Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: URSQCOUNL0qzaH/GKEa1chaP4ruq8C3r7dPK+PLEdRM=
Subject key identifier: 4F:E1:66:35:FF:15:FD:69:DB:05:08:1A:11:AF:9B:21:47:D4:A6:5A
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 01A0C47BDA53ED9F96C0D2403ECD1FB10FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 0A84
Signing time: Mon 21 Sep 2026 15:00:46 +0000
Manifest this update: Mon 21 Sep 2026 15:00:46 +0000
Manifest next update: Tue 22 Sep 2026 15:00:46 +0000
Files and hashes: 1: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: +CtnMK0v9oZDC5n32yBz6axfirDcv/kdJsTJlrk4PMI=)
2: RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa (hash: rLSLw6+T+Et0d1Efgq167+zRkvB4aSf6ep1NRZLeTMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:da:53:ed:9f:96:c0:d2:40:3e:cd:1f:b1:0f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Sep 21 15:00:46 2026 GMT
Not After : Sep 22 15:00:46 2026 GMT
Subject: CN=4fe16635ff15fd69db05081a11af9b2147d4a65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f3:38:d6:9c:e5:e5:1c:15:6b:5f:46:ce:4d:
0c:15:dd:45:82:78:3c:6c:a5:bf:31:33:3f:42:b6:
ec:48:c9:e9:31:8e:99:61:21:e8:60:b1:7c:29:a2:
dd:c6:8a:69:20:a0:27:44:d1:f9:5b:a5:b1:3a:dc:
9f:34:0b:18:ac:ed:4b:15:57:79:7d:11:d6:cc:98:
e1:e9:ae:03:2b:75:72:2d:8f:99:d9:96:1e:8b:ee:
17:26:25:b5:d7:fb:d7:16:c0:b5:59:52:a1:c4:5e:
fc:bf:81:2d:14:dd:18:39:09:ac:65:a3:f6:02:6f:
ac:c3:fd:b5:81:eb:7c:21:74:03:a4:cd:91:90:4d:
cd:6f:06:c4:44:2d:41:49:d8:89:d3:98:09:7d:e1:
52:59:41:2d:12:c7:49:33:b0:57:06:e6:f9:f5:eb:
2b:65:c3:29:58:79:7a:39:33:4c:f7:d9:94:a1:9f:
ce:92:cd:f6:6d:3b:32:6f:8f:a9:94:be:28:69:c5:
45:0a:31:3d:35:47:82:62:e3:d6:29:a9:64:d2:47:
1c:0c:0b:59:c8:4f:f8:03:13:5a:c1:63:38:f5:f3:
3a:05:e6:a7:ab:e7:d4:b2:03:a4:68:4c:bf:c1:8b:
fa:c9:8a:39:b5:ee:43:80:be:7a:66:d9:33:49:23:
58:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E1:66:35:FF:15:FD:69:DB:05:08:1A:11:AF:9B:21:47:D4:A6:5A
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:86:21:9b:07:7f:9a:87:1a:ad:cd:9b:43:36:a6:82:af:7c:
94:86:ec:92:75:00:26:a1:83:5d:4b:68:72:03:47:34:f3:47:
9c:17:4a:4b:ae:d1:bf:1b:11:24:31:44:fb:12:63:bf:04:5c:
d3:69:a9:6d:1a:58:4f:11:a7:60:17:25:0d:f3:98:a4:41:c4:
05:cf:90:c2:2d:bd:3d:11:8f:82:65:21:7c:2d:4c:87:fc:06:
6f:87:b3:69:20:c7:39:9e:4b:51:ba:03:5f:31:20:38:39:41:
4b:e0:6b:68:27:b0:9f:41:f3:56:2c:22:73:1e:d2:97:76:2a:
10:6a:ac:42:ea:ac:1d:d4:c3:72:c0:74:dd:31:cb:34:2e:1b:
3e:a6:bb:8e:05:d0:96:4e:27:56:c5:3d:ed:4a:d7:7d:4b:c9:
fb:7c:0c:4a:49:bc:40:8d:16:22:93:47:55:9e:41:ac:d3:79:
5f:19:0e:d8:ed:5e:e2:76:0c:4e:6e:49:38:d1:2b:83:fc:5a:
e1:bc:99:cc:3b:da:fd:9d:f2:c8:f7:4b:69:35:28:17:3a:52:
4c:81:68:33:a1:b4:9b:d7:29:36:a9:48:53:4b:34:af:d1:87:
be:58:cd:99:2a:fe:65:b2:76:d1:81:67:2b:8e:ce:d3:cb:c8:
8d:68:81:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:49:46 2026 by rpki-client