Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: bmgujj4Pio2E3sjXnQAVkwRJXXMdnVGAOHCacdEw/X0=
Subject key identifier: F9:39:7C:5F:6C:0D:DD:A9:44:18:C1:53:39:59:8C:7A:6E:29:33:BB
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 019CA9EB480BF7D558F0E7122D3EBCC642BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 0864
Signing time: Sun 01 Mar 2026 15:01:34 +0000
Manifest this update: Sun 01 Mar 2026 15:01:34 +0000
Manifest next update: Mon 02 Mar 2026 15:01:34 +0000
Files and hashes: 1: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: jdTIFG6obHm+2vGfq960/nR+1cKmm7NqV/lAlthH+I0=)
2: RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa (hash: rLSLw6+T+Et0d1Efgq167+zRkvB4aSf6ep1NRZLeTMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:48:0b:f7:d5:58:f0:e7:12:2d:3e:bc:c6:42:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Mar 1 15:01:34 2026 GMT
Not After : Mar 2 15:01:34 2026 GMT
Subject: CN=f9397c5f6c0ddda94418c15339598c7a6e2933bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:d3:a6:62:1f:8b:3d:8d:d3:b7:60:0e:d8:
66:9f:5b:76:74:96:59:9b:02:4e:15:af:a1:bc:0a:
1f:63:0a:9e:2f:88:1e:e9:71:29:13:0f:09:c6:4c:
c9:bc:af:bc:75:65:d2:4a:b3:10:ae:9a:75:6e:46:
a5:b2:c8:37:83:99:1a:d1:65:e7:4e:d7:94:63:07:
64:8f:a3:b5:82:58:73:d5:a9:9f:47:c0:ca:78:d5:
5f:d0:00:b2:ef:57:30:0f:28:32:0d:ba:09:dc:94:
16:6a:fd:dd:ad:fd:32:22:15:07:63:9a:d7:f7:6f:
5b:0b:1e:f7:9b:b9:51:81:fb:11:0e:90:55:3b:09:
d9:6b:94:25:46:46:f9:c7:dc:d8:f7:c8:ce:7e:a9:
53:c5:1e:8d:04:bc:c3:13:9e:c2:3a:dc:67:f1:5c:
5a:ae:77:a5:c0:8b:94:c9:d7:76:17:c4:23:56:01:
5b:57:8b:89:89:4e:27:e4:87:63:b1:43:b0:f7:0b:
5f:c4:b8:1f:b5:24:49:25:9d:ba:bc:32:90:2b:6a:
65:f6:a2:91:ef:5f:84:bb:ef:88:b9:33:39:3d:96:
c5:75:c2:98:29:0a:a9:48:d1:53:6e:a2:fd:7a:b6:
a9:5b:e3:08:70:b4:5f:5a:68:64:c3:69:05:67:26:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:39:7C:5F:6C:0D:DD:A9:44:18:C1:53:39:59:8C:7A:6E:29:33:BB
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:04:10:d9:69:9e:b7:12:1e:59:81:40:c9:f7:37:ae:39:ca:
91:26:b3:7f:13:d2:57:c3:68:cf:85:5a:6c:ca:aa:cb:02:61:
04:c6:92:8a:70:86:3c:6f:3f:07:fe:f1:36:82:51:31:38:2d:
b9:af:b8:0d:e8:3a:28:ad:0c:76:f7:5d:b4:ec:ba:74:2c:41:
8b:b1:20:fc:c3:81:7d:b3:0a:f1:3e:6f:7a:7c:b6:c7:35:58:
df:ab:33:1b:5f:ab:8d:6b:ee:65:1b:90:4c:9b:a0:9f:6b:18:
e4:2d:f1:e7:00:ee:fa:33:b7:05:e8:c4:d8:61:f4:6f:05:b0:
fe:92:ca:3a:41:b3:de:0a:07:fb:15:ce:b7:b6:05:8d:b9:34:
5c:80:34:4c:65:08:3b:48:d8:42:da:42:83:4f:37:8c:0d:c7:
32:a5:7f:94:38:f8:27:51:26:e2:7a:6a:a1:f2:e6:0c:09:cd:
18:fa:e8:35:e0:19:e3:61:7f:17:c8:03:c5:46:65:56:70:2a:
30:da:2d:4e:a8:4d:a9:87:be:97:34:71:eb:84:3a:9a:39:d8:
8e:4c:96:48:16:8d:c2:5c:62:df:be:50:e8:f4:0c:89:32:c0:
15:dd:f8:a1:df:2a:8e:2d:f2:66:12:d1:88:90:55:c0:40:8e:
8a:f4:72:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:23 2026 by rpki-client