Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
File: MGavc-_zrCH_F6CVL_Nw5gykS10.mft (raw, json)
Hash identifier: /PoqX5cUGtsL2kfkdORvmFAmkVTXn4ukF6sHale48E4=
Subject key identifier: 62:26:04:0D:78:DE:8B:1C:27:82:6F:38:D6:3B:3A:B8:DC:73:40:A3
Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
Certificate issuer: /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Certificate serial: 019D28BB548648315D736CB9460AEB6C8392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 06:00:58 +0000
Manifest this update: Thu 26 Mar 2026 06:00:58 +0000
Manifest next update: Fri 27 Mar 2026 06:00:58 +0000
Files and hashes: 1: C1RBBN_ZVpEXr_O5XicmF9RRbqw.roa (hash: VWcYJnFNZXnjTlhzeEFW69/RT95ec57ErxUIeBg+zwo=)
2: MGavc-_zrCH_F6CVL_Nw5gykS10.crl (hash: kN08VebPEVN/yY8Iqbv5i5XL9L+W1QBBZfq2ndwWS1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:54:86:48:31:5d:73:6c:b9:46:0a:eb:6c:83:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Validity
Not Before: Mar 26 06:00:58 2026 GMT
Not After : Mar 27 06:00:58 2026 GMT
Subject: CN=6226040d78de8b1c27826f38d63b3ab8dc7340a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:2f:0c:c1:de:e9:27:3f:82:03:c6:e5:52:
89:ea:46:3a:41:bb:38:c1:de:51:5b:84:63:0d:e8:
61:bd:d9:6f:69:e0:43:7d:7f:ad:4d:91:31:ba:7f:
87:68:ae:dd:b1:b5:12:39:91:a7:9f:63:6c:d7:54:
4d:ce:74:bd:a6:11:47:ea:3f:98:28:b3:54:5e:3a:
2b:6b:8b:3e:d5:35:b5:ea:9a:3a:cc:9f:fb:50:55:
1c:c4:2e:f7:5f:d4:14:4a:70:bd:2b:c3:3c:ec:48:
c8:08:ed:d7:97:3f:aa:01:57:c9:41:fc:bd:17:7c:
25:51:00:24:3c:df:e7:d7:cd:df:31:c4:74:8c:5e:
cc:ac:33:57:f0:eb:18:2a:53:9b:d6:23:77:c2:14:
45:40:fe:13:57:39:0a:09:bf:ca:59:ce:ba:09:65:
22:49:13:58:a0:80:e0:f6:80:fe:19:07:4b:10:4c:
bd:9e:07:a8:ac:ab:d7:a6:74:ea:39:6d:25:1b:9d:
22:ae:60:f4:7e:a1:7c:48:96:00:51:d6:96:04:36:
21:cc:f1:03:72:93:c8:d1:95:f6:a6:e3:80:01:d6:
5c:fc:1b:4e:42:ae:d8:60:03:be:eb:e8:59:69:56:
74:17:db:20:8b:cd:0b:d0:58:3b:01:cb:33:20:14:
e9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:26:04:0D:78:DE:8B:1C:27:82:6F:38:D6:3B:3A:B8:DC:73:40:A3
X509v3 Authority Key Identifier:
keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:75:52:20:71:1e:e9:34:39:8a:2d:27:b8:6d:c5:22:8f:13:
ae:b8:38:fc:74:c1:f5:14:3d:64:46:a5:75:7d:23:a4:a1:83:
60:b0:7d:3a:81:ff:01:e6:44:d0:53:18:ee:96:a6:69:a8:f1:
8a:70:6c:d0:c7:62:f3:a4:a4:d2:ea:18:50:8c:51:5a:19:8f:
da:61:9f:2d:14:48:38:20:9b:b3:5f:0e:a3:2d:94:06:86:4f:
33:8f:53:45:89:c9:41:70:2e:d7:55:f5:92:fa:c3:ee:cf:e5:
0c:0a:91:8d:b8:26:55:65:26:c1:f8:44:f8:c7:60:df:53:0e:
0d:d7:d5:a3:93:df:8f:ec:53:f3:55:2c:56:59:7c:75:25:d8:
a2:ac:6b:e9:a9:5b:ba:b6:31:c7:03:74:41:77:8a:e5:db:d5:
3b:b1:9a:22:b6:b9:b5:b0:61:7a:04:8c:07:34:a0:87:3b:a9:
9b:97:07:7a:f9:61:e5:5c:99:3a:c0:b6:2d:4a:28:ee:4e:b3:
65:30:79:b4:55:1d:fe:f4:ac:92:51:8e:13:2e:19:99:10:06:
ce:4d:b6:8f:73:3f:d6:f4:9a:ce:bd:03:d0:2b:48:0f:20:ed:
a5:04:18:37:fe:4e:94:b0:95:b6:46:23:3e:fe:db:70:6d:52:
e3:33:cb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:55 2026 by rpki-client