Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File: mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier: nCESQRMgqxO6PFIx23gzSFlNRvPCeQqBMBDlOcbinuI=
Subject key identifier: 3B:40:F2:0F:41:9E:60:96:37:41:3B:B0:D5:A7:17:D0:37:31:9A:18
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial: 019D284D739F4FC14B33D8502697ECF543E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number: 0F65
Signing time: Thu 26 Mar 2026 04:00:57 +0000
Manifest this update: Thu 26 Mar 2026 04:00:57 +0000
Manifest next update: Fri 27 Mar 2026 04:00:57 +0000
Files and hashes: 1: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: zFZliBG+6nlE/+t0V+Lsno44DVAKEM4ZZtall6ocr0g=)
2: pgk6nsI3cK4BMyAq4yo3QkbL4pU.roa (hash: FD9gDw7QMQ6LHr1l8voFmg+wOG9WJ0q/3TSPnokXHZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:73:9f:4f:c1:4b:33:d8:50:26:97:ec:f5:43:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Validity
Not Before: Mar 26 04:00:57 2026 GMT
Not After : Mar 27 04:00:57 2026 GMT
Subject: CN=3b40f20f419e609637413bb0d5a717d037319a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:1d:94:bf:92:d6:e4:8f:32:ea:aa:86:f8:
b6:9e:d0:4c:15:3e:09:27:b7:1b:7a:5b:44:3f:73:
95:03:f0:50:62:2c:5b:ef:f9:b2:6b:5a:88:40:e8:
5f:1f:55:b1:05:b4:e6:f2:44:d9:ff:56:08:62:24:
29:e1:61:f5:7d:28:61:ce:2a:02:66:57:f3:48:a2:
58:0d:bb:52:22:d3:49:f0:42:58:53:ad:76:c7:67:
16:e7:e3:e9:6b:8e:04:2c:46:58:b9:16:09:90:e7:
4e:40:2b:f4:e4:af:bf:b2:2d:ae:3c:21:ba:3f:d8:
85:29:6d:01:b0:21:3d:5f:9c:8e:56:d3:c2:42:1c:
74:1b:98:b2:6d:1f:23:e4:be:38:7f:68:d5:8c:1f:
55:3c:cb:7a:5d:30:07:41:af:54:3b:05:d4:f0:aa:
45:42:25:fc:8f:fe:d7:47:da:fe:80:81:37:15:19:
fb:23:9b:a7:77:21:0f:39:d4:c9:96:6e:dc:4b:54:
24:55:ba:85:45:cd:8e:17:01:61:a1:a6:ed:cb:bf:
c8:d7:e3:4c:1f:f6:fe:6e:e5:52:c8:68:f9:cf:31:
60:4c:43:4c:6c:40:bd:28:74:77:88:59:99:af:2e:
41:7a:af:71:e8:6f:1b:65:1a:9d:4e:49:70:44:b0:
e6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:40:F2:0F:41:9E:60:96:37:41:3B:B0:D5:A7:17:D0:37:31:9A:18
X509v3 Authority Key Identifier:
keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:66:38:0c:66:ae:47:1b:75:bb:0d:44:e2:c7:96:54:d9:e5:
cc:48:a8:68:39:ca:76:15:a2:97:2f:5d:e3:22:a7:60:57:0e:
11:69:54:6b:6c:e8:a5:03:7b:3d:ba:82:82:37:78:5c:0b:97:
97:78:f5:8a:17:a6:9b:cf:0a:7d:48:29:02:1a:98:5f:a3:48:
99:56:58:e4:02:27:02:a4:c1:6b:c6:c2:02:92:f3:c6:b6:32:
a6:68:48:42:95:ae:a7:d4:ea:96:20:13:d9:01:68:89:23:72:
b0:98:7f:b8:fd:af:41:b6:e8:88:45:ea:e8:b8:af:37:aa:b3:
35:db:9d:54:fb:ea:79:76:bc:76:21:be:d6:85:a4:31:f8:6a:
da:a8:61:8f:10:c4:c1:f4:5a:fd:6d:11:dc:27:06:51:d0:24:
e8:4f:db:83:f4:33:0c:0e:fe:42:0c:7b:2b:94:29:e1:91:02:
b9:e5:99:4a:5a:fe:9b:00:28:82:58:29:52:0d:f7:e0:63:36:
96:79:96:40:8e:7d:76:7e:42:bc:f5:8d:dd:eb:ac:43:64:95:
5f:26:3c:a4:c1:60:af:0c:6d:a5:12:f0:a4:55:f4:af:37:9a:
b7:0d:2e:99:46:e5:cd:3d:89:13:7c:c3:dc:1e:aa:4c:f4:16:
be:27:6b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:35 2026 by rpki-client