Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: wi/Z/NMt0Tt05hTuSiEcR92zxSff0z0Z5ySG77SvbDs=
Subject key identifier: 80:76:3C:59:0E:4B:63:01:FC:BD:18:DC:76:18:3F:E8:CD:29:8F:A4
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 019CAAC6B4E89258CFD8F9C071079391AF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 13E4
Signing time: Sun 01 Mar 2026 19:01:15 +0000
Manifest this update: Sun 01 Mar 2026 19:01:15 +0000
Manifest next update: Mon 02 Mar 2026 19:01:15 +0000
Files and hashes: 1: Bk9vyq1LgRpU9QeZwN0V_GD5gHw.roa (hash: yNE44jpnjgZHS9ufgLSJ6WIuzBw3d04Exh56Z7CxQ4s=)
2: KKpHDDFH2cfzrNDJZuhoGv_wS_w.roa (hash: ATx2mcVJOEtuVh1BU96vsI8Si7Mn1Bxh+fLVIbYJBSM=)
3: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: yK65SSHtVSTzt411THPJ/4DiU3DZudmiNU4hHOAeI6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b4:e8:92:58:cf:d8:f9:c0:71:07:93:91:af:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Mar 1 19:01:15 2026 GMT
Not After : Mar 2 19:01:15 2026 GMT
Subject: CN=80763c590e4b6301fcbd18dc76183fe8cd298fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b6:8d:e6:57:ac:4c:36:8c:3f:6c:8f:dd:7b:
42:db:9c:51:38:13:b6:89:63:49:7c:a9:da:c0:43:
af:4f:07:a7:64:24:b0:e0:63:49:57:32:f0:a7:61:
66:0c:e9:03:62:1e:70:c2:7b:c2:cf:ee:14:68:9a:
4e:c2:c4:6d:b0:1a:12:c8:bb:e1:6e:99:c3:59:ae:
a5:50:c8:c6:f3:fd:53:11:af:23:c9:f6:36:84:8c:
ec:ec:66:e8:bd:2b:2d:a1:19:dd:f0:4e:12:b2:a5:
61:44:7e:5f:f7:08:3b:2f:33:fa:9d:67:0b:74:a8:
bd:2f:d1:a4:21:ca:e2:53:94:90:08:61:f9:f2:a8:
9b:37:61:91:6f:4c:23:19:e9:1e:10:01:5e:31:f5:
98:00:b0:69:0b:6c:87:dc:4c:89:ef:e6:1e:00:5d:
3f:6d:c8:ea:14:ad:7b:0e:e4:ee:8f:91:e6:8a:a6:
ef:04:a6:1f:9e:b9:67:25:e9:f8:ac:10:2f:b0:fd:
44:74:9b:ff:96:a8:1e:fd:8f:71:52:cd:80:94:1e:
80:8a:0e:ce:0b:b2:3b:e3:52:3f:72:c5:ed:6f:97:
4d:ad:0d:22:f8:87:2b:66:70:95:b1:91:ab:20:d9:
16:e3:bd:02:eb:a3:60:ee:95:f6:81:02:95:ee:ac:
2a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:76:3C:59:0E:4B:63:01:FC:BD:18:DC:76:18:3F:E8:CD:29:8F:A4
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d5:6d:a3:df:2a:0d:b3:04:ae:5d:07:95:14:85:74:0e:d7:
15:59:14:26:31:2e:85:22:29:ad:87:5b:b8:1d:ee:79:a1:14:
f5:82:e0:d0:5d:fa:71:1e:8b:94:02:e2:c9:da:1f:70:e0:38:
3d:bb:4b:ad:7c:54:51:f9:25:ed:79:22:7a:a2:46:45:e4:7f:
a4:d5:5b:9c:d3:8f:f4:4e:5c:41:f3:df:85:d3:ee:8a:a5:f3:
34:32:c8:3d:d0:f3:b0:20:5d:0d:ab:31:ec:8c:b8:c7:d9:b6:
56:1d:d4:f1:f3:9d:b9:0b:52:e9:a0:bd:85:d4:60:d4:27:14:
c4:6d:3a:ac:57:0e:4c:50:9c:e0:e3:13:3e:ed:d7:23:7b:b4:
3c:0d:6f:2e:b1:67:f7:5d:4e:22:09:56:13:06:df:f9:2e:07:
7d:89:a0:17:c9:8d:e5:5c:bd:b0:81:9f:4e:6b:03:44:25:28:
2c:72:ad:cb:8c:b5:76:9a:05:49:dc:93:43:fd:93:6f:23:d7:
58:1b:a6:4c:18:ae:29:df:19:c1:a1:eb:08:a7:cb:68:0a:f6:
a7:0e:69:67:60:e9:57:5f:de:57:12:83:9b:27:01:89:7d:7a:
9c:20:d4:9e:73:0a:28:59:76:9d:7b:82:ea:42:21:ac:24:49:
fa:42:16:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxrTokljP2PnAcQeTka8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNmQ2MTgzNTViZDg5MzdmNzViYjQ2NTBiYjVjMWFmNzBm
OWExMmUwHhcNMjYwMzAxMTkwMTE1WhcNMjYwMzAyMTkwMTE1WjAzMTEwLwYDVQQD
Eyg4MDc2M2M1OTBlNGI2MzAxZmNiZDE4ZGM3NjE4M2ZlOGNkMjk4ZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8raN5lesTDaMP2yP3XtC25xROBO2
iWNJfKnawEOvTwenZCSw4GNJVzLwp2FmDOkDYh5wwnvCz+4UaJpOwsRtsBoSyLvh
bpnDWa6lUMjG8/1TEa8jyfY2hIzs7GbovSstoRnd8E4SsqVhRH5f9wg7LzP6nWcL
dKi9L9GkIcriU5SQCGH58qibN2GRb0wjGekeEAFeMfWYALBpC2yH3EyJ7+YeAF0/
bcjqFK17DuTuj5HmiqbvBKYfnrlnJen4rBAvsP1EdJv/lqge/Y9xUs2AlB6Aig7O
C7I741I/csXtb5dNrQ0i+IcrZnCVsZGrINkW470C66Ng7pX2gQKV7qwqGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIB2PFkOS2MB/L0Y3HYYP+jNKY+kMB8GA1UdIwQY
MBaAFDBtYYNVvYk391u0ZQu1wa9w+aEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2Ut
NTE2ZmZkODczNzZjLzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2UtNTE2ZmZkODczNzZj
LzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANVto98q
DbMErl0HlRSFdA7XFVkUJjEuhSIprYdbuB3ueaEU9YLg0F36cR6LlALiydofcOA4
PbtLrXxUUfkl7XkieqJGReR/pNVbnNOP9E5cQfPfhdPuiqXzNDLIPdDzsCBdDasx
7Iy4x9m2Vh3U8fOduQtS6aC9hdRg1CcUxG06rFcOTFCc4OMTPu3XI3u0PA1vLrFn
911OIglWEwbf+S4HfYmgF8mN5Vy9sIGfTmsDRCUoLHKty4y1dpoFSdyTQ/2TbyPX
WBumTBiuKd8ZwaHrCKfLaAr2pw5pZ2DpV1/eVxKDmycBiX16nCDUnnMKKFl2nXuC
6kIhrCRJ+kIW+w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:45 2026 by rpki-client