Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
File: MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json)
Hash identifier: To5Ug3kremGuzczQVPSEhjtIH4IaXaTNfmPvWbKmKrc=
Subject key identifier: 64:AF:B5:B6:81:60:95:A3:5C:61:25:21:0F:E9:C1:01:1E:15:6C:40
Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7
Certificate serial: 019E1E357AF2F2DC63D7E98984C26B35531A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
Manifest number: 189A
Signing time: Tue 12 May 2026 22:01:21 +0000
Manifest this update: Tue 12 May 2026 22:01:21 +0000
Manifest next update: Wed 13 May 2026 22:01:21 +0000
Files and hashes: 1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: ntPPvUbtmhdQZTIxyU1SyXG5IhP8Iw2aMsM5NVwpRog=)
2: dDj4-eFRfq_UroSu2HQ22smKlA8.roa (hash: ahRStajN/bb570o/RBHvcfEKEL2KTD1bW5s9wAnONq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:7a:f2:f2:dc:63:d7:e9:89:84:c2:6b:35:53:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7
Validity
Not Before: May 12 22:01:21 2026 GMT
Not After : May 13 22:01:21 2026 GMT
Subject: CN=64afb5b6816095a35c6125210fe9c1011e156c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:d9:47:22:f8:eb:d4:e2:b8:99:cd:87:ba:
2a:ad:8d:d0:72:71:00:31:8b:14:2d:a7:af:93:07:
0f:f7:4d:55:f3:8a:91:ca:1f:ea:1a:87:d9:f9:69:
de:9a:d5:81:20:40:c3:9c:a8:8a:96:32:f2:67:1b:
28:46:8e:cc:82:c0:50:c4:3c:70:b9:2e:1a:de:0d:
55:45:d8:c4:23:62:f9:88:b7:da:cb:59:d4:0a:51:
0f:5c:fd:32:68:a9:ae:5a:1a:24:21:0c:05:a2:fa:
85:ae:c4:3e:f9:0a:1e:2d:3d:65:3f:00:2b:75:ae:
c1:cf:73:af:dd:7e:d4:fe:44:37:40:e6:b4:33:a6:
03:35:e2:74:81:11:b0:9d:56:c2:dd:2e:8d:d0:fe:
85:ee:4e:c7:26:e0:21:97:01:f1:07:37:9e:e9:8d:
b7:52:34:05:c7:5c:18:06:ae:e7:5a:05:10:d3:73:
82:0c:d2:ed:f5:5c:a3:c2:49:33:17:5c:2f:7f:fa:
85:ce:44:71:b3:58:45:63:68:07:21:b6:d4:12:5a:
33:de:af:57:0c:1b:d7:cf:42:c0:a1:79:1c:39:6a:
67:9c:c2:9f:a4:18:68:f8:ec:d8:3c:29:90:f3:1b:
63:e8:56:3d:67:35:b9:42:3c:03:c8:44:b3:7d:f7:
8f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AF:B5:B6:81:60:95:A3:5C:61:25:21:0F:E9:C1:01:1E:15:6C:40
X509v3 Authority Key Identifier:
keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f6:e7:cc:f9:33:62:86:88:4d:69:f1:1d:2c:f8:61:5f:f2:
a5:aa:9f:98:16:6b:6e:43:f2:c0:30:85:35:81:39:5c:8c:74:
36:75:39:d2:fc:95:ab:2f:ba:b2:ed:90:00:f8:a9:76:be:fb:
fb:cb:a4:f8:4f:7f:db:7d:2c:38:11:01:09:2e:e4:e3:cf:65:
b5:ed:56:22:9a:17:e9:2f:f8:96:48:f5:ac:7e:9b:a8:f2:f0:
35:e5:60:02:31:9c:76:e8:81:d7:35:d1:dc:34:0a:e9:a0:b2:
07:20:4a:aa:33:84:20:89:8b:17:74:76:fd:a1:59:61:a8:d3:
3a:eb:17:55:fa:09:aa:84:86:6f:b8:99:30:2d:46:7d:b8:d4:
f7:4e:83:26:19:16:ee:cb:0a:db:da:87:b3:05:fa:fe:ba:53:
70:7f:c9:36:e6:57:2a:9a:51:e2:db:e4:ca:d9:ea:bb:d2:27:
85:37:a2:07:97:d3:09:f9:fe:07:e2:af:be:47:fa:31:ca:2e:
08:89:13:62:dc:aa:d0:6f:2c:85:89:7a:df:f6:c1:74:20:b1:
c2:1c:28:91:a8:00:1f:33:b8:3a:04:f3:f8:93:24:0b:25:c8:
44:3d:93:be:da:90:b4:59:25:50:bc:cd:66:64:11:8f:e3:7e:
cd:1f:e7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:44 2026 by rpki-client