Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
File: mgdjMrvSgPCFLbafYVsPFJkUgxs.mft (raw, json)
Hash identifier: xbyLMeaEGLE++kwpCc9xU3MEV+nJiU+oxlhuqCzFKwo=
Subject key identifier: CA:3C:40:70:19:0B:1B:5A:25:1A:D2:7F:17:30:4B:76:56:FB:05:D1
Authority key identifier: 9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
Certificate issuer: /CN=9a076332bbd280f0852db69f615b0f149914831b
Certificate serial: 019D284E685998DCAF4B8EB3D39A13089CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
Manifest number: 0613
Signing time: Thu 26 Mar 2026 04:02:00 +0000
Manifest this update: Thu 26 Mar 2026 04:02:00 +0000
Manifest next update: Fri 27 Mar 2026 04:02:00 +0000
Files and hashes: 1: mgdjMrvSgPCFLbafYVsPFJkUgxs.crl (hash: sKNf6aM24fX8ZMe+HGH/pVmKQffKpzgwysevrGv1LN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:68:59:98:dc:af:4b:8e:b3:d3:9a:13:08:9c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a076332bbd280f0852db69f615b0f149914831b
Validity
Not Before: Mar 26 04:02:00 2026 GMT
Not After : Mar 27 04:02:00 2026 GMT
Subject: CN=ca3c4070190b1b5a251ad27f17304b7656fb05d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:11:8f:f6:9d:f4:db:44:24:16:f9:e0:58:
1e:a1:79:d9:7c:30:7d:a2:f0:11:7f:6c:bd:e9:3c:
2f:57:cf:4c:81:56:1c:37:00:d4:d9:ed:20:54:d9:
b0:e6:56:db:eb:80:c6:60:02:43:04:17:57:8a:3a:
05:13:c3:8d:73:ec:2c:13:d4:c1:f8:d4:0b:4b:8a:
61:1e:79:7f:c4:f2:c0:1a:6f:67:63:23:ac:34:a7:
c1:6c:1d:05:d4:33:59:eb:c6:7d:0d:0b:b5:eb:05:
75:7f:0d:0c:66:69:ab:e8:18:df:f2:09:95:42:09:
ad:3b:da:cd:8c:3d:7a:58:7e:ba:56:21:54:45:e4:
1a:c4:b5:97:ab:b3:c7:a7:b3:cd:c1:7c:eb:d0:b3:
db:26:98:d3:97:c9:71:54:a5:3b:2d:a7:ed:33:1d:
f2:d3:03:d6:7c:d2:3d:31:34:93:b2:17:39:09:79:
26:78:b7:cc:7f:4e:02:0c:50:5e:89:75:2c:ac:7c:
6a:fd:48:09:63:81:92:68:04:31:6a:63:08:10:a3:
7b:ce:2a:25:9e:63:e7:3c:14:ae:c7:aa:50:dd:e6:
44:b7:12:0d:19:ba:9e:76:6d:05:3c:f8:cc:52:47:
a6:c0:9b:01:68:05:90:5d:91:33:6c:ad:e0:0c:71:
ea:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3C:40:70:19:0B:1B:5A:25:1A:D2:7F:17:30:4B:76:56:FB:05:D1
X509v3 Authority Key Identifier:
keyid:9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:87:ef:75:13:d2:51:aa:f6:ca:84:b9:92:13:cc:24:7e:1c:
c9:f5:20:43:75:f0:f8:9d:d7:70:3d:60:df:e3:cd:a8:18:ae:
ef:f7:1c:0f:ec:71:26:f8:c0:dd:01:6a:50:16:29:87:fb:51:
5c:a2:5e:35:d3:6e:4f:99:37:0a:a2:9a:7c:d9:4d:18:44:18:
43:bd:44:59:16:c2:9e:db:6c:35:e7:24:64:14:06:30:81:27:
87:f3:6b:01:72:c2:75:73:b5:66:98:ec:b7:3f:c2:4a:68:22:
64:36:cd:ad:3d:69:e5:bc:98:72:88:f9:24:0e:21:2a:8a:3b:
83:2a:93:0f:b8:4a:bc:c0:7f:17:e7:33:e9:43:a7:48:af:69:
5f:05:81:fb:6b:83:e3:7c:2d:7d:3c:2d:bb:6d:6a:19:0b:f1:
99:ac:8c:40:60:9c:ee:f1:54:9a:d5:09:61:88:4e:74:9a:b6:
db:05:ea:f2:f2:3d:01:0f:c8:b5:11:88:a5:25:5a:17:67:83:
fe:cf:38:9f:94:fd:ae:1a:ef:a7:90:04:d9:0e:50:6d:c0:44:
1a:48:9d:a1:fd:1e:0a:41:1e:83:28:ea:f1:0e:c3:3d:cb:6c:
1b:6f:88:53:bb:ed:4d:b1:9f:9c:f1:9b:d3:b0:ea:76:a2:84:
3b:b8:ae:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTmhZmNyvS46z05oTCJzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMDc2MzMyYmJkMjgwZjA4NTJkYjY5ZjYxNWIwZjE0OTkx
NDgzMWIwHhcNMjYwMzI2MDQwMjAwWhcNMjYwMzI3MDQwMjAwWjAzMTEwLwYDVQQD
EyhjYTNjNDA3MDE5MGIxYjVhMjUxYWQyN2YxNzMwNGI3NjU2ZmIwNWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNsRj/ad9NtEJBb54FgeoXnZfDB9
ovARf2y96TwvV89MgVYcNwDU2e0gVNmw5lbb64DGYAJDBBdXijoFE8ONc+wsE9TB
+NQLS4phHnl/xPLAGm9nYyOsNKfBbB0F1DNZ68Z9DQu16wV1fw0MZmmr6Bjf8gmV
QgmtO9rNjD16WH66ViFUReQaxLWXq7PHp7PNwXzr0LPbJpjTl8lxVKU7LaftMx3y
0wPWfNI9MTSTshc5CXkmeLfMf04CDFBeiXUsrHxq/UgJY4GSaAQxamMIEKN7ziol
nmPnPBSux6pQ3eZEtxINGbqedm0FPPjMUkemwJsBaAWQXZEzbK3gDHHqbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMo8QHAZCxtaJRrSfxcwS3ZW+wXRMB8GA1UdIwQY
MBaAFJoHYzK70oDwhS22n2FbDxSZFIMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zZDgzOGMtODYyMi00ZTU4LTg3MGYt
ZGU5ZTAyZDQxNzk3LzEvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zZDgzOGMtODYyMi00ZTU4LTg3MGYtZGU5ZTAyZDQxNzk3
LzEvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4fvdRPS
Uar2yoS5khPMJH4cyfUgQ3Xw+J3XcD1g3+PNqBiu7/ccD+xxJvjA3QFqUBYph/tR
XKJeNdNuT5k3CqKafNlNGEQYQ71EWRbCnttsNeckZBQGMIEnh/NrAXLCdXO1Zpjs
tz/CSmgiZDbNrT1p5byYcoj5JA4hKoo7gyqTD7hKvMB/F+cz6UOnSK9pXwWB+2uD
43wtfTwtu21qGQvxmayMQGCc7vFUmtUJYYhOdJq22wXq8vI9AQ/ItRGIpSVaF2eD
/s84n5T9rhrvp5AE2Q5QbcBEGkidof0eCkEegyjq8Q7DPctsG2+IU7vtTbGfnPGb
07DqdqKEO7iuHw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:50 2026 by rpki-client