
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
File: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft (raw, json)
Hash identifier: RBgFilSuXP93lqf2iGxKg0fa/oFXfX3Iev8M8dW7xq0=
Subject key identifier: 1D:03:FF:B6:6A:D8:7B:D7:4A:40:43:41:DB:E5:5D:1D:E7:9F:B4:A7
Authority key identifier: 30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
Certificate issuer: /CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Certificate serial: 019D28168D34318619D77C8B7B22355C208A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
Manifest number: 08ED
Signing time: Thu 26 Mar 2026 03:00:59 +0000
Manifest this update: Thu 26 Mar 2026 03:00:59 +0000
Manifest next update: Fri 27 Mar 2026 03:00:59 +0000
Files and hashes: 1: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl (hash: zcKZgsIaiipl55qh5Hk0pZmTF9ey8ebI/tMmEj6nRsU=)
2: dIqWZ2cWHiBFVvZxoBhqWpuAwmQ.roa (hash: uE7jBQ3nDWE2TUDIdFmUrQEZmjWLtoSS41WGaaBfii4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:8d:34:31:86:19:d7:7c:8b:7b:22:35:5c:20:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Validity
Not Before: Mar 26 03:00:59 2026 GMT
Not After : Mar 27 03:00:59 2026 GMT
Subject: CN=1d03ffb66ad87bd74a404341dbe55d1de79fb4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e1:64:b7:f9:1e:68:f3:94:bc:9b:f6:77:ca:
3d:eb:5d:21:c4:6c:9f:e5:8c:98:53:c1:e9:ab:f3:
a8:cc:7b:65:2b:b3:a3:37:bf:87:be:c7:2b:9f:12:
4a:12:94:cd:38:8a:ec:1c:04:6d:dc:cd:db:35:dc:
f1:88:a7:d7:bf:25:3e:c4:a4:68:ec:7a:f6:2f:85:
a1:4f:7e:d2:4c:b8:11:55:46:f7:ef:ed:30:ad:ec:
9d:fd:8b:cc:85:cc:27:a2:e7:18:79:7a:a3:3e:52:
d3:bf:fc:d4:1e:5c:b6:67:03:32:85:cc:a6:6b:ea:
9c:ac:21:e5:b7:1d:50:f1:cf:fe:1e:8e:a9:ae:bf:
f9:61:f8:14:fe:06:4c:33:9e:fb:e7:90:f6:cd:ff:
39:7b:6a:7e:85:b4:69:86:a0:86:d2:ba:1a:95:b2:
d8:e4:19:f8:30:b3:eb:aa:f4:2c:dc:49:7b:de:b4:
8d:87:a9:ee:99:8f:01:1d:4b:26:78:98:a7:49:b4:
2a:57:06:85:24:96:7f:8f:3c:84:54:5e:c2:76:06:
16:9e:de:2a:fc:e3:b4:6c:64:c8:07:e1:67:38:94:
24:5f:25:a4:47:71:f6:d5:49:da:b2:05:fe:ca:6a:
38:db:65:24:91:ff:a1:ee:67:71:db:7d:6f:8c:7c:
f2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:03:FF:B6:6A:D8:7B:D7:4A:40:43:41:DB:E5:5D:1D:E7:9F:B4:A7
X509v3 Authority Key Identifier:
keyid:30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:50:43:14:e9:f0:a3:0a:fb:7e:c5:e7:3b:6c:7c:29:c0:cd:
17:a6:35:76:91:8f:0b:45:88:4c:36:11:f1:d0:9f:2c:bb:94:
2d:8e:98:e7:db:b6:e1:84:08:d5:31:ce:a6:fc:2b:78:17:e7:
22:96:e0:c7:ce:8f:4c:9b:d5:60:7c:ea:db:c7:7d:66:79:c3:
a4:c6:27:d2:cd:f0:5b:a5:5e:6d:c6:5e:2d:5b:2d:a4:f8:12:
7f:dc:c4:26:aa:65:74:5e:05:ef:3f:99:d1:ee:14:fe:a5:06:
11:28:cc:15:a9:92:26:71:80:9b:0f:4b:24:c2:99:8c:0e:9e:
4b:b1:1f:65:3f:18:00:ec:74:28:34:48:28:3e:ed:f0:f1:fc:
b2:2e:be:04:1a:47:9e:75:ed:01:5e:26:46:02:0f:a5:0f:7d:
01:33:03:3a:d4:f5:23:1f:11:f3:66:25:a8:a1:0c:74:92:d9:
ee:16:94:51:ec:cf:40:6c:7b:61:8a:9f:08:74:5a:99:08:86:
19:69:7a:53:86:8d:4f:fe:72:5c:ed:1e:1d:ad:d2:81:87:3b:
55:27:2a:e7:20:22:d5:78:75:87:ff:ac:10:c3:0f:ed:04:ad:
99:30:30:3e:94:b6:0e:53:6d:c5:35:7f:bc:07:c0:14:b7:11:
ec:54:05:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:57 2026 by rpki-client