Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File: MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier: Qd8GGRcEQs6xo379nAqOJVY/7AiotjzKrEQK9rgiPjM=
Subject key identifier: 21:AD:09:6B:68:6A:9B:CD:A6:C6:0E:06:ED:95:65:49:43:D6:EB:17
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial: 019D2627F816533B1ACB83EC3D6E66CE72DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number: 072E
Signing time: Wed 25 Mar 2026 18:00:46 +0000
Manifest this update: Wed 25 Mar 2026 18:00:46 +0000
Manifest next update: Thu 26 Mar 2026 18:00:46 +0000
Files and hashes: 1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: zdDjSRZpoLvRq/DmtnhMn4jfR+oxB0JRVJtxX1Q9LHQ=)
2: j7653T51F6EUoDPqs_2ecZYygWM.roa (hash: iqkpEFsJy76DXov6xlk9ejYQADnbYUIfX+Z+h7UJP2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:f8:16:53:3b:1a:cb:83:ec:3d:6e:66:ce:72:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
Validity
Not Before: Mar 25 18:00:46 2026 GMT
Not After : Mar 26 18:00:46 2026 GMT
Subject: CN=21ad096b686a9bcda6c60e06ed95654943d6eb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:85:9f:20:25:1b:c1:9c:97:6b:9d:40:8a:
ca:ae:39:cb:45:de:94:7b:1d:08:44:30:85:47:28:
0c:78:c1:9e:5d:93:10:f5:f9:69:05:31:0b:05:cb:
0a:29:b3:68:14:a3:dc:6f:ca:17:87:79:f3:e8:fd:
13:59:12:20:78:62:2a:61:82:02:b7:84:c3:89:e6:
1e:53:b2:f2:f1:d0:18:5f:f7:20:b9:ca:cf:84:99:
bc:de:4d:bc:50:08:2c:7c:43:e1:48:ed:8d:ce:d2:
1c:14:eb:4f:ae:24:24:35:58:3b:92:c6:42:bf:4c:
62:71:7a:a0:13:29:13:28:91:ed:75:d1:1b:3a:05:
78:e0:f2:1f:23:06:fe:5d:00:7b:50:92:d3:d1:dc:
4b:ac:70:5d:07:c9:13:33:4e:43:6b:75:9f:67:72:
a6:2e:15:8b:08:7f:98:ea:18:1f:a4:26:5e:b6:bd:
b4:78:16:de:b6:ea:3d:63:78:23:97:7d:3d:de:76:
00:c3:a2:61:38:ea:10:8b:ee:fe:01:aa:4c:55:b0:
44:5b:89:9f:1e:c2:07:42:55:72:20:e4:9d:d8:a1:
ac:ad:c6:6d:47:e7:f4:82:cc:93:2b:26:d9:52:95:
80:cc:96:38:61:6d:23:5b:76:51:23:47:7c:0d:44:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AD:09:6B:68:6A:9B:CD:A6:C6:0E:06:ED:95:65:49:43:D6:EB:17
X509v3 Authority Key Identifier:
keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2e:a6:77:f1:b7:73:fc:6e:5a:db:31:61:db:c7:0f:28:14:
d8:1d:b3:ac:c4:de:14:ee:22:c9:0f:9a:7a:51:61:91:f6:eb:
bc:3e:ec:5a:74:d4:03:fe:66:cc:43:c2:46:a7:4a:1f:99:9d:
9d:e9:95:61:0f:fe:51:ad:76:22:f3:1b:42:0a:20:ea:94:42:
01:0e:91:ba:74:c2:8f:c7:43:5f:44:78:9f:66:0d:74:5d:bd:
1d:07:ee:de:1f:5a:55:f0:de:1c:ab:bc:8c:7e:2e:14:fc:a4:
9d:ad:1f:58:7f:36:2d:bf:59:c0:e8:52:cf:6f:74:eb:ac:62:
89:a9:a0:f3:22:93:00:4d:14:13:a3:ae:f0:f5:4a:07:c1:c8:
83:34:fb:0f:33:8a:34:01:26:b7:e6:de:ba:87:08:24:6c:2a:
c1:ee:26:0a:a9:48:c9:6b:87:de:ea:f1:fd:f7:b1:e0:0d:da:
b4:8a:4c:dd:6e:52:63:b2:e7:db:48:c8:f3:cb:f7:0a:16:c2:
6d:13:03:82:c0:4c:12:ca:b6:a0:98:95:b3:a4:1c:dd:a4:8e:
32:62:33:ae:fd:c1:52:c5:e6:89:5a:2e:a4:df:96:61:39:2d:
3a:07:61:86:af:76:9e:c3:2f:e1:c8:84:0f:0a:25:59:82:5e:
67:b7:c0:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mJ/gWUzsay4PsPW5mznLaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDI0NzUxNmU5MTAxN2UyZGJjYjU3MmNhMGYyOWExMjI4
MWFjZjAwHhcNMjYwMzI1MTgwMDQ2WhcNMjYwMzI2MTgwMDQ2WjAzMTEwLwYDVQQD
EygyMWFkMDk2YjY4NmE5YmNkYTZjNjBlMDZlZDk1NjU0OTQzZDZlYjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi+FnyAlG8Gcl2udQIrKrjnLRd6U
ex0IRDCFRygMeMGeXZMQ9flpBTELBcsKKbNoFKPcb8oXh3nz6P0TWRIgeGIqYYIC
t4TDieYeU7Ly8dAYX/cgucrPhJm83k28UAgsfEPhSO2NztIcFOtPriQkNVg7ksZC
v0xicXqgEykTKJHtddEbOgV44PIfIwb+XQB7UJLT0dxLrHBdB8kTM05Da3WfZ3Km
LhWLCH+Y6hgfpCZetr20eBbetuo9Y3gjl3093nYAw6JhOOoQi+7+AapMVbBEW4mf
HsIHQlVyIOSd2KGsrcZtR+f0gsyTKybZUpWAzJY4YW0jW3ZRI0d8DUQYkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGtCWtoapvNpsYOBu2VZUlD1usXMB8GA1UdIwQY
MBaAFDICR1FukQF+Lby1csoPKaEigazwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdKSFVXNlJBWDR0dkxWeXlnOHBvU0tCclBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82MjRlNjMtYjg3Ni00ZWY0LWJmMTkt
ZTQzNjIwODgwY2I2LzEvTWdKSFVXNlJBWDR0dkxWeXlnOHBvU0tCclBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS82MjRlNjMtYjg3Ni00ZWY0LWJmMTktZTQzNjIwODgwY2I2
LzEvTWdKSFVXNlJBWDR0dkxWeXlnOHBvU0tCclBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAui6md/G3
c/xuWtsxYdvHDygU2B2zrMTeFO4iyQ+aelFhkfbrvD7sWnTUA/5mzEPCRqdKH5md
nemVYQ/+Ua12IvMbQgog6pRCAQ6RunTCj8dDX0R4n2YNdF29HQfu3h9aVfDeHKu8
jH4uFPykna0fWH82Lb9ZwOhSz29066xiiamg8yKTAE0UE6Ou8PVKB8HIgzT7DzOK
NAEmt+beuocIJGwqwe4mCqlIyWuH3urx/fex4A3atIpM3W5SY7Ln20jI88v3ChbC
bRMDgsBMEsq2oJiVs6Qc3aSOMmIzrv3BUsXmiVoupN+WYTktOgdhhq92nsMv4ciE
DwolWYJeZ7fArg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:51 2026 by rpki-client