Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
File: MGE0vPWfWB1rdmMM-oeGeHaikhU.mft (raw, json)
Hash identifier: w7RUiY03HNIn7pOgidiP9gv+OA2GfV8rbZ1jrSSoZ9U=
Subject key identifier: 32:C0:DB:0A:B4:19:7F:50:D4:99:F5:A4:8D:6A:74:A0:25:80:7F:E4
Authority key identifier: 30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
Certificate issuer: /CN=306134bcf59f581d6b76630cfa87867876a29215
Certificate serial: 019D27DFC3306B28B80286A240EE72AAA820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
Manifest number: 1426
Signing time: Thu 26 Mar 2026 02:01:09 +0000
Manifest this update: Thu 26 Mar 2026 02:01:09 +0000
Manifest next update: Fri 27 Mar 2026 02:01:09 +0000
Files and hashes: 1: MGE0vPWfWB1rdmMM-oeGeHaikhU.crl (hash: uqXfNJ5tMRHLyyABmAFyPxZDYowPV81WTY1+XtdNDoI=)
2: _J-j7B7EBVpS6iWSIcOV728Uk0g.roa (hash: +Uy6WqqggKFrmTGgRkmBqe1HnPUwyMjAxaGGze9f2+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c3:30:6b:28:b8:02:86:a2:40:ee:72:aa:a8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306134bcf59f581d6b76630cfa87867876a29215
Validity
Not Before: Mar 26 02:01:09 2026 GMT
Not After : Mar 27 02:01:09 2026 GMT
Subject: CN=32c0db0ab4197f50d499f5a48d6a74a025807fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ac:3e:25:e3:01:ce:4f:de:26:37:dc:cd:72:
7d:54:1f:9c:34:9d:0d:22:4a:6a:71:a1:a1:67:c0:
6c:ca:02:a6:ea:ee:a4:ac:e9:45:18:fd:8a:a7:5d:
ed:ce:84:d7:a7:50:77:77:c2:9a:01:7f:87:59:45:
2b:9c:73:46:30:c8:8f:80:e2:09:10:77:c4:a1:93:
84:04:16:a5:03:9f:60:79:40:86:38:35:9c:bc:a3:
a4:f9:f5:98:cd:8e:4a:25:41:3a:f1:fe:46:91:e3:
dd:08:a8:37:12:65:d5:84:29:d8:a0:05:c3:a5:5c:
7c:82:7b:79:9c:af:d1:68:10:0a:8b:cf:89:7c:9b:
45:8c:79:6c:e1:08:8f:1d:b3:3e:58:37:76:80:16:
ae:0c:f9:5d:bd:44:86:32:73:d0:9a:b5:74:90:8d:
1e:2b:cd:2b:53:ee:8a:64:a1:33:53:47:f8:60:39:
28:06:a7:ff:3d:76:95:fd:6a:6b:1e:c3:7d:b7:e0:
89:91:9c:78:ef:36:ac:73:89:60:e7:e9:25:56:f5:
97:be:39:b5:79:ff:38:62:a6:6b:e8:7a:f5:e6:26:
4b:41:a7:8c:75:b1:bf:68:f0:9f:2c:0c:83:a3:8c:
e7:f1:f5:5d:1f:b5:ff:5a:15:4b:36:08:41:99:2f:
8a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C0:DB:0A:B4:19:7F:50:D4:99:F5:A4:8D:6A:74:A0:25:80:7F:E4
X509v3 Authority Key Identifier:
keyid:30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:95:e4:ba:de:7f:79:a3:75:38:94:43:39:6f:dd:35:b1:08:
f4:86:35:90:f2:a3:59:2d:66:87:9b:01:8a:7e:4e:c2:d0:17:
e1:b0:01:b0:95:30:3c:7d:8f:72:7d:44:e0:29:2f:e0:1e:f4:
21:56:d0:ea:23:86:e9:5d:92:62:34:bf:1a:a1:c1:de:8e:e1:
ee:c9:8f:d4:06:27:ce:7a:38:c5:fd:5e:34:fb:ba:fb:9b:ee:
3c:6a:23:b9:b4:4d:07:9a:f1:cc:0e:85:c9:63:c4:88:1c:26:
40:a8:1c:43:60:5b:ab:37:24:69:af:e4:aa:02:81:b4:80:f9:
40:71:ec:70:17:fd:fd:e4:0f:af:fb:45:7d:aa:04:1b:df:c4:
2b:45:ea:16:3f:cf:2b:53:f4:86:46:77:46:c5:c6:5c:ef:93:
49:ba:10:46:08:e2:a7:04:e6:ff:45:15:14:46:7d:53:09:d2:
79:c9:3a:5d:74:c0:69:32:86:59:4a:31:a1:27:9a:a6:19:4c:
71:5c:d7:8b:72:b2:40:53:a2:b3:96:31:29:34:4e:09:49:ee:
18:7f:5e:47:fe:99:45:53:79:54:87:07:83:1c:46:9c:22:6e:
c6:8b:e2:a2:10:e3:1e:3d:03:3d:86:a2:46:98:df:67:aa:09:
cb:c8:ce:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n38Mwayi4AoaiQO5yqqggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjEzNGJjZjU5ZjU4MWQ2Yjc2NjMwY2ZhODc4Njc4NzZh
MjkyMTUwHhcNMjYwMzI2MDIwMTA5WhcNMjYwMzI3MDIwMTA5WjAzMTEwLwYDVQQD
EygzMmMwZGIwYWI0MTk3ZjUwZDQ5OWY1YTQ4ZDZhNzRhMDI1ODA3ZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Kw+JeMBzk/eJjfczXJ9VB+cNJ0N
IkpqcaGhZ8BsygKm6u6krOlFGP2Kp13tzoTXp1B3d8KaAX+HWUUrnHNGMMiPgOIJ
EHfEoZOEBBalA59geUCGODWcvKOk+fWYzY5KJUE68f5GkePdCKg3EmXVhCnYoAXD
pVx8gnt5nK/RaBAKi8+JfJtFjHls4QiPHbM+WDd2gBauDPldvUSGMnPQmrV0kI0e
K80rU+6KZKEzU0f4YDkoBqf/PXaV/WprHsN9t+CJkZx47zasc4lg5+klVvWXvjm1
ef84YqZr6Hr15iZLQaeMdbG/aPCfLAyDo4zn8fVdH7X/WhVLNghBmS+KZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLA2wq0GX9Q1Jn1pI1qdKAlgH/kMB8GA1UdIwQY
MBaAFDBhNLz1n1gda3ZjDPqHhnh2opIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hODk0MWEtNzI1MC00OGVjLWFhZjgt
NmQ4ZWE5ZDFjZDczLzEvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hODk0MWEtNzI1MC00OGVjLWFhZjgtNmQ4ZWE5ZDFjZDcz
LzEvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5Xkut5/
eaN1OJRDOW/dNbEI9IY1kPKjWS1mh5sBin5OwtAX4bABsJUwPH2Pcn1E4Ckv4B70
IVbQ6iOG6V2SYjS/GqHB3o7h7smP1AYnzno4xf1eNPu6+5vuPGojubRNB5rxzA6F
yWPEiBwmQKgcQ2Bbqzckaa/kqgKBtID5QHHscBf9/eQPr/tFfaoEG9/EK0XqFj/P
K1P0hkZ3RsXGXO+TSboQRgjipwTm/0UVFEZ9UwnSeck6XXTAaTKGWUoxoSeaphlM
cVzXi3KyQFOis5YxKTROCUnuGH9eR/6ZRVN5VIcHgxxGnCJuxoviohDjHj0DPYai
RpjfZ6oJy8jOLA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:24:07 2026 by rpki-client