Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
File: MGY7W3BEIyuYmBjRLMkEkCElJN8.mft (raw, json)
Hash identifier: Xhh3pml2PGwdZhG9+VfU+OPkBxG4eiESpLgqxmsIht0=
Subject key identifier: 4F:BC:7B:56:65:74:DE:40:72:7B:A8:4F:19:57:C6:28:E3:51:93:43
Authority key identifier: 30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
Certificate issuer: /CN=30663b5b7044232b989818d12cc90490212524df
Certificate serial: 019F946DB20A94F576B3C9217A5041C6879A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
Manifest number: 04DD
Signing time: Fri 24 Jul 2026 14:00:44 +0000
Manifest this update: Fri 24 Jul 2026 14:00:44 +0000
Manifest next update: Sat 25 Jul 2026 14:00:44 +0000
Files and hashes: 1: MGY7W3BEIyuYmBjRLMkEkCElJN8.crl (hash: XyhVQHA+3krZde/4T/kdEKftefbgbbJOfO/YykXRmng=)
2: gyvu9cFnJO4MAwvAgHj8LvBNP7s.roa (hash: eMyRVFCyce/Miwfnx+0dN7toaAvORgqRwSdJr9xSmK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:b2:0a:94:f5:76:b3:c9:21:7a:50:41:c6:87:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30663b5b7044232b989818d12cc90490212524df
Validity
Not Before: Jul 24 14:00:44 2026 GMT
Not After : Jul 25 14:00:44 2026 GMT
Subject: CN=4fbc7b566574de40727ba84f1957c628e3519343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:e1:f7:23:aa:13:5e:4c:11:b3:95:4f:3b:
cb:36:99:a6:a3:6e:d1:40:db:bb:19:74:45:81:e0:
0c:b8:e6:08:e7:02:8a:7c:63:7e:3e:c3:f5:29:7a:
73:e2:7d:d3:49:b6:7c:a3:f9:37:60:93:93:ee:1a:
ee:cc:1f:60:f1:3d:f7:e2:0a:19:39:98:a7:fe:65:
a9:f1:5e:f9:73:3e:a3:e1:e1:89:32:33:29:0a:9a:
00:73:16:b4:72:97:f4:60:f1:4d:55:08:09:fc:d5:
38:fc:34:72:7a:61:ad:27:79:60:6f:37:76:16:ca:
26:6d:7d:18:96:c4:99:fa:e3:7c:5d:57:7d:0e:66:
dc:8c:a7:9f:f5:ce:e4:6b:af:44:71:8e:5d:96:31:
af:f0:e9:73:38:51:dc:d0:be:c0:ec:53:3b:80:d7:
bb:aa:74:ee:57:63:19:91:48:89:49:1b:ce:7c:37:
93:e7:97:8f:ea:a0:e6:0f:98:eb:25:d6:a1:4f:4a:
13:07:54:61:3e:fb:c9:b9:b2:69:74:35:29:0c:8a:
e9:37:79:8c:98:8e:f5:3a:1e:34:3f:f2:f1:eb:d9:
6f:07:42:03:21:a1:2b:c4:1a:f2:91:57:d2:9f:c2:
d3:e9:5c:96:78:8f:68:7c:de:90:2a:9a:93:44:a3:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BC:7B:56:65:74:DE:40:72:7B:A8:4F:19:57:C6:28:E3:51:93:43
X509v3 Authority Key Identifier:
keyid:30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ff:d2:38:60:6d:90:f7:d5:a1:79:b8:4b:a3:9f:f1:60:86:
bd:48:15:f0:80:46:1b:4c:80:c2:4d:12:12:64:f7:4e:bf:b7:
8b:2c:80:d6:65:ef:29:57:ec:3b:47:f2:cf:88:f6:f3:87:5c:
72:7f:35:24:d9:f6:79:ae:64:71:3e:de:ae:ac:d9:8d:67:d5:
e8:41:5f:2f:92:bf:38:39:bd:76:1f:f7:07:87:5c:50:2b:e4:
fd:f3:c2:62:b3:fc:f7:f1:10:93:8d:74:9c:5c:a0:2e:1f:d7:
64:b0:a0:14:2d:2f:e2:78:75:13:95:f0:94:11:59:bd:97:1e:
67:1b:65:db:0d:c6:a6:04:66:19:f4:84:80:20:78:b7:6a:8c:
dc:65:71:ae:58:98:0b:c7:d3:c4:f5:07:f5:39:ba:8a:09:74:
94:b7:22:cd:cd:63:51:2e:48:30:41:f2:70:01:67:0f:a8:7e:
a3:e3:5d:37:ca:e0:ae:17:77:a0:39:7f:90:db:0c:74:f9:76:
69:13:12:eb:28:90:55:3e:a9:c2:7f:39:ae:39:a9:c3:f1:68:
be:1f:03:bf:c9:18:b3:6c:07:88:1f:bd:f1:13:1e:57:cf:01:
46:42:86:7c:8d:a0:ba:36:0c:8d:ab:f5:67:2c:44:3b:53:f7:
d2:b1:b7:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbbIKlPV2s8khelBBxoeaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjYzYjViNzA0NDIzMmI5ODk4MThkMTJjYzkwNDkwMjEy
NTI0ZGYwHhcNMjYwNzI0MTQwMDQ0WhcNMjYwNzI1MTQwMDQ0WjAzMTEwLwYDVQQD
Eyg0ZmJjN2I1NjY1NzRkZTQwNzI3YmE4NGYxOTU3YzYyOGUzNTE5MzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDbh9yOqE15MEbOVTzvLNpmmo27R
QNu7GXRFgeAMuOYI5wKKfGN+PsP1KXpz4n3TSbZ8o/k3YJOT7hruzB9g8T334goZ
OZin/mWp8V75cz6j4eGJMjMpCpoAcxa0cpf0YPFNVQgJ/NU4/DRyemGtJ3lgbzd2
FsombX0YlsSZ+uN8XVd9DmbcjKef9c7ka69EcY5dljGv8OlzOFHc0L7A7FM7gNe7
qnTuV2MZkUiJSRvOfDeT55eP6qDmD5jrJdahT0oTB1RhPvvJubJpdDUpDIrpN3mM
mI71Oh40P/Lx69lvB0IDIaErxBrykVfSn8LT6VyWeI9ofN6QKpqTRKMxxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+8e1ZldN5AcnuoTxlXxijjUZNDMB8GA1UdIwQY
MBaAFDBmO1twRCMrmJgY0SzJBJAhJSTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdZN1czQkVJeXVZbUJqUkxNa0VrQ0VsSk44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMGYzNGUtZTJhZC00YjhkLThjZTAt
MDExODc4MjU1YmE3LzEvTUdZN1czQkVJeXVZbUJqUkxNa0VrQ0VsSk44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8zMGYzNGUtZTJhZC00YjhkLThjZTAtMDExODc4MjU1YmE3
LzEvTUdZN1czQkVJeXVZbUJqUkxNa0VrQ0VsSk44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa//SOGBt
kPfVoXm4S6Of8WCGvUgV8IBGG0yAwk0SEmT3Tr+3iyyA1mXvKVfsO0fyz4j284dc
cn81JNn2ea5kcT7erqzZjWfV6EFfL5K/ODm9dh/3B4dcUCvk/fPCYrP89/EQk410
nFygLh/XZLCgFC0v4nh1E5XwlBFZvZceZxtl2w3GpgRmGfSEgCB4t2qM3GVxrliY
C8fTxPUH9Tm6igl0lLcizc1jUS5IMEHycAFnD6h+o+NdN8rgrhd3oDl/kNsMdPl2
aRMS6yiQVT6pwn85rjmpw/Fovh8Dv8kYs2wHiB+98RMeV88BRkKGfI2gujYMjav1
ZyxEO1P30rG3gg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:42:06 2026 by rpki-client