Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
File: MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft (raw, json)
Hash identifier: jjGrZwSQgp4Aax13FIB6tViqML6Of1pkZbRNat3AoiI=
Subject key identifier: 5C:2D:CD:20:0F:A6:E5:6A:40:EC:D9:98:0F:B7:51:2E:26:19:1A:A4
Authority key identifier: 32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43
Certificate issuer: /CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
Certificate serial: 019D28847ACF2C954D49F7BB9F235F767DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
Manifest number: 086A
Signing time: Thu 26 Mar 2026 05:01:03 +0000
Manifest this update: Thu 26 Mar 2026 05:01:03 +0000
Manifest next update: Fri 27 Mar 2026 05:01:03 +0000
Files and hashes: 1: MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl (hash: hL9Ex/oDXWj0IyR2Bg6LwThQSZDZGsa1dnDwqLHJpQ8=)
2: T-lMXkCMAUn1cSmP84QNKdTnqzE.roa (hash: u0b6RMkrcz22t0V1+AakCj/CnEAS32OtK5Ml5FCc9x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:7a:cf:2c:95:4d:49:f7:bb:9f:23:5f:76:7d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
Validity
Not Before: Mar 26 05:01:03 2026 GMT
Not After : Mar 27 05:01:03 2026 GMT
Subject: CN=5c2dcd200fa6e56a40ecd9980fb7512e26191aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e6:7d:51:e9:0f:ca:a5:d3:29:9d:49:89:8c:
1f:2d:b2:58:58:7c:82:50:c7:36:83:d5:cb:56:7b:
01:65:12:b6:3a:85:19:19:9f:75:49:ae:6e:7a:83:
27:c6:2e:e6:75:09:63:f1:7a:85:51:6e:da:ed:58:
94:11:ad:b0:5c:0a:84:f6:9f:1f:86:fa:bb:66:cb:
86:37:57:9a:0f:96:3f:26:c2:b3:77:13:e7:d4:c3:
3b:8a:12:d2:59:0f:52:c6:7c:56:ff:1e:3e:2d:f8:
01:7c:f4:43:ec:7e:1f:53:26:b3:b9:51:88:e2:47:
d1:92:d4:05:c5:eb:49:ff:17:f6:60:e4:69:f8:61:
af:8d:96:a2:58:58:36:c4:a5:17:cd:fa:ae:7b:33:
b0:69:83:09:1b:91:be:55:29:59:56:25:5e:6d:ef:
c9:ac:98:21:d2:19:79:5f:a1:d2:10:1d:f5:57:84:
b0:ca:b1:96:b2:08:0a:6a:4d:a7:20:16:46:08:30:
34:8c:61:44:ec:15:10:76:01:62:3b:18:94:a1:93:
be:25:da:4d:4f:a5:c6:fd:2b:66:50:4e:40:a6:6f:
bd:06:e2:eb:04:57:08:fe:0f:7d:2d:d6:ef:6f:9c:
16:1e:56:d9:b7:9d:0a:3b:23:06:d2:1a:81:cf:b1:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2D:CD:20:0F:A6:E5:6A:40:EC:D9:98:0F:B7:51:2E:26:19:1A:A4
X509v3 Authority Key Identifier:
keyid:32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:af:e8:bf:42:dd:5b:ce:d8:64:43:91:3a:dc:fa:b1:f3:94:
10:71:57:e8:f5:ff:59:f2:c6:05:6e:2d:cc:6d:f7:38:7e:59:
7f:29:0b:88:72:44:eb:7b:41:ca:ad:bc:c9:69:26:34:de:c4:
0a:f9:5c:87:25:cf:a6:04:3f:ee:97:73:39:f1:b5:5b:7a:85:
29:53:6c:23:c8:5a:35:c9:17:ae:01:b9:fe:4f:ca:d4:64:75:
02:4c:96:3f:dc:35:db:ba:89:b8:24:69:45:ba:ec:b5:2b:33:
f3:39:f1:f9:8a:15:2d:c1:32:16:2b:1b:5c:46:9a:8c:6f:15:
22:46:c7:de:c2:48:cf:f9:7e:f7:75:24:87:69:b7:82:42:c3:
c9:bf:b1:a9:13:72:8f:ae:ec:62:86:19:d8:d6:d3:fe:ee:a0:
d8:92:94:8c:b9:2b:a4:af:6f:15:c2:5f:c8:5d:06:49:91:70:
72:26:ab:95:0e:80:7c:96:8b:20:c6:10:1e:ea:23:8c:21:b7:
9f:aa:c8:64:fe:6e:62:6b:41:5f:20:30:ab:9d:81:f3:24:62:
c0:79:db:c1:ea:74:b9:c3:1f:e8:13:e8:69:be:9f:bc:bc:6c:
33:ab:01:14:8b:cc:ff:2d:d6:ea:14:7f:b9:d4:57:ea:52:ea:
6b:c6:61:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:19 2026 by rpki-client