Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft
File: MGHmFV4_NfiOa0TNNV5uk26SGmw.mft (raw, json)
Hash identifier: AyVwqD6tl5qGWXDPERKTH5kg3UKZDQq/pBqBqVJbpUU=
Subject key identifier: D0:73:7D:85:F3:66:62:DA:22:70:0B:6A:81:08:E7:51:0B:7D:EF:D3
Authority key identifier: 30:61:E6:15:5E:3F:35:F8:8E:6B:44:CD:35:5E:6E:93:6E:92:1A:6C
Certificate issuer: /CN=3061e6155e3f35f88e6b44cd355e6e936e921a6c
Certificate serial: 019D2583901622AD5DEEF6F968D93748D39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft
Manifest number: 0156
Signing time: Wed 25 Mar 2026 15:01:12 +0000
Manifest this update: Wed 25 Mar 2026 15:01:12 +0000
Manifest next update: Thu 26 Mar 2026 15:01:12 +0000
Files and hashes: 1: MGHmFV4_NfiOa0TNNV5uk26SGmw.crl (hash: 9YMc749V3Y/0of9vN314JK71xBgCQPjhXu+XOeEUKMs=)
2: O654y5p4Qf5vqt0PN2xJcmyF0Og.roa (hash: KRIvPR/2+jDrBziPo6SVSyDtCM7Okqo4BaF0x5mxhnE=)
3: ro1Jcp2lxC4NOVFabgqftamKm9c.roa (hash: pPjbit7yUoBryRtekoI8dZ+LsQVJcINu/p0DoPay2ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:90:16:22:ad:5d:ee:f6:f9:68:d9:37:48:d3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3061e6155e3f35f88e6b44cd355e6e936e921a6c
Validity
Not Before: Mar 25 15:01:12 2026 GMT
Not After : Mar 26 15:01:12 2026 GMT
Subject: CN=d0737d85f36662da22700b6a8108e7510b7defd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:1e:20:5e:50:76:cd:69:54:5d:81:77:37:
95:20:b7:7a:3c:90:e3:f6:a0:f8:f2:03:81:02:20:
64:43:c1:00:0e:7a:87:be:4f:24:30:f9:95:2d:dd:
e5:5c:09:9c:ab:3c:0b:c5:5a:94:59:26:15:fb:65:
67:ca:75:4d:de:d0:ad:fa:16:c9:47:9a:73:d6:cf:
c3:96:36:e6:00:a4:27:a8:aa:ca:5c:7f:db:e4:4d:
7f:c9:c4:a0:f7:f0:a2:e1:1b:6d:ce:1d:d4:e6:65:
df:c5:9c:2d:c1:63:85:ba:d2:c4:6b:de:c0:46:3c:
f4:05:8b:be:f8:04:45:ed:23:ab:ab:d7:85:d7:5c:
d0:a4:93:29:43:43:38:9f:03:2c:ce:4d:8d:4e:49:
ec:0d:6b:4f:bb:4c:1a:96:6f:a4:f5:67:40:57:56:
4d:70:b3:5b:55:7e:b0:8f:c1:65:22:84:88:2f:c6:
34:59:82:7f:46:dd:17:34:c1:fd:40:a0:ce:f9:49:
0b:b7:81:21:54:2a:60:c1:82:3f:54:3a:bc:fb:2b:
79:de:88:93:9b:c0:4a:a5:c2:4a:46:7a:8c:e4:46:
f2:51:a9:ff:24:8b:f8:c5:76:22:0f:20:7b:aa:7c:
99:7d:a6:bf:06:63:5f:9b:f4:22:26:f2:c0:f5:93:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:73:7D:85:F3:66:62:DA:22:70:0B:6A:81:08:E7:51:0B:7D:EF:D3
X509v3 Authority Key Identifier:
keyid:30:61:E6:15:5E:3F:35:F8:8E:6B:44:CD:35:5E:6E:93:6E:92:1A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a7:1f:de:4b:b5:ea:db:69:48:99:ec:5c:d9:a1:98:93:8d:
e0:0c:c1:a3:25:7c:64:57:79:30:6c:34:0b:76:df:1d:95:73:
8f:99:31:1f:a3:fd:f1:eb:7d:25:8e:72:1c:84:3f:85:75:30:
9e:2b:6a:14:84:fa:c0:31:7e:a8:be:52:c0:3f:55:6e:08:e6:
87:df:d3:00:e7:0d:64:ea:fd:d0:e0:c3:da:fa:d1:4d:60:5d:
8c:4e:91:06:0d:1d:7b:f1:8f:60:86:38:fa:f5:ec:6f:74:47:
d0:f3:54:51:26:59:33:ee:48:85:f2:2a:73:4e:64:19:45:33:
0e:a4:42:2e:f6:a1:bc:e5:39:9a:fb:a4:1e:96:dc:4b:51:f3:
43:8b:75:70:39:6b:78:29:fa:58:69:c2:5a:68:88:21:6d:04:
54:a4:a3:4c:2e:0c:69:00:31:7b:d1:03:b0:c9:f2:8e:cb:05:
3b:e0:5c:7b:2c:0a:93:b4:c6:64:26:61:b1:e5:73:83:8d:57:
02:05:b6:b0:27:9f:8f:58:9f:e1:45:0a:2a:59:28:ec:ea:2a:
29:70:03:15:84:06:3e:aa:b5:74:b1:e5:ae:dd:94:76:e5:70:
fc:74:b9:bf:32:2e:1f:59:88:fe:df:53:36:33:f5:4d:80:58:
9b:c5:d1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:02 2026 by rpki-client