Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json)
Hash identifier: c9hbDE0EioGQMB9O62tieE4zaZvxS4wDVkvCvrGgzBo=
Subject key identifier: 5F:EA:C7:72:FB:ED:45:71:6B:68:2C:C4:E7:DF:5B:FA:F8:3B:DC:30
Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Certificate serial: 019D284D7FD9138FFA8ADF3BCA426C402FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:01:00 +0000
Manifest this update: Thu 26 Mar 2026 04:01:00 +0000
Manifest next update: Fri 27 Mar 2026 04:01:00 +0000
Files and hashes: 1: AJubno4ZrqTS0RpcQUJX01d0Kkw.roa (hash: p6tmt7fq6LNsnRh4ZNDQsOuCuF6aJ3pZ0TDsZFJJx24=)
2: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: XlXwYPlvd5EiBS4CQQhdYZyKd/JnG1IW/48m+4UVXJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:7f:d9:13:8f:fa:8a:df:3b:ca:42:6c:40:2f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Validity
Not Before: Mar 26 04:01:00 2026 GMT
Not After : Mar 27 04:01:00 2026 GMT
Subject: CN=5feac772fbed45716b682cc4e7df5bfaf83bdc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:18:74:be:b1:af:49:d1:ac:57:ae:1e:16:2f:
1c:e9:fc:e3:43:ac:ed:0a:dc:bf:da:20:cb:42:14:
08:fb:89:2f:b8:d9:48:fd:52:43:ff:97:b4:f5:bd:
3e:22:8a:82:30:fb:66:ae:fe:14:e2:1d:dc:18:ac:
1f:bd:0e:40:52:c1:8e:f1:1f:1f:98:3e:53:a0:66:
d8:95:48:9c:b2:00:df:c0:45:23:28:9a:c4:2f:c9:
95:62:f4:6f:23:e9:78:e2:c3:9e:04:e1:50:69:89:
b4:23:62:f3:16:59:b1:4d:2c:25:e1:a2:bb:2c:d6:
01:ee:8a:0a:29:e4:87:ae:36:74:1b:6d:f8:7a:f3:
c4:4b:e3:53:28:44:69:5a:38:72:4c:5e:1d:f1:ae:
dc:cf:d6:5c:d8:a8:8d:84:4e:f8:63:d4:4d:8b:1e:
02:a6:16:a2:39:09:13:5d:91:37:ad:b9:b4:4e:60:
f2:a1:41:e4:7f:8c:55:c9:10:d8:9a:40:38:64:82:
61:97:32:5f:1e:8c:d7:68:4b:44:2f:a0:01:7c:82:
e7:76:4b:3a:4f:50:6a:ef:09:25:ef:d0:99:2d:3d:
78:19:24:ba:d1:e9:2d:c1:bd:37:de:98:2c:31:28:
c9:dd:96:d1:db:85:46:0b:94:d8:17:7a:b8:db:df:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EA:C7:72:FB:ED:45:71:6B:68:2C:C4:E7:DF:5B:FA:F8:3B:DC:30
X509v3 Authority Key Identifier:
keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6e:45:ba:fd:34:7a:d8:50:e0:32:2b:60:3d:15:1a:59:55:
f5:39:1b:28:4a:73:68:ce:41:fa:d2:ea:d7:48:84:78:c3:f9:
df:ae:9c:b5:42:19:1c:07:be:26:0e:6c:a4:18:44:ab:a8:d5:
e9:17:e3:aa:d1:60:1c:b3:a8:9b:82:1f:d8:15:da:27:f3:56:
8c:dc:60:73:d6:e9:e1:28:10:e2:8f:c3:81:df:21:f6:a5:2d:
09:79:d3:e3:16:83:55:17:98:91:f9:3b:71:e1:7a:f8:ac:3b:
db:4e:52:61:98:92:7b:fa:37:d5:20:f2:55:88:93:ca:9e:2b:
27:93:bb:a3:7e:5a:3e:df:1b:1c:36:b5:97:9d:79:af:f3:75:
a3:83:e1:5f:38:71:be:6d:73:0d:db:11:6b:ed:69:15:3b:91:
89:17:d5:e4:51:31:0e:26:71:aa:cf:bb:08:01:3e:78:41:22:
7f:1f:35:c7:70:bf:e5:0b:d9:2e:0c:c1:10:5f:9a:0e:7f:04:
f3:74:38:ae:15:a6:5b:a8:ce:6f:1c:b6:2e:30:34:74:0a:d4:
66:e4:bf:fa:c3:b6:2f:d6:20:b4:b4:ac:a2:ba:89:26:1f:18:
5a:89:97:f3:10:a3:f0:70:44:f7:08:38:1d:6f:8e:2e:fb:9c:
0c:83:0f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:07 2026 by rpki-client