Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
File: mgGl7N4ueVkyWREG0II9DRVPcAI.mft (raw, json)
Hash identifier: 08d2RUONIdAEy6AtzVJdC8zQfxyVZLys9SERxWuk+u0=
Subject key identifier: 2E:6C:82:89:24:80:38:95:4D:61:E7:45:65:0F:78:25:88:E5:A1:84
Authority key identifier: 9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
Certificate issuer: /CN=9a01a5ecde2e795932591106d0823d0d154f7002
Certificate serial: 019D270392FAC0FA4AB00876EB6D1EB43A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
Manifest number: 09B2
Signing time: Wed 25 Mar 2026 22:00:38 +0000
Manifest this update: Wed 25 Mar 2026 22:00:38 +0000
Manifest next update: Thu 26 Mar 2026 22:00:38 +0000
Files and hashes: 1: mgGl7N4ueVkyWREG0II9DRVPcAI.crl (hash: xt3S2J/O5xhzsVBmFV3vCobXp6JhKBMEalNMQojKHzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:92:fa:c0:fa:4a:b0:08:76:eb:6d:1e:b4:3a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a01a5ecde2e795932591106d0823d0d154f7002
Validity
Not Before: Mar 25 22:00:38 2026 GMT
Not After : Mar 26 22:00:38 2026 GMT
Subject: CN=2e6c8289248038954d61e745650f782588e5a184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:dd:bf:c9:d6:e4:bb:55:96:e6:18:b0:84:
c0:f8:4e:27:ed:c4:e1:7c:dd:4d:74:e1:ba:f4:51:
f6:42:9a:88:1c:ed:8f:ee:f9:f2:27:87:8f:55:05:
01:59:ba:f0:a0:83:70:f3:8d:3e:37:60:8d:da:13:
2f:67:a8:33:2c:5d:dc:4b:e4:ea:dc:d6:a6:8f:4a:
9e:63:0d:0b:68:ee:65:c3:be:ed:d6:cc:2a:1f:74:
59:8c:f7:bd:b5:49:56:10:25:5e:50:db:1c:26:67:
5a:5d:a5:ad:d6:81:a2:3a:a9:ba:6f:f0:c8:6a:60:
cb:89:58:2f:9e:f4:9d:48:f6:86:e1:15:86:5e:f3:
c3:81:65:d8:5b:d5:c5:51:dd:8e:ce:56:87:75:ee:
7e:30:79:a2:3d:41:ef:db:0e:d0:45:ac:ab:f6:a0:
60:28:0a:8c:9b:dc:3b:d4:3e:43:d3:a1:f1:82:12:
8b:6e:e5:08:d4:ca:52:18:20:63:a8:a3:d9:56:00:
ea:6c:50:34:0b:d2:48:cf:09:25:97:b2:2d:55:a9:
59:0a:f9:2f:d3:5e:9f:18:9f:fc:da:27:b3:38:02:
9b:31:7b:05:29:3b:24:2e:70:fe:ba:61:3c:c6:5c:
ab:0a:82:c5:b6:f5:e4:9f:1d:92:25:80:b9:02:b9:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6C:82:89:24:80:38:95:4D:61:E7:45:65:0F:78:25:88:E5:A1:84
X509v3 Authority Key Identifier:
keyid:9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b7:98:41:6a:de:91:e0:34:85:dc:c7:8a:b4:f4:1b:74:3c:
fb:15:d0:c9:74:40:30:46:4a:d6:d7:a8:72:83:a9:fb:ae:6a:
fa:de:28:68:29:4c:1a:1a:c0:18:63:4a:84:2f:3f:ce:4a:b2:
c2:d4:7e:b2:9b:01:bd:e2:d7:47:94:16:6f:d6:95:3f:fe:2b:
3b:3b:24:4e:97:69:bd:9b:c5:42:97:95:e5:14:aa:6d:f1:da:
0b:fb:84:a5:e0:15:d1:ee:39:28:d2:8b:b2:b3:ad:82:95:a3:
5a:13:4f:de:15:80:fe:42:48:7c:b2:93:44:a0:88:3f:48:44:
1e:e0:88:d6:b1:23:3a:b6:c7:7b:24:a6:a8:ae:5d:39:06:c3:
a6:37:b0:b5:37:c0:88:b3:a8:a2:e0:ab:42:63:b4:bc:cf:31:
a6:56:b4:f5:dc:65:48:20:cc:80:37:b7:0a:d1:ea:62:cf:5f:
8a:15:a3:25:32:8f:ed:cd:ae:d2:6d:71:f1:e2:29:2c:11:41:
25:0b:63:12:1c:8a:90:1a:b8:25:76:75:bb:c1:95:71:f5:cd:
78:d6:b3:c4:fb:aa:59:f7:2e:14:c5:2f:f0:d7:c2:d9:65:99:
65:84:20:cb:aa:90:24:3e:07:ea:1c:3d:b0:63:04:37:1c:d8:
81:07:6a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:51 2026 by rpki-client