Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: hXvkyB0ZgtQ3RymhBl5IuNb3h+oi1GdehrhJvWEdEKw=
Subject key identifier: C8:EC:EF:0E:20:6E:F5:90:84:55:CA:13:C4:4F:CA:8F:CE:66:A0:83
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 019FAA87AA6FC8B4418E3054B2C2DB3D5AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 09F2
Signing time: Tue 28 Jul 2026 21:00:45 +0000
Manifest this update: Tue 28 Jul 2026 21:00:45 +0000
Manifest next update: Wed 29 Jul 2026 21:00:45 +0000
Files and hashes: 1: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: gJaWYrTsIXiS1eLMoVTXmLhgPzhc1VHIwxj2z+vCcfM=)
2: RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa (hash: rLSLw6+T+Et0d1Efgq167+zRkvB4aSf6ep1NRZLeTMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:aa:6f:c8:b4:41:8e:30:54:b2:c2:db:3d:5a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Jul 28 21:00:45 2026 GMT
Not After : Jul 29 21:00:45 2026 GMT
Subject: CN=c8ecef0e206ef5908455ca13c44fca8fce66a083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:6a:01:a3:88:ce:85:d2:65:a1:15:eb:59:
20:54:62:ac:0f:2a:ee:4c:aa:6e:e1:75:80:31:4e:
fd:8b:fd:d5:6a:de:97:55:12:83:74:1e:ea:23:97:
6a:35:c1:bc:e3:53:15:71:17:00:11:2b:49:20:81:
5e:f7:cb:66:82:98:e8:8e:11:20:fc:da:f9:93:3c:
99:06:75:a2:fa:cf:f3:5e:a3:d7:57:9c:57:b8:d1:
96:b6:57:e4:81:b5:68:fa:57:93:b7:ce:9e:20:25:
fb:e0:61:76:72:51:6e:db:72:71:fc:90:95:4d:b9:
b8:ae:8e:99:64:03:e5:04:d2:e2:2a:bc:61:d6:38:
ba:57:0e:aa:c4:70:55:c0:84:7f:f3:af:7a:58:09:
dd:ed:11:63:e7:b1:ea:65:dc:81:55:60:36:36:d2:
40:97:4a:95:19:60:b7:8a:b4:ad:36:f2:c8:7d:16:
07:28:75:b2:45:bd:de:96:4d:d8:12:65:79:9c:10:
82:d0:e0:36:b0:36:24:7e:37:bf:84:8a:5b:f7:5a:
1f:5c:f5:5f:d5:14:60:2f:21:77:f9:5e:78:86:19:
89:79:e0:37:9f:a2:58:96:21:93:19:8f:fc:99:de:
41:24:8b:63:55:f9:01:7d:52:4d:2b:b5:df:c7:09:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EC:EF:0E:20:6E:F5:90:84:55:CA:13:C4:4F:CA:8F:CE:66:A0:83
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7d:ad:1e:c0:96:57:23:5d:d4:02:a6:82:9f:25:ed:7a:74:
d8:09:84:54:51:40:4d:17:85:fc:ce:e0:5e:80:9d:33:ab:58:
0b:cd:66:60:f1:ad:79:26:07:2a:8c:71:d8:f0:61:b3:00:83:
92:1e:cc:7f:59:d4:9c:43:cd:cc:27:6b:08:7f:b2:73:1d:72:
d5:f9:fa:e5:d0:3e:15:f8:97:b6:fb:21:6a:d3:b3:a2:fb:d7:
bb:9b:fb:59:a5:3e:dd:7e:c8:77:1c:12:37:22:53:e9:5b:2b:
d5:4f:2c:6b:b8:79:c0:73:dc:26:1d:d3:6c:41:31:12:aa:da:
4e:6b:f7:c9:35:8a:0e:2f:f3:57:65:2f:6b:ab:49:72:a9:1c:
69:96:5e:75:e6:15:ec:bd:eb:1d:3a:88:a2:6a:87:94:c0:03:
0b:b5:9a:83:e9:31:b0:19:00:4f:e6:51:35:ef:d1:7a:50:87:
2a:a2:c7:35:55:9c:29:d7:f1:a6:7e:cd:ea:af:7b:35:bd:e0:
70:3f:f0:27:95:ef:85:a0:3c:f5:d4:4c:47:ec:3e:7b:20:a5:
82:33:7e:62:0b:bb:b6:a1:74:c7:0b:bf:2a:50:93:e9:2e:c1:
f2:d1:54:8c:3b:fe:42:1a:63:6b:31:cc:0f:43:68:23:8b:fa:
97:f9:6a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:28 2026 by rpki-client