Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
File: mGzlJJY15OKWTTdEk9zDeoddBTk.mft (raw, json)
Hash identifier: fpzKSSLYGul8Ay2Q7HM2btoZKbNI/8psO1+t/TqAT5g=
Subject key identifier: 69:C4:A7:17:CF:7B:FC:FF:CE:35:13:0D:02:B3:89:D4:A2:4C:9D:00
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial: 019E1D90B8536B4DCC5ED8EB7407CB6918B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 19:01:23 +0000
Manifest this update: Tue 12 May 2026 19:01:23 +0000
Manifest next update: Wed 13 May 2026 19:01:23 +0000
Files and hashes: 1: ftwoquu3DFj4eBFEtCkmR8T9CQA.roa (hash: 4rlrRLmH28vbIC123d5cUoLsBf7n1zeaVCkiEqiDVnA=)
2: mGzlJJY15OKWTTdEk9zDeoddBTk.crl (hash: g+pPMXgBqy2aykRE438duNjUrkN4q1S9of1xh92yGh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:b8:53:6b:4d:cc:5e:d8:eb:74:07:cb:69:18:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
Validity
Not Before: May 12 19:01:23 2026 GMT
Not After : May 13 19:01:23 2026 GMT
Subject: CN=69c4a717cf7bfcffce35130d02b389d4a24c9d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:d3:4e:fd:56:84:f2:f7:7f:68:58:30:2e:
6f:88:6b:77:ef:5d:bc:e7:8f:b0:3f:23:0c:96:19:
b1:83:77:fc:d5:1f:b0:dc:58:76:df:26:22:a2:63:
8d:8e:af:eb:fd:bc:37:ae:e0:eb:48:56:ab:fb:f1:
db:e3:c5:08:51:71:b2:30:5e:ab:44:31:84:9b:19:
8b:0a:c0:1e:25:cc:7e:0a:17:a9:63:61:79:06:01:
fd:36:d8:ec:08:e5:00:a7:80:67:9d:2f:79:2c:36:
5f:8c:66:2c:f6:05:5e:8d:84:bb:82:74:1d:de:8d:
ea:8b:e9:0a:3e:43:b8:d1:de:2d:61:51:b3:b2:e3:
d6:d0:6e:06:37:36:3b:72:dd:4c:d6:ff:45:bc:20:
ad:4f:d3:d6:8b:d7:37:9e:6b:1e:f4:3a:df:ea:9b:
07:ad:a3:5d:4e:4d:58:44:92:11:3d:bd:22:f8:aa:
c4:59:5b:fb:22:63:5a:fd:87:32:9f:45:53:d5:0e:
f2:38:68:ee:40:c0:6c:33:a9:dc:24:cf:2a:66:fa:
3a:48:12:3c:01:c4:00:b4:50:e1:ff:e0:cd:95:ca:
42:06:37:bc:18:e8:52:d3:92:bd:d0:70:72:1e:96:
54:39:54:9a:28:52:bf:81:4d:c2:1f:71:98:37:0b:
85:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C4:A7:17:CF:7B:FC:FF:CE:35:13:0D:02:B3:89:D4:A2:4C:9D:00
X509v3 Authority Key Identifier:
keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c5:96:0e:26:82:bb:35:8b:45:eb:3c:8b:dc:f4:2b:35:45:
9f:3f:1e:da:db:6f:c6:03:15:12:16:6b:96:a4:a0:5a:78:76:
2f:76:81:d7:76:15:29:26:ad:7a:fd:d4:83:96:08:e4:ea:a3:
e2:0b:62:69:e9:4a:16:f7:45:6a:e4:f6:b2:be:14:b2:b7:44:
4b:16:37:1d:e2:ca:31:96:cc:4d:86:f8:f6:eb:2e:21:c3:c8:
a1:ea:36:d1:01:13:d6:57:bf:2d:8d:c1:61:2e:be:ea:cc:6d:
fa:44:f4:b2:db:59:41:52:ff:13:d9:c9:ce:09:01:2e:fe:2c:
2a:31:1f:73:12:13:de:7c:b3:4a:c7:3f:15:47:28:3c:aa:c2:
cb:d0:f9:f3:26:60:da:94:17:ea:2b:61:35:08:14:19:cc:b3:
c1:86:54:b3:7a:5e:7a:d0:2c:0f:cc:87:82:9e:cd:58:f3:96:
8a:24:c7:fb:65:20:77:90:7f:da:43:c9:96:fc:4c:51:10:d7:
1a:fd:8c:b2:d3:4d:4c:66:90:e8:32:47:cd:7c:9f:aa:02:cd:
d7:be:69:a2:99:98:aa:70:a8:76:cc:00:f4:6b:ea:13:57:29:
23:b5:5a:e5:5b:cb:5b:bf:d4:60:c9:6f:d0:33:fa:6e:1f:70:
2d:72:b0:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkLhTa03MXtjrdAfLaRizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NmNlNTI0OTYzNWU0ZTI5NjRkMzc0NDkzZGNjMzdhODc1
ZDA1MzkwHhcNMjYwNTEyMTkwMTIzWhcNMjYwNTEzMTkwMTIzWjAzMTEwLwYDVQQD
Eyg2OWM0YTcxN2NmN2JmY2ZmY2UzNTEzMGQwMmIzODlkNGEyNGM5ZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreXTTv1WhPL3f2hYMC5viGt37128
54+wPyMMlhmxg3f81R+w3Fh23yYiomONjq/r/bw3ruDrSFar+/Hb48UIUXGyMF6r
RDGEmxmLCsAeJcx+ChepY2F5BgH9NtjsCOUAp4BnnS95LDZfjGYs9gVejYS7gnQd
3o3qi+kKPkO40d4tYVGzsuPW0G4GNzY7ct1M1v9FvCCtT9PWi9c3nmse9Drf6psH
raNdTk1YRJIRPb0i+KrEWVv7ImNa/Ycyn0VT1Q7yOGjuQMBsM6ncJM8qZvo6SBI8
AcQAtFDh/+DNlcpCBje8GOhS05K90HByHpZUOVSaKFK/gU3CH3GYNwuF5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnEpxfPe/z/zjUTDQKzidSiTJ0AMB8GA1UdIwQY
MBaAFJhs5SSWNeTilk03RJPcw3qHXQU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2Mzct
YTI0M2NiZmFhZWYzLzEvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2MzctYTI0M2NiZmFhZWYz
LzEvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8WWDiaC
uzWLRes8i9z0KzVFnz8e2ttvxgMVEhZrlqSgWnh2L3aB13YVKSatev3Ug5YI5Oqj
4gtiaelKFvdFauT2sr4UsrdESxY3HeLKMZbMTYb49usuIcPIoeo20QET1le/LY3B
YS6+6sxt+kT0sttZQVL/E9nJzgkBLv4sKjEfcxIT3nyzSsc/FUcoPKrCy9D58yZg
2pQX6ithNQgUGcyzwYZUs3peetAsD8yHgp7NWPOWiiTH+2Ugd5B/2kPJlvxMURDX
Gv2MstNNTGaQ6DJHzXyfqgLN175popmYqnCodswA9GvqE1cpI7Va5VvLW7/UYMlv
0DP6bh9wLXKw9g==
-----END CERTIFICATE-----
Generated at Wed May 13 06:09:46 2026 by rpki-client