Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
File: MAGbyB3kqk6yn5tHmBwX8aCyunI.mft (raw, json)
Hash identifier: yHFPAD3tA823XeukTAbB9IhaR4h9QFxEpVRyCEBvkYc=
Subject key identifier: 75:C5:ED:DC:FA:05:A1:2E:79:D0:21:A8:67:F6:6E:81:DF:9D:2B:5C
Authority key identifier: 30:01:9B:C8:1D:E4:AA:4E:B2:9F:9B:47:98:1C:17:F1:A0:B2:BA:72
Certificate issuer: /CN=30019bc81de4aa4eb29f9b47981c17f1a0b2ba72
Certificate serial: 01A0DB3B2DD3695818615669F68B228985A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
Manifest number: 84
Signing time: Sat 26 Sep 2026 01:01:23 +0000
Manifest this update: Sat 26 Sep 2026 01:01:23 +0000
Manifest next update: Sun 27 Sep 2026 01:01:23 +0000
Files and hashes: 1: MAGbyB3kqk6yn5tHmBwX8aCyunI.crl (hash: wjxKPmlTS/NElLQ+BhXsWaYDsmYBaVg/KM537DOsosE=)
2: pNQEQwwSVbDCMLAveVXd1mwHJeQ.roa (hash: dBVLbfqlR4GtBzx1f02M/qqFPs/aMyQuLiXl/XvXTiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:2d:d3:69:58:18:61:56:69:f6:8b:22:89:85:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30019bc81de4aa4eb29f9b47981c17f1a0b2ba72
Validity
Not Before: Sep 26 01:01:23 2026 GMT
Not After : Sep 27 01:01:23 2026 GMT
Subject: CN=75c5eddcfa05a12e79d021a867f66e81df9d2b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:fd:19:3b:d3:4e:f1:89:fa:a7:ad:e6:ee:
4b:1c:a3:ea:b0:95:6c:50:16:ee:2e:fe:44:dc:2f:
3c:ed:39:2a:1b:6b:f3:0b:c0:52:8d:00:0f:87:d1:
01:ff:48:38:8d:27:86:70:ec:70:5b:55:ec:97:bd:
5c:94:b0:91:e7:84:a4:d5:45:83:00:76:0f:f5:2e:
3d:89:c9:58:27:24:a3:62:aa:1f:39:e1:7b:4a:d5:
e9:1d:ce:4f:c9:bb:71:1d:ec:82:a7:29:11:6f:8b:
ba:f8:70:13:43:cb:8b:57:5e:d8:75:ac:8d:23:87:
b8:73:e6:13:4f:4f:ad:0c:da:9d:44:4f:df:69:1a:
f5:37:cf:43:eb:92:ba:e0:c1:7d:00:b7:7c:46:d8:
0b:d3:01:ec:a5:c1:7a:3c:b2:a7:c5:09:3f:9c:a7:
e5:ef:72:05:bc:1b:5e:5b:bd:fb:8b:f3:94:ff:80:
78:87:1b:e8:25:8b:17:c6:c4:8c:fc:36:bc:96:3c:
70:b3:be:11:c5:c3:d7:b3:f5:5b:02:be:29:79:5e:
64:ce:eb:bf:97:7f:34:30:fd:90:14:41:a6:e6:a4:
80:08:75:9e:ad:c7:cd:49:e3:d4:93:bd:bd:5a:dd:
f2:c3:5e:3f:b8:15:f6:eb:81:2e:fa:a5:8f:2d:ca:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C5:ED:DC:FA:05:A1:2E:79:D0:21:A8:67:F6:6E:81:DF:9D:2B:5C
X509v3 Authority Key Identifier:
keyid:30:01:9B:C8:1D:E4:AA:4E:B2:9F:9B:47:98:1C:17:F1:A0:B2:BA:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:02:88:1d:22:de:aa:6a:95:25:d0:6b:32:2f:5e:4e:98:d3:
08:34:c0:8c:6f:b0:11:ea:9f:7a:6b:3c:2c:ba:e3:f6:ef:5b:
ee:46:3b:bf:6c:fc:f3:b2:12:e6:21:c4:06:82:4c:e1:af:46:
e2:bd:5a:14:f9:b2:9e:62:c7:c9:aa:86:c7:52:27:6f:88:95:
6d:74:56:bf:98:bf:15:b7:0e:bc:4c:26:c5:68:9d:1d:d0:a1:
9a:11:93:de:88:2f:99:97:19:9d:17:f0:14:ae:e3:da:1d:e1:
12:05:01:0c:5a:2d:3f:4c:57:ac:bf:87:a0:49:65:a5:51:41:
b0:a4:25:3e:5b:58:25:c9:ab:03:2d:ff:04:62:c6:02:a3:cc:
e8:7c:ce:5b:36:32:a7:2c:c8:7b:b7:5f:ee:2a:18:31:65:c7:
cc:70:b0:a7:94:c9:87:c3:1e:c3:c3:8f:14:2c:75:f8:c6:bc:
f0:26:1b:9a:f8:08:c9:5b:6a:fb:ba:4f:cd:4c:8d:0b:a5:46:
ac:15:4f:16:c2:b8:bc:6a:4c:5d:97:08:0f:24:82:90:47:d5:
0e:84:0e:09:35:b8:9c:7e:9d:01:dc:ba:ef:f8:b1:84:9b:de:
46:39:05:33:6a:81:b3:34:40:95:27:eb:75:55:02:99:a5:50:
f3:2c:3e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:24:51 2026 by rpki-client