026 GMT
Subject: CN=fabb5c9209dffdd816913b4417fda3c8818eb675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:5f:96:66:37:a3:51:86:d2:0f:e7:db:68:
31:42:02:63:cc:ce:73:2c:ed:e2:a8:dc:d9:38:e0:
6f:81:0c:74:2c:f6:ab:49:ce:da:65:47:25:7b:43:
15:d5:49:8d:48:be:dc:f3:07:21:a4:76:f1:38:95:
5a:c8:ac:70:bd:04:7d:13:ee:bb:7c:22:89:90:92:
0f:e4:a5:d3:b8:15:bc:88:5b:10:d1:f8:a8:0a:db:
8b:2a:46:1d:9a:9e:2e:bf:11:5f:05:69:68:e1:f2:
08:ed:7d:9c:95:70:c4:53:43:88:f2:8f:91:0a:f9:
e1:1f:4b:7c:d1:e9:26:29:34:61:d8:1a:d0:51:19:
45:19:24:db:f9:42:5d:44:73:d2:1f:f8:2d:23:33:
0f:2a:7c:42:41:e4:5f:b9:33:10:ed:c7:3d:4d:2b:
cc:bf:05:0c:a1:17:24:5d:ce:86:df:cc:8d:67:09:
03:60:47:14:13:b0:49:47:e4:79:11:ba:83:f8:d2:
62:94:e5:b8:b9:a0:5d:23:f6:9e:32:09:3d:5b:4f:
a1:1d:56:12:5d:7e:72:76:26:a1:72:d6:a0:b1:57:
bc:d8:97:ca:05:d1:f4:fa:92:bc:0f:aa:b3:26:20:
c6:82:06:86:38:79:f0:dc:3d:65:fc:c3:54:77:f7:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BB:5C:92:09:DF:FD:D8:16:91:3B:44:17:FD:A3:C8:81:8E:B6:75
X509v3 Authority Key Identifier:
keyid:30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:df:2b:42:86:2e:ce:6c:1e:25:8a:13:75:78:20:7d:d5:21:
88:78:e0:97:59:89:2d:3d:ee:ae:dc:90:37:5b:fb:de:28:e6:
56:56:dd:a0:64:9e:7b:b7:75:ff:a9:14:55:46:30:10:1c:c5:
6a:38:e2:1e:a1:4e:11:5f:6b:a9:36:4d:d9:43:13:f5:1d:4a:
8c:8f:d7:e0:de:a3:36:ed:22:14:1c:59:b2:1c:d4:6f:f5:4c:
5d:b8:1f:23:60:c8:90:3f:e9:7b:fc:f3:42:b8:d6:ca:01:1d:
04:c1:e8:56:1a:9a:c1:54:76:2f:e3:6f:d1:66:31:a0:90:80:
54:8e:71:03:62:b7:a6:9f:f2:b9:06:6b:31:36:5a:67:47:1a:
8f:5d:61:fb:b4:d5:ff:a2:a8:8c:25:1f:c9:37:54:6c:6f:3c:
8c:a4:62:37:04:ba:e4:3a:9f:8e:db:a5:59:19:2f:1a:83:df:
db:72:7e:d1:37:39:0c:a4:67:2d:d4:e2:9e:70:87:20:36:db:
ae:f5:da:21:82:71:d7:86:8a:1d:b7:fe:93:05:1b:cb:f9:a8:
7e:92:f5:40:70:85:07:d0:67:c6:40:97:41:37:9d:a1:ee:ac:
c9:63:8a:c0:e8:38:44:b3:cd:3a:d0:cf:07:61:f4:92:cf:9e:
4e:62:0d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:47 2026 by rpki-client