Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: VvsVtYoYFLpEwcycu1H2FnOH8pQB/FQk15vIJ7GJbA8=
Subject key identifier: 6A:49:7D:86:01:AF:B8:EE:A2:4B:2D:C8:5F:03:AF:6F:DB:40:5D:A8
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 019CACB51747535A5660840592FDEA1E7DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 13E5
Signing time: Mon 02 Mar 2026 04:01:14 +0000
Manifest this update: Mon 02 Mar 2026 04:01:14 +0000
Manifest next update: Tue 03 Mar 2026 04:01:14 +0000
Files and hashes: 1: Bk9vyq1LgRpU9QeZwN0V_GD5gHw.roa (hash: yNE44jpnjgZHS9ufgLSJ6WIuzBw3d04Exh56Z7CxQ4s=)
2: KKpHDDFH2cfzrNDJZuhoGv_wS_w.roa (hash: ATx2mcVJOEtuVh1BU96vsI8Si7Mn1Bxh+fLVIbYJBSM=)
3: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: H7WQzb8NMClaAIwek3J1gbkF+0e0YSwg4NuwnP8Amwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:17:47:53:5a:56:60:84:05:92:fd:ea:1e:7d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Mar 2 04:01:14 2026 GMT
Not After : Mar 3 04:01:14 2026 GMT
Subject: CN=6a497d8601afb8eea24b2dc85f03af6fdb405da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:d4:38:db:1f:a7:bf:d3:fb:e8:2b:1e:3d:ec:
20:4e:d1:89:a1:b5:b7:c8:17:ca:11:20:e1:d7:e3:
b5:92:70:72:51:f3:f9:b1:f3:2f:4e:86:2b:02:6c:
10:8c:60:cb:83:89:19:25:e7:97:1e:43:0b:65:7c:
bb:e4:81:93:63:57:27:07:3d:66:f9:48:fc:b8:00:
c9:2c:9c:f7:9b:0a:fa:e5:27:6b:94:e2:ee:57:32:
7b:ea:51:b0:56:03:12:8a:f3:00:32:ec:a0:15:a9:
ac:15:0c:e9:98:a0:16:a6:e1:24:07:50:90:26:fe:
12:45:32:c2:19:95:59:fc:e6:72:30:20:d5:30:55:
27:9f:b7:e5:11:d4:64:30:32:e1:37:ab:c5:0a:7c:
0f:fb:21:ba:3e:b1:a2:f4:c3:3b:41:99:cf:57:b3:
aa:d8:96:8d:e7:25:a0:42:04:48:85:50:a4:c1:84:
10:5e:97:64:90:c7:41:03:c6:b9:ce:e4:f3:87:7b:
36:19:e9:e3:d0:ca:2b:0c:eb:f2:3f:60:01:6d:c9:
5f:87:1b:94:0f:c9:81:2e:6c:2f:a2:64:68:18:1d:
e4:75:55:b8:76:70:6a:a6:c9:24:a2:43:77:e8:05:
25:c0:12:bb:6b:79:29:c4:bf:93:93:cf:b5:73:cf:
fa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:49:7D:86:01:AF:B8:EE:A2:4B:2D:C8:5F:03:AF:6F:DB:40:5D:A8
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b5:52:24:03:39:12:8e:82:77:e2:7f:6a:ec:a0:8d:af:84:
33:9a:21:55:1a:62:f2:af:de:f7:53:91:b1:f3:76:11:f0:c2:
86:9b:69:c2:37:26:df:14:69:9e:39:84:0c:09:4f:a3:e0:32:
57:d9:e2:cb:8c:12:b6:30:02:b6:89:31:a8:3a:0a:78:7d:c1:
4e:eb:cb:28:2b:a1:58:c8:bf:96:55:0f:52:2a:e1:96:ad:77:
9f:0d:85:65:cb:fb:34:60:9d:48:4c:eb:ce:32:72:97:83:17:
b5:42:92:0f:65:36:63:15:13:dd:ae:76:28:55:80:99:b7:25:
03:9d:cd:4f:a4:7e:f9:46:6b:70:1d:60:da:e7:76:e2:37:7e:
18:a7:ea:3c:30:21:0b:fc:d8:c2:19:b1:b3:8e:23:60:8d:a4:
78:38:1e:57:7c:fb:66:b3:33:3f:6e:b4:fa:90:04:18:36:a0:
1c:61:59:c3:d9:9e:a4:e6:af:0a:e3:cc:e5:73:6f:6f:b4:dd:
76:07:d0:f6:33:80:46:dc:1d:b0:9a:0d:e1:2b:7c:40:0f:74:
f3:96:7c:dd:59:52:77:ff:88:20:b9:81:1a:74:95:1f:6a:78:
60:ee:e9:61:50:a5:05:b3:9b:fb:72:28:33:0b:f5:be:2c:4e:
05:3b:ae:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:20 2026 by rpki-client