Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
File: MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json)
Hash identifier: f4bdYUXIpuZUD4MZKW+j2hPFbLYE8Mn9XodSbUuwg9g=
Subject key identifier: D6:AC:59:C9:0B:E0:C4:B6:C6:A9:AD:7B:08:4C:90:14:7D:23:45:6F
Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Certificate serial: 019E1F7F5866C0EC42D41EC7AE2D85E6AB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
Manifest number: 0DC3
Signing time: Wed 13 May 2026 04:01:39 +0000
Manifest this update: Wed 13 May 2026 04:01:39 +0000
Manifest next update: Thu 14 May 2026 04:01:39 +0000
Files and hashes: 1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: l0oR+0OWyipe+nkD7aVtzmESs1+q7VRNJXH6xa/niZU=)
2: S0jCwF-2vE4If7aoddZBBXxgCa4.roa (hash: sC7YQJ9Sv4ok1eZ8e1VpmYub7DnojsItviVQVfJV7k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:58:66:c0:ec:42:d4:1e:c7:ae:2d:85:e6:ab:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Validity
Not Before: May 13 04:01:39 2026 GMT
Not After : May 14 04:01:39 2026 GMT
Subject: CN=d6ac59c90be0c4b6c6a9ad7b084c90147d23456f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:58:f2:34:05:0d:80:c2:93:74:1a:b0:d6:
09:d0:40:fc:f6:2f:48:c5:39:5d:16:3d:0f:91:64:
ee:c2:62:dd:a1:3e:3e:73:92:98:fc:b6:70:cc:c9:
f8:ee:56:02:1b:39:25:0c:08:b0:41:95:72:1f:f6:
6e:e0:d0:dc:a5:8d:50:69:42:6e:dd:f0:b4:19:c9:
74:7f:b4:1f:5b:85:cc:27:ce:30:7e:05:b6:d3:ad:
9b:9d:7e:de:f9:02:10:9a:3f:03:01:21:e6:81:51:
60:89:dc:18:5e:1b:f9:c4:2a:08:41:52:cb:b2:6d:
17:32:5f:29:87:f5:2d:78:f8:c5:89:87:2a:6b:fc:
a0:d6:58:a2:14:e4:02:00:51:09:c3:d5:a4:3c:12:
cb:0a:48:d0:9e:30:75:05:56:33:8d:b3:b5:5a:9a:
9a:c2:8b:cf:51:0b:dc:b3:57:54:07:8d:bf:8f:09:
d0:c9:f2:7e:6f:03:a9:48:a7:5a:d9:b0:bc:f5:aa:
b9:cf:fa:98:34:7d:0d:83:96:e9:76:a2:db:a1:32:
bc:c7:5e:21:52:fc:54:6c:82:87:12:ae:b5:88:60:
11:a0:cd:78:45:e8:03:ae:98:ac:c7:5b:2d:0f:71:
3b:53:d1:a1:a7:f7:59:a4:2c:74:a7:c6:69:1d:a6:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AC:59:C9:0B:E0:C4:B6:C6:A9:AD:7B:08:4C:90:14:7D:23:45:6F
X509v3 Authority Key Identifier:
keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:88:fc:0f:01:87:44:94:5b:93:99:1a:bd:fe:3c:85:09:7e:
b0:ba:ea:6c:18:c4:98:aa:d8:67:8e:0e:2b:94:aa:c2:f7:87:
48:7c:97:43:2f:b7:e5:c7:42:89:8c:73:cc:ac:e9:3f:ac:1c:
3a:62:3e:5f:08:a1:59:eb:29:d4:5e:f9:6f:b6:5a:95:05:1f:
f7:70:79:5f:cf:97:ac:68:47:f8:8e:76:8c:f1:4e:f9:d2:eb:
74:8f:92:4b:9d:a3:68:fd:b8:ee:7d:84:25:3c:f1:ba:0c:ad:
17:ae:88:8d:a3:78:1c:1a:c2:1e:16:ca:68:95:eb:45:72:39:
ce:f2:4b:5d:4f:d0:b6:bc:9e:e7:43:7c:27:9f:ff:eb:6a:2a:
3c:d2:b0:a8:1e:e0:45:fa:00:e0:35:15:fa:f2:6e:00:c6:b0:
fe:7b:4e:42:14:1b:04:26:9d:14:98:a6:23:20:4d:e6:d8:7f:
ea:87:fb:0a:2f:c8:2a:d1:e7:62:3a:a8:26:91:5c:8d:0b:85:
ae:0e:cd:e1:cc:ba:48:93:91:a4:26:21:13:85:de:be:c9:a9:
2b:ee:8d:15:a1:d0:4b:28:2f:b4:57:d4:9b:7a:8b:5b:27:78:
52:c2:f9:46:01:f5:c4:a0:8a:fd:32:59:ea:2a:66:3f:56:d2:
d8:66:4b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:12:10 2026 by rpki-client