Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File: M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier: dfNi9LXJahcapM/R6XcH63t7dbnhULUlxMufNgWsBwk=
Subject key identifier: A4:38:A9:C7:A4:53:15:80:64:EF:A6:B6:9A:83:28:68:D0:46:CC:9B
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 019D25F1E0A1F862F67BCB7982F0F9CF1DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number: 17DD
Signing time: Wed 25 Mar 2026 17:01:41 +0000
Manifest this update: Wed 25 Mar 2026 17:01:41 +0000
Manifest next update: Thu 26 Mar 2026 17:01:41 +0000
Files and hashes: 1: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: XKm+edcJ0ImHWZkS+O5eELFdqEQK4WI1lwpqyG+JiFY=)
2: jO9rf4-cCHZRF2KoiLta2NyAQgU.roa (hash: UwmPs36c2ef9tHjcukHaPVItxdtDMmpbGOtpHRoCvf0=)
3: xn4i-fiHxOz0VUsB8YhWKLghbLs.roa (hash: Ptihx8qc04YVHI7Uz+aNOpCGFom4Sx5jCTJsyxvgVYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e0:a1:f8:62:f6:7b:cb:79:82:f0:f9:cf:1d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Mar 25 17:01:41 2026 GMT
Not After : Mar 26 17:01:41 2026 GMT
Subject: CN=a438a9c7a453158064efa6b69a832868d046cc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:86:20:eb:15:8c:98:9f:5a:9d:e6:f0:c8:df:
60:9e:3a:f1:58:f0:f7:e2:69:39:a1:f5:71:3e:2f:
f0:8a:45:22:6a:56:4d:1b:88:01:d6:73:69:0d:3d:
10:3b:94:82:ae:e4:7c:74:b0:a4:2b:a3:0d:73:39:
75:ef:93:43:66:46:b0:40:56:1e:1c:27:76:68:ee:
01:eb:98:3f:ba:ea:28:37:25:82:89:b3:61:9c:19:
95:1b:d0:37:1d:ce:74:0f:f1:cb:af:1d:cb:6c:bd:
98:2d:e1:5e:05:45:fa:08:fe:62:bb:5f:f7:a9:46:
a6:10:1a:f3:40:96:10:7f:a5:6e:eb:55:9e:7c:fb:
7e:09:fe:74:4c:4d:5a:f2:1d:3f:94:f8:f7:4d:f7:
7d:61:33:aa:6c:ca:2b:96:10:88:8c:67:5a:db:37:
11:4e:b5:0a:9a:9f:29:39:40:97:46:74:19:2d:6e:
cd:18:22:7b:7d:63:92:95:c2:f6:8e:62:6a:6f:ef:
18:10:4a:45:d3:d6:3c:2b:78:8e:54:e8:75:dc:35:
28:21:73:f1:11:e6:1c:d2:74:7e:b3:30:d8:ab:fc:
b0:a9:a2:9c:32:c5:aa:75:74:8f:ef:84:7c:42:39:
b3:55:5c:90:ec:e4:ec:47:53:4e:0c:dd:5e:5d:16:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:38:A9:C7:A4:53:15:80:64:EF:A6:B6:9A:83:28:68:D0:46:CC:9B
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f6:1c:6d:04:0f:b4:cd:94:e6:a3:59:a4:23:ae:8b:ba:95:
79:af:86:b2:3d:9a:31:ac:30:39:fb:ce:42:2a:dc:59:87:55:
d8:9b:9e:2c:20:8a:91:a1:06:ca:6b:b8:35:73:e1:68:c0:53:
60:8a:af:0b:f6:2a:6f:4c:4a:93:ed:b8:2b:f8:22:7c:14:cb:
95:91:c5:65:92:9b:38:aa:7e:8b:3c:fb:33:88:f4:da:1b:74:
22:ff:ef:2d:bc:d1:fe:bc:36:38:19:68:76:af:49:d5:10:63:
df:50:d5:c9:9f:91:e2:22:d1:59:20:50:3e:b7:69:7d:26:c7:
ed:1f:92:57:c6:99:8d:53:80:a7:9e:a2:fc:ec:de:8b:8a:23:
83:e4:be:b7:9f:ad:9c:8f:66:7e:c2:65:56:62:73:ca:37:63:
8f:b6:53:27:2b:15:8f:05:36:5f:f5:aa:ef:52:4c:59:2a:8e:
2e:c2:d3:b6:66:27:71:75:43:f2:ba:94:f4:b8:ed:20:a2:15:
ad:4d:18:fd:1d:70:f0:90:75:82:2a:81:3c:2c:ce:aa:a8:b3:
a8:ec:50:46:61:8b:e9:ab:c0:ae:d6:e1:a2:47:37:b1:7d:fe:
20:ae:c9:8a:ed:5a:2e:bc:2a:bc:ab:e9:19:f9:89:1e:76:f8:
48:06:46:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:25 2026 by rpki-client