Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: OBliuT/vLJPDa41tKfZJ4Z7SVpLdLnN4IXYiXLykmm4=
Subject key identifier: 9E:70:55:00:E5:FF:6F:0A:97:0A:80:DB:66:4D:85:83:56:B2:65:80
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 019DA30A8BBFD60E248F4C1A4A647343779C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 08E5
Signing time: Sun 19 Apr 2026 00:01:10 +0000
Manifest this update: Sun 19 Apr 2026 00:01:10 +0000
Manifest next update: Mon 20 Apr 2026 00:01:10 +0000
Files and hashes: 1: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: Wxgg40wSXc6YNEIltaXDfz5/KaSOMZj/JcElH7i93MM=)
2: RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa (hash: rLSLw6+T+Et0d1Efgq167+zRkvB4aSf6ep1NRZLeTMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:8b:bf:d6:0e:24:8f:4c:1a:4a:64:73:43:77:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Apr 19 00:01:10 2026 GMT
Not After : Apr 20 00:01:10 2026 GMT
Subject: CN=9e705500e5ff6f0a970a80db664d858356b26580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:fa:b1:8e:ea:53:9b:84:05:69:fc:f6:ec:
28:a5:0d:8b:75:8f:4b:9c:88:0b:a9:41:23:95:19:
10:47:95:9e:0a:e1:50:be:7f:6e:8f:bb:e9:0a:e0:
dc:88:55:a4:36:bd:cb:0b:70:5e:eb:59:61:79:3e:
06:a2:c9:a8:ac:96:84:00:12:b8:9e:b3:05:75:f2:
81:28:60:3e:12:b5:3e:c4:21:94:c9:ab:0f:cd:97:
63:19:66:26:48:15:4c:35:72:db:57:08:bc:d7:62:
9b:a4:89:aa:34:01:c9:68:c5:6f:0f:60:cb:f2:e4:
23:51:96:a3:1e:90:b7:e7:0f:24:2f:da:8c:f8:3e:
70:93:e2:ba:22:eb:93:6a:f7:89:a4:d8:46:d8:5e:
bd:71:4f:cd:12:13:82:1f:47:c2:0d:00:29:58:a1:
ff:23:fc:3e:d9:51:f4:ee:da:1b:5d:3f:25:58:ae:
db:59:b5:12:d1:96:87:c3:98:bb:12:78:43:d4:c2:
82:70:17:38:bb:6d:93:e8:e9:f4:00:f3:9a:ab:63:
43:26:db:b7:8f:fe:9f:c5:bb:be:80:dc:4d:37:a9:
f0:57:9b:36:b6:57:56:71:47:99:18:90:51:48:b8:
08:8d:85:30:5c:55:4b:f1:33:ab:78:1a:0b:c7:2f:
69:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:70:55:00:E5:FF:6F:0A:97:0A:80:DB:66:4D:85:83:56:B2:65:80
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:47:15:f1:4d:7b:a8:11:13:e6:f5:e6:fb:93:43:b5:db:4e:
f5:b4:47:99:64:61:73:5d:f1:12:80:83:8b:a5:a6:f3:f7:0f:
1c:7c:0c:d2:b2:cd:82:05:2b:68:7c:eb:00:5e:52:e4:93:88:
71:48:6d:26:c3:ca:5f:fc:0d:62:9a:e2:1e:c8:46:cc:8d:70:
ea:88:43:16:27:e7:63:3b:a7:c1:89:c4:74:2e:63:0c:33:e7:
94:8d:56:6a:f9:97:5c:86:5d:1c:71:1c:d8:ab:f8:6d:f2:be:
23:34:96:1c:04:48:a2:a6:fd:af:66:6d:b8:19:6f:c6:99:76:
c1:8e:b8:ea:bc:30:23:14:d7:b3:c9:c5:12:77:b6:9f:d2:ff:
95:82:16:00:b5:e4:9b:38:f7:4c:44:bc:66:ee:60:46:c8:0d:
4d:9e:c9:48:ad:db:41:13:ad:2d:c5:d7:3c:da:1a:6e:d9:c8:
17:cc:bb:e1:a9:87:bc:f8:b6:81:a3:58:db:69:f0:e8:7e:c7:
96:47:93:be:63:fa:cc:fe:88:1a:ed:e1:f1:8e:d6:30:bc:51:
a8:91:08:95:3d:06:66:70:40:32:7a:fe:59:7d:3a:e3:14:b0:
9c:67:e1:b1:91:f5:26:3f:67:06:e1:21:95:16:ac:06:4b:fd:
72:75:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:09 2026 by rpki-client