Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: u7Bw21DFJKfcXKJbJ6YLCRq/JTEvLejZcj034t1y7FY=
Subject key identifier: 95:D3:7F:95:1D:3E:F4:A6:05:CC:51:7C:54:41:C8:33:AB:99:42:BD
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 019E1E3512F24BDB6C2934815EDA23FA39DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 22:00:55 +0000
Manifest this update: Tue 12 May 2026 22:00:55 +0000
Manifest next update: Wed 13 May 2026 22:00:55 +0000
Files and hashes: 1: J5P3_JUxrLqrnXDXiWzAe9FDnRM.roa (hash: 85ulhRZmPxsRvLMOYGzBL98RjNzzbmxq5th6uCIJYyU=)
2: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: gHm7/jZpuluJlZbjLb3HiVBj65hjt3tcf28WHd8plFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:12:f2:4b:db:6c:29:34:81:5e:da:23:fa:39:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: May 12 22:00:55 2026 GMT
Not After : May 13 22:00:55 2026 GMT
Subject: CN=95d37f951d3ef4a605cc517c5441c833ab9942bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bb:f9:0c:f4:e9:30:b8:30:61:77:b1:03:d8:
3e:2a:8a:2a:d0:6e:20:59:1a:be:8e:25:dc:bd:2e:
b0:8c:fb:00:30:b9:bc:07:6e:8d:40:05:3a:0b:ea:
4c:89:27:7f:0c:7c:97:bd:d3:12:65:c7:3d:a2:f3:
b5:a0:32:61:c3:d2:71:a9:90:93:ab:04:86:86:a3:
60:44:bb:a5:37:6e:f1:ad:bb:cb:c8:ad:b9:c8:4c:
cd:38:b7:a1:d3:ef:2d:6b:92:37:80:74:bf:de:15:
65:65:62:ce:ba:bf:ec:0d:86:db:b8:28:34:ac:12:
a5:b6:e6:ca:d2:84:0e:59:c5:0a:4b:7a:b7:8a:90:
fa:4f:ba:b6:46:dc:c8:f1:e0:01:48:b4:15:97:53:
ca:fb:9e:f3:90:a9:38:1e:72:89:1c:51:e9:05:ea:
1b:12:d1:34:f8:6a:6d:bf:ae:2d:fe:3d:ac:79:0e:
b5:74:67:1f:f4:00:9a:a1:35:c0:6b:8f:9e:b7:ba:
bb:49:04:0f:68:f8:5b:50:07:23:92:dd:e9:fd:06:
44:2c:c8:03:00:66:70:81:be:89:ea:bf:4b:22:4a:
c3:a7:ca:fe:4a:42:44:07:a8:50:51:49:14:ac:78:
88:a5:2e:47:45:cc:c0:10:42:79:6b:52:0f:96:bf:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D3:7F:95:1D:3E:F4:A6:05:CC:51:7C:54:41:C8:33:AB:99:42:BD
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:01:93:29:db:18:ae:0c:28:8b:6e:4c:52:6e:d4:a0:43:38:
06:e9:97:3b:f1:54:90:54:d1:aa:66:1c:00:a8:40:2b:9b:54:
75:11:ff:9d:5f:2c:d8:01:2a:08:80:3c:2c:fe:2e:a9:72:36:
7c:2a:30:85:0b:d5:d3:d7:1c:9b:1c:2f:48:01:64:6b:80:85:
19:02:ac:e6:5f:a5:37:3c:3f:49:8a:86:00:fc:41:03:ed:f8:
f6:d0:90:37:f7:c4:2b:cf:e7:a1:eb:26:11:01:d8:41:0c:6b:
f8:7f:1e:e7:26:d1:88:88:64:fd:fc:46:e0:b6:3d:d3:f6:cc:
77:97:80:d7:91:75:0f:5b:28:80:da:08:72:10:4e:2a:47:0b:
ed:ed:d5:c9:6d:9b:70:e5:71:67:5b:00:8d:6f:df:41:da:96:
c8:80:32:f8:b8:48:a9:ba:93:1d:1a:ec:1e:01:be:72:1d:d1:
b4:6a:c4:64:f5:ae:20:45:ae:41:a1:d8:de:20:c1:cf:5e:50:
7e:86:ae:8c:a6:37:2a:31:9e:58:60:79:d4:32:38:97:6a:7f:
35:2c:4f:98:09:42:96:a1:18:38:bd:ba:0d:aa:5c:5d:f1:78:
5a:74:6d:6e:72:5a:c6:5e:ee:d6:14:96:ee:25:0a:1b:c9:46:
22:98:bc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:16:23 2026 by rpki-client