Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: 0tdsSz4kWo+6xW2dzGuFiV1L+i4XwmPP2f/Cx10UFqo=
Subject key identifier: D2:07:E9:B1:B4:B9:95:89:4F:B8:4F:02:F1:05:60:96:1F:DD:2E:BC
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 019DA3E640412294950DAB61A641175A3DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 1465
Signing time: Sun 19 Apr 2026 04:01:09 +0000
Manifest this update: Sun 19 Apr 2026 04:01:09 +0000
Manifest next update: Mon 20 Apr 2026 04:01:09 +0000
Files and hashes: 1: Bk9vyq1LgRpU9QeZwN0V_GD5gHw.roa (hash: yNE44jpnjgZHS9ufgLSJ6WIuzBw3d04Exh56Z7CxQ4s=)
2: KKpHDDFH2cfzrNDJZuhoGv_wS_w.roa (hash: ATx2mcVJOEtuVh1BU96vsI8Si7Mn1Bxh+fLVIbYJBSM=)
3: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: NCNweDeYKhUjIQVnuCI8lHrUObvnjn/uFLNquFaRVWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:40:41:22:94:95:0d:ab:61:a6:41:17:5a:3d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Apr 19 04:01:09 2026 GMT
Not After : Apr 20 04:01:09 2026 GMT
Subject: CN=d207e9b1b4b995894fb84f02f10560961fdd2ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:30:64:54:81:cc:ac:fc:a4:ee:b5:68:b5:
33:60:53:d8:71:b3:e7:1e:b1:3c:71:ca:86:23:ae:
47:09:79:a5:b0:f7:0e:0d:c8:7e:d6:a2:66:21:7f:
85:c9:76:26:fb:57:06:ac:6d:55:53:62:ee:50:1f:
ca:c2:58:af:1b:88:3c:07:77:e8:c7:8b:19:1a:2b:
9b:cd:3c:d2:24:c8:67:21:41:39:fd:fb:f3:34:19:
a5:9a:1c:3e:9d:d1:e2:33:c6:36:a7:28:dc:d3:25:
fa:13:e4:60:65:62:c8:70:15:81:5b:ca:d5:46:4c:
66:6d:6e:b8:b8:68:f5:95:1f:06:62:ef:ab:ef:52:
25:4a:ad:a6:11:e0:14:0d:f9:75:63:94:b0:cf:61:
c1:ff:1d:ef:d1:20:b4:96:7a:e7:37:c9:84:23:4e:
29:b4:98:c6:bd:da:d4:1e:88:e4:f8:06:d7:a0:cd:
f0:9e:63:15:25:07:20:05:6e:7e:25:29:52:f8:eb:
2c:a7:24:2b:f9:ba:2d:f0:ea:fe:28:e0:c1:43:e4:
45:1e:d3:4e:75:ba:20:a6:04:5e:97:b4:40:06:02:
6e:4b:0d:de:93:18:dc:f1:2b:2f:de:02:4b:94:43:
40:a2:3e:f4:42:9d:71:09:c2:8e:b6:ba:06:4b:0b:
ea:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:07:E9:B1:B4:B9:95:89:4F:B8:4F:02:F1:05:60:96:1F:DD:2E:BC
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bf:95:f3:1c:30:42:df:c5:d7:d2:08:8a:f5:39:7b:57:78:
c2:54:e6:9b:24:71:7e:42:0c:ef:08:0e:13:a8:0b:6f:58:59:
d1:90:d1:15:01:87:83:04:f5:3f:f1:c8:78:bb:42:bc:d9:79:
44:16:47:46:1a:60:09:c4:4c:fe:47:1d:22:c2:ea:70:fa:e0:
c6:9f:c6:f8:51:da:c6:75:4d:5c:e5:22:63:ff:b8:85:08:e6:
8d:31:ad:24:b9:d2:4d:99:4c:a8:a0:13:fe:d6:44:15:70:3a:
7c:78:4f:86:12:09:ba:c0:89:dc:58:e5:f8:d7:78:49:99:90:
fc:6a:40:3b:d8:99:e0:45:49:0e:d1:4f:e9:c4:91:4f:72:19:
75:fd:79:1c:57:c8:27:ad:47:0d:8c:50:c4:58:26:76:01:ec:
38:58:65:da:35:5a:92:46:ed:89:c7:c7:43:65:33:73:1c:40:
65:0b:7a:1a:1f:53:e9:8d:d2:74:36:e2:28:00:e3:f5:a8:df:
76:aa:44:9a:80:46:24:d5:83:3e:55:1b:1c:83:72:07:be:7f:
b1:b5:ef:4d:ff:17:f9:bd:db:3c:ea:62:96:ca:7e:38:30:53:
19:1e:e0:6b:55:89:98:92:53:a0:d3:f8:47:04:c4:a8:85:65:
20:a3:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:27 2026 by rpki-client