Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.mft
File: mGpc6Mx8vBzhNJbJgaibw0cufgs.mft (raw, json)
Hash identifier: F656m2lwA3SZBUF/Wo+XaK6BdQuMcQZyEPKKgjtxwcc=
Subject key identifier: 0E:89:E8:0E:90:A6:2E:5A:97:46:4D:B8:FD:F0:BC:B8:39:C6:05:1A
Authority key identifier: 98:6A:5C:E8:CC:7C:BC:1C:E1:34:96:C9:81:A8:9B:C3:47:2E:7E:0B
Certificate issuer: /CN=986a5ce8cc7cbc1ce13496c981a89bc3472e7e0b
Certificate serial: 019D33AD49F58E18A21B0420036C9F898833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGpc6Mx8vBzhNJbJgaibw0cufgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.mft
Manifest number: 9B
Signing time: Sat 28 Mar 2026 09:01:27 +0000
Manifest this update: Sat 28 Mar 2026 09:01:27 +0000
Manifest next update: Sun 29 Mar 2026 09:01:27 +0000
Files and hashes: 1: mGpc6Mx8vBzhNJbJgaibw0cufgs.crl (hash: hkq6jCV1r8wp9xJeHy/kStCeLL9MeIeU4J6HrYM5thM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGpc6Mx8vBzhNJbJgaibw0cufgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ad:49:f5:8e:18:a2:1b:04:20:03:6c:9f:89:88:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986a5ce8cc7cbc1ce13496c981a89bc3472e7e0b
Validity
Not Before: Mar 28 09:01:27 2026 GMT
Not After : Mar 29 09:01:27 2026 GMT
Subject: CN=0e89e80e90a62e5a97464db8fdf0bcb839c6051a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ec:17:03:9d:19:9f:b8:d0:1f:26:36:2c:d7:
be:47:7e:17:a3:93:bc:3e:9c:29:ed:1a:e5:e4:b7:
e3:25:a0:2d:30:54:4f:d3:96:1b:1f:02:dc:92:3e:
8e:ad:53:23:fb:98:47:8e:ca:83:f4:13:bd:b8:3b:
72:eb:8a:e8:d7:a0:e1:27:98:48:5a:fb:1c:1b:61:
6b:cf:9e:fd:4b:6f:a3:8e:9a:95:5f:b1:02:23:b7:
4f:4d:b1:38:55:16:89:16:5d:76:16:da:dc:bd:37:
ce:ee:90:43:21:8c:e6:48:09:a1:93:63:2a:00:75:
8a:12:ea:35:6b:12:fb:44:25:f9:49:3f:9b:29:99:
cc:d7:65:56:f2:80:2d:4b:25:18:dd:26:10:e1:5d:
02:f0:03:f1:ba:35:a7:1c:84:bb:8c:e9:6c:ae:b6:
77:f2:9b:f8:3b:0d:ae:a4:04:61:58:ae:3e:6d:21:
d2:b5:cc:39:15:bc:7f:17:33:c3:72:64:c8:6c:ed:
8a:1b:76:2e:44:11:fb:fd:28:95:63:07:61:67:25:
37:76:30:05:ac:3d:1b:97:b9:09:f8:ab:ae:b5:95:
a2:33:20:95:5d:78:aa:19:fc:ba:a0:17:7c:96:ec:
2f:e0:c7:80:20:24:3a:c9:07:57:b6:9d:f2:e2:6d:
67:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:89:E8:0E:90:A6:2E:5A:97:46:4D:B8:FD:F0:BC:B8:39:C6:05:1A
X509v3 Authority Key Identifier:
keyid:98:6A:5C:E8:CC:7C:BC:1C:E1:34:96:C9:81:A8:9B:C3:47:2E:7E:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGpc6Mx8vBzhNJbJgaibw0cufgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6b:13:33:01:3c:4a:c4:a9:0e:6e:72:d6:7d:ca:fa:74:4e:
6a:b3:98:88:8f:ed:47:9a:3b:8b:a8:2a:1f:98:77:e9:71:0a:
99:eb:fd:4d:76:34:44:03:17:85:67:fa:7e:8d:dd:d3:dd:2b:
3b:37:dc:e2:f6:dd:fd:4b:6d:ee:e7:96:87:54:c3:6d:3a:b3:
3b:b1:28:cf:34:f4:27:88:4c:08:a6:9e:3c:35:c9:82:41:51:
5b:d9:9e:22:74:95:59:d4:b9:62:1c:71:89:cd:e6:e1:d9:be:
43:f5:c9:57:7d:ae:b3:aa:18:82:f7:6d:7b:3e:74:33:00:13:
8c:67:43:fd:9d:55:4f:d4:e1:6f:db:f6:9c:b8:c5:c9:bc:16:
89:7a:42:24:20:85:17:03:13:87:9c:31:04:08:15:5c:2a:e7:
a5:d7:c0:66:c3:05:bd:4d:1c:58:65:7a:f5:14:a4:a8:86:f4:
ac:68:0a:8f:8c:ee:7f:e9:14:0b:e2:31:6a:27:9a:ab:57:c5:
64:96:b3:14:03:52:5f:f5:65:62:6f:16:83:9f:c7:45:f2:f7:
8b:87:f4:aa:20:30:36:25:0c:0a:42:bd:8a:c6:3e:fa:4e:92:
94:a8:00:39:89:46:e9:b8:33:7e:e9:f5:d0:6c:4d:49:79:6a:
5f:19:4f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:38 2026 by rpki-client