
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
File: MAGbyB3kqk6yn5tHmBwX8aCyunI.mft (raw, json)
Hash identifier: Iu2Ig6D1QlTDJEo8mSw/oqQ66HVtW7u+oAIDlZ8znpk=
Subject key identifier: DD:29:80:5A:5E:C7:98:ED:7F:7C:C6:10:D2:17:3C:5C:E4:D7:82:3E
Authority key identifier: 30:01:9B:C8:1D:E4:AA:4E:B2:9F:9B:47:98:1C:17:F1:A0:B2:BA:72
Certificate issuer: /CN=30019bc81de4aa4eb29f9b47981c17f1a0b2ba72
Certificate serial: 01A1DC149824775F20BEC031503730AD8654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
Manifest number: 0109
Signing time: Sat 14 Nov 2026 22:01:39 +0000
Manifest this update: Sat 14 Nov 2026 22:01:39 +0000
Manifest next update: Sun 15 Nov 2026 22:01:39 +0000
Files and hashes: 1: MAGbyB3kqk6yn5tHmBwX8aCyunI.crl (hash: X2pmXEpRnCGP8/Ibpc/p3kTG52eR/4k8uHYU7R9/P8E=)
2: pNQEQwwSVbDCMLAveVXd1mwHJeQ.roa (hash: dBVLbfqlR4GtBzx1f02M/qqFPs/aMyQuLiXl/XvXTiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:14:98:24:77:5f:20:be:c0:31:50:37:30:ad:86:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30019bc81de4aa4eb29f9b47981c17f1a0b2ba72
Validity
Not Before: Nov 14 22:01:39 2026 GMT
Not After : Nov 15 22:01:39 2026 GMT
Subject: CN=dd29805a5ec798ed7f7cc610d2173c5ce4d7823e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:8e:45:fd:87:e0:26:42:ae:25:a8:48:05:
a6:73:84:48:c9:46:19:4c:4f:60:8e:27:d4:a7:e2:
2f:5d:28:d8:ec:37:e9:64:c6:d6:b5:88:28:30:10:
27:43:6b:09:71:89:67:25:c4:27:4d:1e:01:0e:74:
81:a7:a6:37:49:35:98:d5:02:6c:22:4d:d0:ed:77:
83:14:5f:7d:bd:f9:73:9c:05:88:47:15:09:93:66:
aa:4a:54:ea:40:fe:0d:1a:e9:47:b8:5f:1d:57:e0:
45:3c:e9:dc:62:88:5c:00:43:21:06:2f:70:e8:d8:
b4:00:24:a2:6d:7e:12:26:3c:a4:58:a9:d8:e2:d2:
9d:96:59:27:30:7f:08:aa:4b:13:47:a3:2c:e2:f6:
50:d6:72:9c:fa:ff:3d:cb:52:0e:fa:f3:0e:11:bb:
d7:33:8b:f7:15:21:4b:e1:dc:25:5e:15:04:1a:a2:
e3:7e:49:30:1d:89:c2:f5:32:a3:a3:60:f4:d0:e9:
41:1a:d7:73:7f:e3:a1:5b:7e:d7:08:26:90:1f:ff:
31:92:e4:b1:67:37:d1:d3:ab:b9:59:d5:ae:6f:a7:
12:cd:7e:ac:45:72:01:64:14:02:3c:9f:cf:78:12:
2f:2f:7e:b3:58:40:ba:b7:ed:90:34:02:44:c9:85:
3b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:29:80:5A:5E:C7:98:ED:7F:7C:C6:10:D2:17:3C:5C:E4:D7:82:3E
X509v3 Authority Key Identifier:
keyid:30:01:9B:C8:1D:E4:AA:4E:B2:9F:9B:47:98:1C:17:F1:A0:B2:BA:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2b:a5:8b:55:b5:39:2c:15:c2:4f:89:36:fb:55:7a:68:fa:
a9:2b:23:14:26:d6:26:d8:2e:e3:71:62:0d:5c:c2:11:cd:67:
dd:d2:1c:8e:6b:b9:33:2e:20:bd:9f:d3:3d:48:c5:02:1b:12:
b5:51:29:31:66:3b:1d:2f:58:44:47:be:a9:f1:37:6e:bd:b3:
49:6d:c4:84:04:1c:a9:f4:d5:4f:37:0b:2f:c9:5f:0d:8f:84:
83:e3:39:e0:15:e5:99:c0:6e:82:4d:0b:cf:12:f0:67:8f:2e:
34:58:fe:d4:c5:ac:cb:2e:a3:f9:f7:3d:36:a5:2e:df:c0:c8:
0d:3b:02:89:a9:07:ff:0a:72:9f:88:1a:ed:c2:62:9a:47:61:
e6:3f:32:60:0a:0c:be:bc:08:e8:5d:a4:16:09:af:70:64:1a:
3a:7b:8b:42:a9:66:9b:77:69:40:be:e1:1f:95:f1:3c:87:cd:
f8:a8:4e:07:6c:50:d5:b3:84:12:fd:1c:58:59:a9:69:c2:7f:
25:92:40:bf:a6:80:c3:12:d5:e2:e0:77:e4:8b:9d:14:7d:c5:
81:2b:60:ae:07:99:2c:ac:c4:a2:c2:cd:2a:c3:d4:2d:42:08:
96:0e:36:86:9b:81:18:21:43:47:0d:55:42:3f:7c:f6:31:26:
39:4d:d1:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcFJgkd18gvsAxUDcwrYZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMDE5YmM4MWRlNGFhNGViMjlmOWI0Nzk4MWMxN2YxYTBi
MmJhNzIwHhcNMjYxMTE0MjIwMTM5WhcNMjYxMTE1MjIwMTM5WjAzMTEwLwYDVQQD
EyhkZDI5ODA1YTVlYzc5OGVkN2Y3Y2M2MTBkMjE3M2M1Y2U0ZDc4MjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhiORf2H4CZCriWoSAWmc4RIyUYZ
TE9gjifUp+IvXSjY7DfpZMbWtYgoMBAnQ2sJcYlnJcQnTR4BDnSBp6Y3STWY1QJs
Ik3Q7XeDFF99vflznAWIRxUJk2aqSlTqQP4NGulHuF8dV+BFPOncYohcAEMhBi9w
6Ni0ACSibX4SJjykWKnY4tKdllknMH8IqksTR6Ms4vZQ1nKc+v89y1IO+vMOEbvX
M4v3FSFL4dwlXhUEGqLjfkkwHYnC9TKjo2D00OlBGtdzf+OhW37XCCaQH/8xkuSx
ZzfR06u5WdWub6cSzX6sRXIBZBQCPJ/PeBIvL36zWEC6t+2QNAJEyYU7iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0pgFpex5jtf3zGENIXPFzk14I+MB8GA1UdIwQY
MBaAFDABm8gd5KpOsp+bR5gcF/GgsrpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUFHYnlCM2txazZ5bjV0SG1Cd1g4YUN5dW5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yMGFhYjMtMGUxNy00YmUyLTk4NzAt
ZTI5MmQ3YTdhNGIxLzEvTUFHYnlCM2txazZ5bjV0SG1Cd1g4YUN5dW5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yMGFhYjMtMGUxNy00YmUyLTk4NzAtZTI5MmQ3YTdhNGIx
LzEvTUFHYnlCM2txazZ5bjV0SG1Cd1g4YUN5dW5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSuli1W1
OSwVwk+JNvtVemj6qSsjFCbWJtgu43FiDVzCEc1n3dIcjmu5My4gvZ/TPUjFAhsS
tVEpMWY7HS9YREe+qfE3br2zSW3EhAQcqfTVTzcLL8lfDY+Eg+M54BXlmcBugk0L
zxLwZ48uNFj+1MWsyy6j+fc9NqUu38DIDTsCiakH/wpyn4ga7cJimkdh5j8yYAoM
vrwI6F2kFgmvcGQaOnuLQqlmm3dpQL7hH5XxPIfN+KhOB2xQ1bOEEv0cWFmpacJ/
JZJAv6aAwxLV4uB35IudFH3FgStgrgeZLKzEosLNKsPULUIIlg42hpuBGCFDRw1V
Qj989jEmOU3R2g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:12:27 2026 by rpki-client