Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
File: MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json)
Hash identifier: q6w+I3QA1poDbGySijKM/tu+qYiquaf0zaJwX/wlC94=
Subject key identifier: 54:A3:35:7D:7A:2C:A2:C6:E0:69:7E:0F:8D:18:E8:D9:1A:F4:53:59
Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Certificate serial: 019D265F5B829A956E4E964E9DEB7F881DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
Manifest number: 0D42
Signing time: Wed 25 Mar 2026 19:01:16 +0000
Manifest this update: Wed 25 Mar 2026 19:01:16 +0000
Manifest next update: Thu 26 Mar 2026 19:01:16 +0000
Files and hashes: 1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: +LipFcedBRrj/InFwKuHrT971sVZ2NI4ForCWv0t3Xk=)
2: S0jCwF-2vE4If7aoddZBBXxgCa4.roa (hash: sC7YQJ9Sv4ok1eZ8e1VpmYub7DnojsItviVQVfJV7k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:5b:82:9a:95:6e:4e:96:4e:9d:eb:7f:88:1d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Validity
Not Before: Mar 25 19:01:16 2026 GMT
Not After : Mar 26 19:01:16 2026 GMT
Subject: CN=54a3357d7a2ca2c6e0697e0f8d18e8d91af45359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:4a:a9:f0:bb:82:44:42:29:74:30:61:dc:
5f:2f:53:da:4f:5b:08:12:8b:0d:bd:7a:0f:92:a3:
7d:f6:1c:9a:7b:7f:f6:7c:d8:cf:b5:70:38:cf:37:
dc:ed:42:21:dc:84:61:81:6b:dd:c3:54:64:97:b4:
42:22:72:f8:d9:a6:bd:03:1d:02:2d:83:cd:d7:24:
ed:78:33:3e:60:cd:7d:a7:4d:2e:e9:07:72:27:5f:
7e:e9:84:50:af:d8:fc:e4:e0:4a:06:18:a7:e2:76:
1f:67:80:bd:86:b8:35:fc:06:fe:59:47:98:c3:d7:
4e:49:1e:60:85:5c:d7:c2:4e:bd:78:ee:f3:32:df:
36:66:9b:01:26:ce:1c:1b:03:ea:48:0e:73:ed:ff:
a0:a0:71:0b:90:30:de:42:d2:16:8f:bd:49:47:71:
b4:e9:55:fe:dd:f4:f8:89:c9:16:1c:8c:97:c6:ca:
fc:3a:2e:af:12:84:93:a3:59:af:21:8e:d9:22:ff:
7e:7b:f6:54:1d:17:ae:0e:3f:32:ed:64:38:b1:bb:
30:bf:a9:fd:1c:38:7d:9f:03:70:88:73:76:0e:51:
c4:ea:42:8f:00:93:40:5c:54:52:38:be:d3:cd:e5:
fc:94:ce:dd:26:db:ae:ce:61:b6:fd:29:a8:df:0f:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A3:35:7D:7A:2C:A2:C6:E0:69:7E:0F:8D:18:E8:D9:1A:F4:53:59
X509v3 Authority Key Identifier:
keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:39:fd:c6:5b:87:ab:f3:48:31:28:83:10:e2:13:64:f0:a4:
6f:aa:f5:d7:a3:aa:70:f8:3c:f6:8a:cf:c6:f7:a7:8c:ea:5c:
97:33:38:df:63:f0:d7:10:54:66:30:13:50:06:5c:b1:59:67:
6e:d9:9c:8f:ca:5e:75:89:63:9d:b6:c6:7c:c7:5d:ed:0a:1d:
81:93:86:7b:b2:e6:00:f4:3b:40:9c:47:a7:d3:04:46:35:62:
d8:c2:28:e4:b3:86:1a:71:37:b2:b4:7b:16:c8:8c:ef:e1:0a:
8d:13:eb:c9:26:43:78:30:a2:cb:5f:a5:11:18:26:b6:5f:bb:
5f:34:b6:12:94:eb:bc:53:92:20:1e:d7:6e:e9:56:97:94:60:
93:d9:91:ed:ac:3c:7f:80:df:b9:94:3e:c0:4d:77:bd:05:0b:
c0:73:37:fd:cc:07:48:4a:de:d3:66:f7:16:d2:66:fa:a5:86:
ab:4b:9f:81:25:c9:24:cc:21:2f:d1:e6:10:a4:2f:95:ab:7e:
3a:b3:a5:4b:6c:f3:77:ed:c2:90:74:ab:4d:d0:a4:46:66:07:
a6:87:06:dd:01:cd:11:75:aa:c9:f0:ff:7a:e1:8f:92:51:76:
87:32:c4:23:fc:b2:cd:6c:ed:3c:75:03:9b:b0:3d:a5:cf:82:
d3:8f:6f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:14 2026 by rpki-client