Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: Y4QVBdOQNqscn+Cs5Mv9Mwqd3fUXCwW9F9ReNvmu3XE=
Subject key identifier: 2A:32:F1:DC:09:0A:ED:C4:8D:2B:E3:8F:D0:F6:3C:91:F8:7F:25:E3
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 01A0E4E3ADC99A0972B25CD4DC071F20F297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 1A78
Signing time: Sun 27 Sep 2026 22:02:01 +0000
Manifest this update: Sun 27 Sep 2026 22:02:01 +0000
Manifest next update: Mon 28 Sep 2026 22:02:01 +0000
Files and hashes: 1: J5P3_JUxrLqrnXDXiWzAe9FDnRM.roa (hash: 85ulhRZmPxsRvLMOYGzBL98RjNzzbmxq5th6uCIJYyU=)
2: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: g76RkKG/I/0xQY2AcmWSbiebHqT6QDSGtD7+sOtTaa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:e3:ad:c9:9a:09:72:b2:5c:d4:dc:07:1f:20:f2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: Sep 27 22:02:01 2026 GMT
Not After : Sep 28 22:02:01 2026 GMT
Subject: CN=2a32f1dc090aedc48d2be38fd0f63c91f87f25e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:18:30:e2:05:a1:06:50:0c:c9:d3:97:55:
c2:17:98:0b:12:e9:59:ad:05:8f:66:c2:61:fc:4e:
29:15:58:93:5b:8a:16:1e:9b:7d:b2:a1:38:98:ac:
a6:c9:f8:22:2b:0e:aa:c2:12:62:0d:88:49:fd:5d:
e5:ab:58:46:8c:be:2d:3a:df:34:4d:c1:0b:3e:ea:
5a:c8:b0:09:51:13:d9:40:06:a1:75:d3:8e:e2:e1:
5d:10:96:8a:c2:3e:82:f3:ad:23:81:87:14:35:af:
e4:ae:54:3f:a3:ec:47:49:e0:9d:68:cb:8b:36:e9:
9e:7c:e2:07:9c:7a:98:67:46:e7:88:a8:42:92:ee:
c9:0f:e2:9c:d8:33:fb:c3:79:65:6e:0e:02:92:0d:
e6:8c:b6:6a:da:12:41:25:c6:08:43:68:6d:03:88:
3c:ef:f2:c8:cc:80:a4:c2:43:f4:5b:5f:00:85:7d:
b4:a0:f9:4c:5a:22:1b:01:a9:f5:b8:80:6b:48:c3:
4a:1f:b3:be:ca:a5:36:b6:13:a2:d4:80:66:66:8e:
30:e5:da:af:62:71:c1:8c:9d:38:e5:15:ed:ff:4b:
0d:cd:3b:df:e4:93:7e:b4:a1:ab:37:a8:d1:61:56:
d1:3b:d8:39:6c:c3:04:a3:03:3d:3a:55:66:b8:59:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:32:F1:DC:09:0A:ED:C4:8D:2B:E3:8F:D0:F6:3C:91:F8:7F:25:E3
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1e:fa:3e:a7:c2:34:15:c0:67:56:ff:d0:85:99:18:58:27:
98:98:84:9d:7a:bd:b7:e2:36:24:d2:a6:3c:43:e1:c6:48:e9:
3e:0b:a1:7c:49:0c:b5:9d:1d:1e:7d:33:6d:ee:63:5d:d3:1a:
84:8f:3f:6c:51:ca:6e:96:66:32:f5:ec:f6:4c:a9:26:fb:0f:
b1:eb:11:f9:18:e2:40:28:1c:03:63:7a:93:bc:14:1d:62:7c:
d2:0c:79:30:62:e4:64:57:c1:60:45:95:14:01:bb:f5:4b:74:
62:4c:69:53:4e:99:21:5a:7f:b0:7a:5e:1c:c2:04:10:01:52:
a5:06:71:c9:76:e1:e6:02:a1:91:08:e5:7f:b3:af:cd:f4:f0:
73:a7:56:16:58:5d:16:ad:75:f7:50:05:cf:25:7f:e3:b9:ee:
81:d0:ac:98:47:ea:f8:6d:2c:b0:4f:39:1a:f9:be:36:dd:da:
b3:90:ee:2c:70:03:20:7b:47:cc:c9:9d:0d:21:ea:d4:8e:f1:
c9:8c:95:27:23:8c:41:e3:db:2b:38:77:96:04:f0:2e:2c:af:
75:e9:1e:3a:fc:29:fc:49:13:d6:ae:f0:e7:1e:1f:4b:42:27:
3e:2e:e2:35:8b:8b:4a:ca:d3:df:b5:37:0f:15:80:ef:7d:4f:
73:d0:b7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:31:46 2026 by rpki-client