Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
File: MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json)
Hash identifier: 8DqGFsC77FRxPbGxzWL7SybV4jXdBro84GktKNVF9aU=
Subject key identifier: D7:B7:9E:71:15:08:C2:6B:E3:F3:9C:2D:F7:5D:E9:31:92:81:85:70
Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
Certificate issuer: /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Certificate serial: 019D341A3295489EBFE98FA7DDA9725DCFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
Manifest number: 04FB
Signing time: Sat 28 Mar 2026 11:00:25 +0000
Manifest this update: Sat 28 Mar 2026 11:00:25 +0000
Manifest next update: Sun 29 Mar 2026 11:00:25 +0000
Files and hashes: 1: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: P5OQHf94qwIoOXefT44C1ayjjNCV8xdwhZnQL5atxx8=)
2: n8zARsIOBpHO-_C7tzB3YGju7H4.roa (hash: em6ynddbBEnzvLtotX/PQZUnXz7ZD/kDDU89M7ttH+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:32:95:48:9e:bf:e9:8f:a7:dd:a9:72:5d:cf:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Validity
Not Before: Mar 28 11:00:25 2026 GMT
Not After : Mar 29 11:00:25 2026 GMT
Subject: CN=d7b79e711508c26be3f39c2df75de93192818570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:38:02:9d:62:b0:ab:c9:26:60:85:2a:2a:
15:c2:7f:1d:45:1f:1a:0f:04:f0:0a:3b:98:73:64:
30:56:03:69:b6:19:4f:19:97:96:c7:81:b4:28:63:
7c:c2:90:71:a0:c1:28:01:c7:9f:23:b1:b7:58:48:
4d:83:da:1d:f3:56:90:9e:63:3e:8e:44:b0:65:05:
d5:14:ff:da:b0:c6:bb:12:4d:5f:6b:43:48:c5:25:
a7:51:4a:06:60:af:57:ee:81:d1:32:13:3b:e9:ef:
88:50:76:7d:c9:11:35:c0:51:aa:4a:9e:23:ac:cc:
e5:e5:07:ec:96:ea:0f:fa:06:f7:81:8c:cf:2d:39:
09:3d:67:ae:32:a2:c8:99:29:cc:82:86:a7:b7:19:
00:d6:15:91:03:a4:57:48:22:ab:f5:65:e8:ff:dd:
78:5a:70:e0:c3:3c:93:ba:d5:c1:2a:a7:d3:ae:96:
02:68:d5:3d:e9:80:68:16:1f:fd:ae:48:1e:30:8e:
f8:1c:7a:e6:41:3b:03:7b:12:9f:6c:0c:9d:98:c3:
09:37:23:e9:18:6e:07:0e:7d:1f:45:8a:22:78:5a:
e1:6a:1b:70:86:f2:74:20:a6:5d:41:ec:35:de:ec:
a9:90:9e:a3:98:3a:a8:54:8d:60:fc:9e:69:02:8f:
85:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B7:9E:71:15:08:C2:6B:E3:F3:9C:2D:F7:5D:E9:31:92:81:85:70
X509v3 Authority Key Identifier:
keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:61:6f:66:57:e2:25:03:2c:1e:d1:42:ed:98:61:55:11:d5:
f8:5e:70:4c:77:17:b5:bd:2f:36:05:ab:95:a4:cd:95:e3:a4:
cf:a6:51:a7:1b:c2:3d:3a:55:bd:8c:cb:86:6f:6f:79:03:da:
af:82:09:37:e5:9c:69:06:e3:21:e1:7d:00:d5:ab:3c:36:c2:
20:06:8e:a0:da:b4:47:01:ee:b6:b0:21:20:d8:3e:78:1b:e3:
77:99:af:53:21:d3:be:db:c7:23:ae:b2:36:e8:10:66:cd:db:
1b:df:6c:3d:92:5f:8b:78:8e:60:5f:a8:02:7f:a0:90:5f:3d:
aa:e4:8a:a3:94:29:72:bf:ad:12:71:1f:00:43:5f:e7:27:0e:
65:4d:af:5f:e8:18:b3:79:b7:ec:d9:56:60:42:2d:2a:ad:3f:
60:e8:f1:1e:63:08:f3:4e:d7:f6:5d:06:9b:88:2e:cd:46:87:
78:10:60:63:28:ad:ee:5c:6b:88:2b:0e:c7:f9:8a:91:fd:60:
31:fb:e3:a3:a2:61:1a:f4:fc:35:b2:0d:1a:17:80:e6:09:db:
37:09:a3:77:56:bf:af:4b:68:db:0c:d5:c6:d5:3f:df:e2:7f:
fb:b4:8b:09:34:f8:93:5c:9d:17:37:a0:05:84:14:29:8e:8e:
81:ba:9a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:29 2026 by rpki-client