Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
File: mgNSX2jrayNfHeIrYLG67S_H_4M.mft (raw, json)
Hash identifier: fGQox8gH+2/2uKrkJYHxzsH6PT61lsu+UNttsnO+Ixk=
Subject key identifier: 10:B7:BE:65:C0:52:A9:70:47:BC:7C:43:98:4A:6C:D9:D5:1F:D9:0A
Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
Certificate issuer: /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Certificate serial: 019D2AA94709EFFEB211ADEF4529721F8B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 15:00:29 +0000
Manifest this update: Thu 26 Mar 2026 15:00:29 +0000
Manifest next update: Fri 27 Mar 2026 15:00:29 +0000
Files and hashes: 1: MFu4iIS8ULhZnY4FxnMd7rTjHBE.roa (hash: TCJSYgPCBj82L62nMaeEdJ0VmNDiGeeuJdnCuR6MdlA=)
2: mgNSX2jrayNfHeIrYLG67S_H_4M.crl (hash: kp7Lei80Q39kpKm6GN0ShtOou2elBlucBqwOB4w3T70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:47:09:ef:fe:b2:11:ad:ef:45:29:72:1f:8b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Validity
Not Before: Mar 26 15:00:29 2026 GMT
Not After : Mar 27 15:00:29 2026 GMT
Subject: CN=10b7be65c052a97047bc7c43984a6cd9d51fd90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:a4:4e:22:0f:a9:d9:0e:0e:12:ec:e8:aa:
09:ba:a7:8d:17:e5:dd:65:03:dd:87:93:02:d3:f7:
a0:f6:ba:f0:9f:eb:d1:8b:ec:22:77:30:fb:e6:82:
76:0f:8b:75:ca:54:e9:e7:c2:a3:21:37:9c:21:59:
97:8d:10:32:6a:74:d7:b2:75:58:96:1b:0c:4d:0f:
44:41:10:ac:56:8f:53:4c:c6:37:89:fe:83:0c:63:
fd:48:31:d6:32:af:d8:9c:95:78:71:c2:8b:4f:31:
82:19:ad:eb:4c:05:93:df:8b:fd:f7:46:15:3a:da:
41:a7:76:8f:8b:0b:77:ed:a1:37:76:af:5e:ad:6e:
a3:bb:05:27:11:a0:96:2e:65:f1:89:fe:90:b7:4c:
b7:6f:08:62:a4:50:98:e2:39:d0:2e:85:6c:57:c7:
45:0a:91:d9:fb:86:c4:fc:76:56:eb:6c:5f:28:6d:
b6:6c:cc:38:d8:f2:aa:68:46:8f:68:4b:50:4a:02:
b7:d3:c4:5f:c5:34:98:a9:f1:b9:b0:72:32:1b:ce:
b6:21:d7:ed:e8:ba:22:ce:9f:8b:72:fd:5c:f9:e3:
98:61:54:37:4b:a5:6c:e3:ee:bb:0e:fd:70:d6:3a:
73:82:8d:d2:49:54:3f:90:fa:56:64:05:79:43:81:
48:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B7:BE:65:C0:52:A9:70:47:BC:7C:43:98:4A:6C:D9:D5:1F:D9:0A
X509v3 Authority Key Identifier:
keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:68:6c:51:90:d5:ed:df:49:85:56:6d:4a:e1:37:b0:60:52:
1f:c1:b0:57:d0:28:80:38:65:34:f5:58:2a:02:77:ee:f4:e4:
a9:5e:44:c6:34:73:f5:67:03:49:5b:81:18:7f:28:a4:85:65:
c4:4c:d3:58:28:07:82:ff:b5:22:c2:75:f9:1e:45:2e:28:1d:
43:f9:06:b1:b2:ba:58:2f:97:01:76:ef:9e:0c:da:9d:8a:d0:
c8:61:2b:64:ed:59:e0:64:6d:4d:96:86:4b:d1:cc:1f:f9:00:
ac:3f:25:c0:9e:41:fd:5e:a2:49:8f:80:2b:39:d0:a7:3d:4d:
32:b9:2d:99:2a:ca:86:4b:e6:e8:b1:78:76:5f:f0:2f:66:0b:
de:7b:15:7b:c4:c6:78:82:b2:2f:2e:92:5f:9d:e3:71:d0:cb:
f2:24:40:2c:f5:bc:99:ef:5d:e0:b9:9c:4c:4a:c8:a8:a4:88:
54:3a:18:23:7c:e1:e7:c0:e3:75:f3:ae:a3:88:34:87:49:24:
26:d6:02:5a:30:55:36:1d:bc:16:1b:84:46:e0:3c:31:69:4c:
66:7f:60:eb:13:9d:33:25:68:47:e9:45:d3:e6:d7:22:4f:34:
95:65:49:e6:3a:1f:40:10:4d:58:2b:c1:09:53:64:32:c1:d3:
17:14:8f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:38:32 2026 by rpki-client