
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
File: Mg58DOtLoqb0uW_EuuGruFMDWro.mft (raw, json)
Hash identifier: BzzeIMvMWP6yl8OsngrUfz23RHU73a37LW8bUgD2ipM=
Subject key identifier: 10:C1:CE:7F:7F:E2:56:27:C0:CA:16:69:A1:65:92:0A:46:F7:20:1E
Authority key identifier: 32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA
Certificate issuer: /CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
Certificate serial: 01A1295663CC897D81719DCF4E3E7DB4BFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
Manifest number: 1A2D
Signing time: Sun 11 Oct 2026 05:01:29 +0000
Manifest this update: Sun 11 Oct 2026 05:01:29 +0000
Manifest next update: Mon 12 Oct 2026 05:01:29 +0000
Files and hashes: 1: 190_tT_eCzOnPGNAuqrMRlV6QzI.roa (hash: rinomgyCwitmjvV/nuPRn6UtRWhrMNkhmKnZEnFuZcI=)
2: Mg58DOtLoqb0uW_EuuGruFMDWro.crl (hash: THBm09u0CNf/LBl8zlWPl0OMK4r7ApXzK+j86Wumb1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:63:cc:89:7d:81:71:9d:cf:4e:3e:7d:b4:bf:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
Validity
Not Before: Oct 11 05:01:29 2026 GMT
Not After : Oct 12 05:01:29 2026 GMT
Subject: CN=10c1ce7f7fe25627c0ca1669a165920a46f7201e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:42:00:77:69:b4:04:fe:92:bf:88:0e:24:
a8:11:44:04:67:61:f2:4f:d5:ec:00:1d:28:b6:86:
ff:01:e3:db:c9:23:bd:86:4c:eb:da:15:27:fd:d4:
7e:12:c5:d8:0c:3a:3f:a7:cf:4f:5b:63:19:4a:8e:
33:a6:10:61:a6:b8:7f:ab:b8:56:ea:30:a6:42:7a:
d9:bf:de:be:21:c4:04:21:b3:ed:09:7e:86:a4:51:
97:70:70:ed:2a:c9:bb:77:b1:0f:5a:88:1e:a4:ac:
de:b8:d0:5f:69:06:c2:cd:2e:df:cb:85:aa:e2:11:
43:30:e0:de:9f:d5:4a:1f:93:28:c9:f9:81:6e:1a:
c3:03:ba:82:d3:0d:09:5d:4b:7a:90:c2:71:39:a2:
76:41:4d:24:e4:58:06:15:35:0b:ad:ca:2c:0b:01:
ea:99:07:cb:c0:e4:85:4f:86:24:ea:3c:4b:0d:87:
63:29:e9:38:b4:58:22:eb:69:47:23:5b:fa:79:4b:
02:9b:48:b2:e0:61:47:5d:51:6a:fe:77:19:15:79:
f9:3b:6e:c9:42:eb:76:51:67:c1:fa:ae:6c:f1:15:
aa:96:6e:6f:1b:7d:59:60:c1:13:a2:4f:f3:c4:55:
33:23:01:dc:36:70:b2:90:4c:47:2f:37:b9:e9:bd:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C1:CE:7F:7F:E2:56:27:C0:CA:16:69:A1:65:92:0A:46:F7:20:1E
X509v3 Authority Key Identifier:
keyid:32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:12:af:60:c3:2f:06:01:5e:c9:69:1a:71:51:1b:ec:8a:9d:
ee:33:f7:b9:06:37:75:57:68:6d:a1:29:da:77:cb:12:f8:4f:
a7:80:61:d0:a1:86:6d:d9:bf:74:f0:38:d6:08:23:cb:18:c5:
2e:77:77:19:f4:2b:44:34:9a:94:19:09:fd:b5:84:ed:5c:fe:
da:26:6c:5f:8b:66:2c:a9:39:05:23:12:ef:53:e1:64:25:a0:
7b:3f:d1:7d:21:2b:cc:5b:d2:56:7c:f6:ac:cc:6a:67:ce:40:
0f:f5:64:c1:18:1d:b7:b0:e8:b3:d6:29:77:c7:49:3f:c8:69:
54:6e:86:0f:16:6c:e0:c0:bd:53:73:ca:73:cb:9e:ef:de:f2:
fd:71:29:14:bd:e4:e5:2d:05:34:6e:7e:bf:a1:ab:d7:d8:3e:
69:25:ea:e9:17:28:c9:ed:9b:08:ba:be:20:47:1b:60:18:b6:
8e:37:ab:88:f3:f3:99:94:67:10:37:b1:09:63:5f:80:3e:75:
de:e7:15:01:aa:5a:71:aa:2f:0c:f7:40:7f:4a:0f:6f:f1:a7:
d0:2f:a2:c5:16:be:c2:07:16:d4:6f:5e:65:1c:2d:d0:00:c8:
8f:b4:c7:d3:2d:74:74:9c:c1:77:66:88:cb:4c:ff:e8:1c:d3:
98:01:7f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:35:56 2026 by rpki-client