Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft
File: mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft (raw, json)
Hash identifier: 9didkz8Yl+yJ+HUGgjS1lwq6IlGws+BBGQZrcz9ny7I=
Subject key identifier: 47:0A:E2:B3:34:BC:52:E3:69:0C:55:37:48:2B:57:8F:1B:31:FD:6B
Authority key identifier: 9A:0B:BB:9F:85:0B:45:8C:62:46:7F:02:B7:D6:90:85:42:A5:05:93
Certificate issuer: /CN=9a0bbb9f850b458c62467f02b7d6908542a50593
Certificate serial: 01A0D34A485F9123D5359B2DCA724E0847E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft
Manifest number: 4D
Signing time: Thu 24 Sep 2026 12:00:55 +0000
Manifest this update: Thu 24 Sep 2026 12:00:55 +0000
Manifest next update: Fri 25 Sep 2026 12:00:55 +0000
Files and hashes: 1: hoPDPLNiWu-9zpQhgukPEyLhtuM.roa (hash: XsLZob1RA7jolFvgyscIzhZR6yadd8m7VJ1KCp4ecOA=)
2: mgu7n4ULRYxiRn8Ct9aQhUKlBZM.crl (hash: nBMNHkiAF3Lac8pfSBR7WhtEa1SX02eeyDj2+lZ4x0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:48:5f:91:23:d5:35:9b:2d:ca:72:4e:08:47:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a0bbb9f850b458c62467f02b7d6908542a50593
Validity
Not Before: Sep 24 12:00:55 2026 GMT
Not After : Sep 25 12:00:55 2026 GMT
Subject: CN=470ae2b334bc52e3690c5537482b578f1b31fd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:bd:97:d9:49:1f:cc:85:5d:07:bd:43:f9:
2d:e2:0a:aa:62:7b:80:d4:fc:bc:a2:74:2a:e7:c3:
f0:36:ca:4f:a5:ba:13:50:f5:61:9b:81:8e:75:b4:
54:1f:4d:5d:6d:7d:de:ab:28:71:2c:28:46:c6:9d:
05:bf:a7:d5:55:5e:bb:de:1f:df:0d:d2:8f:10:3d:
ba:0f:75:6d:d5:74:9f:30:2a:e2:64:ed:fe:e6:74:
24:60:40:84:8e:8d:5d:04:7b:6d:ab:bf:8e:44:73:
40:7c:94:cb:d4:0f:79:36:28:97:bd:e6:bc:1a:30:
c8:ba:6e:a5:7f:e5:59:8c:b8:fd:fd:c3:a6:ce:fd:
7a:d1:f9:b3:c5:43:5d:dc:f8:99:55:32:f5:48:e9:
3f:14:9f:5e:5f:03:90:86:66:42:49:96:06:84:4e:
9e:81:c5:33:d7:a8:d6:f2:ec:07:68:8f:17:fc:88:
33:74:4d:e2:87:49:e4:5f:09:6a:b6:5f:8e:3b:f2:
f6:ce:c4:24:0e:cb:94:82:17:db:5a:85:07:ef:9f:
10:cc:48:37:b4:cc:ed:bd:19:ed:d7:ff:af:f2:46:
68:92:c4:dc:6c:9e:6f:e1:89:ab:ed:f6:b0:20:15:
04:5e:c3:dd:e8:cb:c5:8c:ee:27:d1:68:94:9d:50:
f6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0A:E2:B3:34:BC:52:E3:69:0C:55:37:48:2B:57:8F:1B:31:FD:6B
X509v3 Authority Key Identifier:
keyid:9A:0B:BB:9F:85:0B:45:8C:62:46:7F:02:B7:D6:90:85:42:A5:05:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e5:14:6d:fb:68:f8:00:e6:b7:3d:1f:b5:95:92:a4:f9:d2:
52:70:0b:b5:33:f6:b6:81:d6:7d:e8:24:60:a5:8d:04:a2:f1:
b2:e4:9b:bb:ed:bb:0c:e5:9e:ab:32:f2:0b:23:4b:8c:ec:95:
1c:f1:90:b1:8b:cc:3c:be:26:50:3c:92:68:92:da:32:e8:e6:
1e:80:82:bd:2a:c9:19:9f:b2:d9:a1:8e:43:ec:69:55:9d:a7:
7f:26:44:01:1b:8b:5b:f9:30:8f:9f:2e:58:a7:da:82:5d:8a:
57:2c:46:e8:ba:4a:7e:cd:41:7f:9e:10:44:83:9b:b7:bb:72:
8c:43:32:ee:51:66:98:5a:d7:90:7d:1d:6b:0e:72:25:74:79:
b9:2d:f7:c6:f7:26:4b:69:2f:30:5e:c0:c0:62:68:1f:6b:92:
f4:d5:fa:c0:bf:d9:4a:c1:cc:cc:8a:58:cf:f3:df:0d:ca:7f:
83:aa:20:bb:c4:d3:b1:c9:90:61:ab:35:d9:f4:fe:3e:a0:0a:
56:ec:5b:e3:30:d1:cf:41:0a:4f:83:00:08:aa:d9:4a:89:bd:
9b:e8:bd:96:a2:6d:9d:15:a2:e5:c4:e1:e5:71:a8:67:12:ec:
75:4b:19:dd:25:6c:1e:5d:4b:52:a6:fb:7a:76:af:de:45:8b:
7f:e0:96:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:47:55 2026 by rpki-client