Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: JK9UBEhjFFMfGudb1T6YZlZAy00umtC8p4q5PlhSMb8=
Subject key identifier: 5A:77:2D:93:A3:21:54:99:B2:1C:3D:D9:D8:D0:20:1E:71:AC:0A:E4
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 01A0CB223C4573F6396D562C54FCBB02FC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 1607
Signing time: Tue 22 Sep 2026 22:00:13 +0000
Manifest this update: Tue 22 Sep 2026 22:00:13 +0000
Manifest next update: Wed 23 Sep 2026 22:00:13 +0000
Files and hashes: 1: Bk9vyq1LgRpU9QeZwN0V_GD5gHw.roa (hash: yNE44jpnjgZHS9ufgLSJ6WIuzBw3d04Exh56Z7CxQ4s=)
2: KKpHDDFH2cfzrNDJZuhoGv_wS_w.roa (hash: ATx2mcVJOEtuVh1BU96vsI8Si7Mn1Bxh+fLVIbYJBSM=)
3: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: DHvtTqaGsKFKtsQN4PCPReUWs19ujMAJQwbPYdUWvos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:3c:45:73:f6:39:6d:56:2c:54:fc:bb:02:fc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Sep 22 22:00:13 2026 GMT
Not After : Sep 23 22:00:13 2026 GMT
Subject: CN=5a772d93a3215499b21c3dd9d8d0201e71ac0ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d9:ef:9c:65:79:a4:dc:65:15:a9:76:3b:39:
2a:2a:55:db:3f:e4:d6:b9:34:bd:a1:54:4d:0b:79:
52:bb:1e:fa:24:84:69:ed:65:bf:29:f4:cc:31:ac:
b1:81:cd:96:d7:36:3e:a0:36:94:76:be:dc:d9:52:
65:4a:8b:62:92:bd:15:df:ff:18:62:fa:62:9b:d7:
0b:10:e7:f9:a8:f9:1c:4b:a4:d5:ec:43:96:c5:9e:
96:a1:ae:b8:d0:11:aa:4e:92:78:02:f4:27:3d:58:
ce:41:60:6d:de:27:d8:c5:3b:d2:94:50:97:b2:f1:
64:54:6f:c9:4a:28:a9:93:9b:64:45:c6:81:c8:bb:
1b:a4:78:05:c0:8d:2c:49:6d:a8:a0:78:a4:73:21:
df:54:be:f6:16:39:4f:69:89:13:39:6f:88:90:a7:
f6:e8:8e:50:50:6c:28:0c:97:ad:9e:09:31:26:a6:
fe:d9:33:45:22:1b:46:14:ab:df:9d:99:cb:00:b9:
c4:e1:0e:bb:2e:eb:80:6e:bd:ba:0b:b8:fe:88:25:
1b:f3:b1:43:28:4b:d5:11:56:fd:b5:1a:04:8d:78:
aa:b5:7b:16:64:55:a2:46:b5:d6:c8:23:07:a5:bc:
11:93:21:95:60:d3:d8:d9:09:d7:94:aa:de:fc:10:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:77:2D:93:A3:21:54:99:B2:1C:3D:D9:D8:D0:20:1E:71:AC:0A:E4
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e0:94:20:93:fe:70:b1:72:b7:e8:57:b3:c0:28:d2:c5:ff:
c5:fc:6f:0e:c8:f4:5d:a7:2b:27:f0:eb:5d:c6:ce:fe:ea:9e:
80:76:f0:20:90:e1:42:d8:e7:d9:96:71:df:a3:9d:8c:9b:22:
7f:26:b2:b0:0e:9e:4c:c6:6f:3f:71:fd:1c:22:5a:de:47:fe:
0d:44:2d:d5:3e:63:d2:60:31:2b:ab:4e:f9:8a:07:04:19:d4:
8e:d2:92:ba:8c:23:22:3d:50:98:3e:ad:04:91:9a:e7:f5:f8:
77:39:3f:92:84:b7:49:99:d4:94:ad:db:3e:dc:56:b5:c3:b9:
68:26:e9:b3:9c:c3:86:43:19:eb:48:0a:4f:64:15:ae:76:51:
69:7d:db:a5:56:84:5c:e2:ee:b2:32:b1:48:4b:f5:f4:f2:f1:
74:fc:b9:d8:d9:dc:97:b2:3a:62:e1:28:89:1b:9d:79:26:b9:
45:ca:8e:f1:4b:1e:69:63:49:32:c3:96:c0:c3:c1:bf:c5:b5:
02:86:59:48:d4:44:cf:f1:12:05:0a:50:dc:5f:37:c7:7c:a8:
09:cf:50:68:84:7f:97:a9:12:90:55:e4:be:26:a3:86:a4:e4:
35:70:8b:b6:7b:f8:97:d4:f5:f5:74:cb:1a:4b:f0:5c:55:22:
0d:71:3f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:34:52 2026 by rpki-client