Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
File: MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json)
Hash identifier: nHFDWYzkpIfCOm5PH2RToeAWNLgoc+WTVqXU2DWnhvY=
Subject key identifier: 89:A3:68:87:B4:8F:F7:F3:C4:40:E8:3E:0C:8E:14:DE:A7:93:8E:8E
Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Certificate serial: 019F962550995ADE423C83295F7AC44BA25A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
Manifest number: 0E85
Signing time: Fri 24 Jul 2026 22:00:55 +0000
Manifest this update: Fri 24 Jul 2026 22:00:55 +0000
Manifest next update: Sat 25 Jul 2026 22:00:55 +0000
Files and hashes: 1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: prNoNmyG1Srt60wm5j4lRfv3KJBEJe7lDaFqUV2x8wQ=)
2: S0jCwF-2vE4If7aoddZBBXxgCa4.roa (hash: sC7YQJ9Sv4ok1eZ8e1VpmYub7DnojsItviVQVfJV7k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:25:50:99:5a:de:42:3c:83:29:5f:7a:c4:4b:a2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Validity
Not Before: Jul 24 22:00:55 2026 GMT
Not After : Jul 25 22:00:55 2026 GMT
Subject: CN=89a36887b48ff7f3c440e83e0c8e14dea7938e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:92:28:19:c4:e6:20:8c:ea:5c:b0:4b:e7:
ba:d7:83:e5:8a:22:e2:96:e4:1c:da:ee:c5:b1:f6:
54:9e:93:e7:a4:01:fb:58:3e:fa:f1:be:78:1a:26:
35:42:49:87:3f:6d:70:4c:c8:37:47:54:23:92:fc:
9c:57:25:a5:dc:b7:90:e0:80:a5:ad:11:be:ba:ef:
a1:c6:2f:bb:4c:0a:22:2c:4c:4f:00:98:38:6a:e4:
d2:8a:b8:36:15:52:08:88:5a:bc:ef:c4:15:59:72:
b0:9d:f8:ee:4e:d0:54:c5:3f:11:cc:30:05:9f:60:
28:8b:55:92:b2:8d:cf:f6:f5:bf:ae:84:1e:7f:0c:
de:47:32:19:6a:43:d6:d3:59:25:bb:af:fd:77:64:
a6:85:f9:08:a6:78:cb:1b:28:bd:78:ad:b4:4b:c5:
29:c8:82:61:d9:3f:8b:3b:39:8d:96:46:5e:15:3f:
93:2c:33:c9:0a:41:f1:ff:2f:a2:08:51:3c:17:a7:
b5:c7:a4:d3:77:22:dc:c9:05:2b:35:5f:25:73:d7:
89:8c:ef:68:1e:99:ba:e1:37:dd:e7:ab:c6:d8:20:
bb:ea:e2:d9:7e:5b:3b:d8:c6:05:b9:8f:42:02:94:
16:5e:5c:f9:56:17:72:69:99:29:5d:67:35:c6:29:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A3:68:87:B4:8F:F7:F3:C4:40:E8:3E:0C:8E:14:DE:A7:93:8E:8E
X509v3 Authority Key Identifier:
keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7f:68:04:92:70:6e:39:a8:02:c3:4e:e7:ef:d5:5b:a6:28:
f9:b0:5c:e8:85:e9:13:7f:29:4e:3f:80:f1:ea:ae:8a:c0:5e:
1a:3a:e1:85:7a:1b:95:38:05:fb:68:39:84:27:6b:ec:e2:6b:
5a:da:3d:fa:1c:d9:17:e5:f0:bd:27:37:f9:03:e6:3d:a1:0a:
27:9f:a9:09:39:4c:1e:43:61:77:e9:77:39:a1:53:bd:da:79:
54:07:9a:94:81:b7:a2:5f:95:20:0d:d7:13:e5:c4:4c:10:d8:
cd:27:0c:55:b3:0f:96:19:95:af:ff:d8:c8:d7:40:21:90:30:
79:9a:27:85:4a:24:c1:ca:7c:0f:77:cd:73:f3:70:87:dd:63:
9e:9c:9a:9a:54:31:b3:5c:55:23:44:63:79:91:27:5d:b6:35:
9a:ea:e3:cf:44:28:41:c0:e2:07:92:85:ae:77:bc:64:2b:c0:
ad:8e:10:70:ae:bf:e8:34:87:cb:49:99:da:72:24:bc:aa:39:
4e:de:8c:71:1d:a2:e3:d6:4f:35:5e:15:3f:01:87:f1:a7:52:
da:fa:a4:96:7f:2a:57:05:08:c5:ce:4b:74:69:8c:23:9d:5e:
24:69:60:ca:05:30:ff:d5:b7:50:d9:f8:66:5c:c2:73:c7:ff:
29:21:1a:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WJVCZWt5CPIMpX3rES6JaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNmI0NjhjYzMxZWYzYTNkMDgxYWM4ZjAyYjI3MWUzMTQ3
NTU5YmYwHhcNMjYwNzI0MjIwMDU1WhcNMjYwNzI1MjIwMDU1WjAzMTEwLwYDVQQD
Eyg4OWEzNjg4N2I0OGZmN2YzYzQ0MGU4M2UwYzhlMTRkZWE3OTM4ZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbmSKBnE5iCM6lywS+e614PliiLi
luQc2u7FsfZUnpPnpAH7WD768b54GiY1QkmHP21wTMg3R1QjkvycVyWl3LeQ4ICl
rRG+uu+hxi+7TAoiLExPAJg4auTSirg2FVIIiFq878QVWXKwnfjuTtBUxT8RzDAF
n2Aoi1WSso3P9vW/roQefwzeRzIZakPW01klu6/9d2SmhfkIpnjLGyi9eK20S8Up
yIJh2T+LOzmNlkZeFT+TLDPJCkHx/y+iCFE8F6e1x6TTdyLcyQUrNV8lc9eJjO9o
Hpm64Tfd56vG2CC76uLZfls72MYFuY9CApQWXlz5VhdyaZkpXWc1xina5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImjaIe0j/fzxEDoPgyOFN6nk46OMB8GA1UdIwQY
MBaAFDBrRozDHvOj0IGsjwKyceMUdVm/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83ZTRlYTgtODk1MC00MTgzLWFiYzAt
MzM4Mjc5NDA0OWMyLzEvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83ZTRlYTgtODk1MC00MTgzLWFiYzAtMzM4Mjc5NDA0OWMy
LzEvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVX9oBJJw
bjmoAsNO5+/VW6Yo+bBc6IXpE38pTj+A8equisBeGjrhhXoblTgF+2g5hCdr7OJr
Wto9+hzZF+XwvSc3+QPmPaEKJ5+pCTlMHkNhd+l3OaFTvdp5VAealIG3ol+VIA3X
E+XETBDYzScMVbMPlhmVr//YyNdAIZAweZonhUokwcp8D3fNc/Nwh91jnpyamlQx
s1xVI0RjeZEnXbY1murjz0QoQcDiB5KFrne8ZCvArY4QcK6/6DSHy0mZ2nIkvKo5
Tt6McR2i49ZPNV4VPwGH8adS2vqkln8qVwUIxc5LdGmMI51eJGlgygUw/9W3UNn4
ZlzCc8f/KSEaEA==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:01 2026 by rpki-client