Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
File: MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json)
Hash identifier: JikQwMESDXjxxVnj6mHNSw3q4tzSET2Mjv4LJv2QhDs=
Subject key identifier: 38:5F:FD:92:0E:B5:53:64:88:41:B1:1B:D5:2C:D5:A6:58:11:B4:36
Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7
Certificate serial: 01A0D75FE9E9EE2D470B58AD79E023DE9398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
Manifest number: 1A03
Signing time: Fri 25 Sep 2026 07:03:02 +0000
Manifest this update: Fri 25 Sep 2026 07:03:02 +0000
Manifest next update: Sat 26 Sep 2026 07:03:02 +0000
Files and hashes: 1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: sqTToaAbIa9ng8At4cAJboDmrbLP5qhdV43il1r2o1c=)
2: dDj4-eFRfq_UroSu2HQ22smKlA8.roa (hash: ahRStajN/bb570o/RBHvcfEKEL2KTD1bW5s9wAnONq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:5f:e9:e9:ee:2d:47:0b:58:ad:79:e0:23:de:93:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7
Validity
Not Before: Sep 25 07:03:02 2026 GMT
Not After : Sep 26 07:03:02 2026 GMT
Subject: CN=385ffd920eb553648841b11bd52cd5a65811b436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:1f:71:56:ca:a4:f0:be:6c:dd:25:32:90:
01:8c:30:3c:8b:99:e3:9c:04:be:f7:6e:c4:84:cd:
d1:f8:6a:96:3e:af:40:e7:dc:bd:08:15:54:ba:2f:
a0:3b:45:77:50:ad:2f:ec:de:5f:81:41:8f:40:76:
7c:19:91:aa:33:b2:5f:ff:a5:71:4d:c4:04:15:d9:
98:06:d8:70:cc:94:9b:64:3c:58:6a:9b:31:cd:64:
fc:19:d9:d7:90:28:07:ed:78:dd:86:e7:bd:96:1b:
f4:6e:d0:71:cb:92:48:55:bd:0e:30:03:07:87:e8:
02:cc:fc:1b:e1:d4:2c:2d:54:fd:f8:08:39:0e:b7:
ef:a0:b9:9c:10:6e:74:26:00:79:ea:3b:88:7e:96:
07:7a:6a:81:90:b5:1c:c2:90:24:e5:6d:a4:45:eb:
af:7f:dc:43:15:a0:0d:02:71:96:d2:e1:98:5b:35:
83:1e:27:b7:5d:fb:17:77:3f:06:b4:07:27:39:9e:
16:5a:2d:66:bb:8a:8c:05:53:59:9b:63:cd:3c:9b:
61:c5:9a:5a:88:c5:4e:41:6b:ff:69:49:2a:2f:54:
cc:43:4b:84:01:04:65:9b:95:58:eb:45:31:d0:b2:
c9:97:87:0b:5b:d8:ff:08:0c:c6:7b:82:4a:76:27:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5F:FD:92:0E:B5:53:64:88:41:B1:1B:D5:2C:D5:A6:58:11:B4:36
X509v3 Authority Key Identifier:
keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:22:0b:ea:a6:cd:9e:62:42:f4:39:b2:67:5d:20:a4:1a:a4:
cb:0c:9a:e8:03:6d:51:27:c7:e6:7a:62:a7:e9:da:17:d8:68:
c5:89:a2:7a:71:22:50:da:df:f0:91:8b:87:0d:92:8a:28:09:
44:2c:7c:b6:68:c4:af:1f:20:05:65:66:56:15:97:89:62:be:
2d:2b:70:07:43:bb:df:3f:e2:d2:96:83:bf:8c:16:3f:c1:51:
e7:77:3f:c5:38:97:a3:72:1d:78:11:48:45:0a:f3:1c:7b:f3:
ed:f8:83:fd:99:24:ab:c9:65:27:ee:a4:d5:39:e9:bf:53:25:
d4:49:f1:ab:51:08:31:d7:57:ae:46:04:13:55:b4:f0:53:24:
69:5b:93:c2:31:44:e1:9d:56:54:c5:8f:16:49:db:6a:ae:7f:
6a:00:70:35:9c:7d:93:f5:37:96:7e:5c:75:81:cd:1e:de:0f:
24:88:3c:12:5e:5a:12:f7:91:d9:4e:4b:c1:45:65:91:ee:78:
85:72:5c:7b:93:39:64:fd:ab:5a:0e:03:4a:d6:52:0f:0f:a5:
45:1f:a9:b6:9c:c4:d5:ab:9c:e6:09:0a:04:d8:0a:c5:4e:8f:
54:52:d9:95:b8:c7:08:09:6f:3d:1c:77:68:7a:32:e8:96:ef:
b0:40:8f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:22:10 2026 by rpki-client