Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
File: MGwIZtwlII5sB9SiHX2AULUI1qI.mft (raw, json)
Hash identifier: GfFm7v7jxCweWf8SVDnjuE7vYgFudAGulGJUzxIh8T4=
Subject key identifier: 15:F4:ED:E7:20:23:65:A6:13:AE:99:0F:AF:9B:47:AA:7F:D5:C1:42
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial: 019CA9B3FE1FA8EACBDD0ABF09CBBB8CB273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
Manifest number: 16C1
Signing time: Sun 01 Mar 2026 14:01:11 +0000
Manifest this update: Sun 01 Mar 2026 14:01:11 +0000
Manifest next update: Mon 02 Mar 2026 14:01:11 +0000
Files and hashes: 1: MGwIZtwlII5sB9SiHX2AULUI1qI.crl (hash: 4OrGfYcOQWLx6B6Y3mmyr7fW5e6FJCOu0fov2Y4DSp4=)
2: b07UfMEb7bgqS9YVKg3FeyWplBY.roa (hash: 5La9pjg5nSt4KkLswON450P9sRutO7xwpRh6hKJ6x+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:fe:1f:a8:ea:cb:dd:0a:bf:09:cb:bb:8c:b2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Validity
Not Before: Mar 1 14:01:11 2026 GMT
Not After : Mar 2 14:01:11 2026 GMT
Subject: CN=15f4ede7202365a613ae990faf9b47aa7fd5c142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:0c:bb:98:1a:f2:cd:52:ef:e9:98:e7:de:
96:ed:d7:14:95:1b:55:01:e6:b8:33:cf:6d:35:ad:
16:84:66:da:01:48:6e:a6:2c:de:ea:ff:3d:25:89:
6b:4f:3a:c9:a9:f4:07:66:4d:bc:7f:04:50:4a:3a:
c3:f7:d0:91:f7:a1:9e:27:db:c6:ff:51:73:cb:21:
9e:c8:0f:61:e6:63:61:e0:c7:3e:9e:77:30:34:e6:
3b:a6:b2:8a:f0:92:c6:7c:08:7e:5b:9f:4a:da:30:
80:49:dd:32:b6:b0:8a:7f:4d:1e:17:85:74:8d:85:
59:4c:98:96:17:45:91:bf:ba:5b:4d:10:f1:23:dc:
4c:3f:3e:73:70:15:af:c7:b2:6c:6a:b2:81:58:81:
30:e5:e4:2e:c0:fd:35:27:4b:86:16:7c:f1:cd:fc:
99:6d:a8:0f:88:3d:8a:36:37:fc:95:d4:ef:09:44:
39:08:f1:60:0b:16:30:e2:5b:14:f0:63:82:40:75:
c0:e1:f5:b3:53:05:01:2b:22:26:70:38:8a:b0:67:
c3:f2:07:28:a3:e5:88:76:fb:c9:ad:e9:cb:f0:c4:
c0:90:05:7d:5d:82:7f:69:cc:0d:2e:f2:ae:52:25:
93:6f:dd:a6:70:3d:39:25:b1:49:1e:9f:c7:bb:d8:
a5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F4:ED:E7:20:23:65:A6:13:AE:99:0F:AF:9B:47:AA:7F:D5:C1:42
X509v3 Authority Key Identifier:
keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:dd:9c:1b:95:f7:a2:ea:39:97:95:0f:07:45:d5:74:14:0c:
04:91:3e:10:ec:a7:e5:4e:d1:af:b6:bb:3c:07:ba:c0:c0:c0:
11:2b:9e:8d:f4:55:d6:63:84:9b:43:98:4b:4a:73:e2:c5:e6:
21:08:b7:a5:3f:e6:0d:99:15:c0:f4:ee:77:40:68:d2:a3:12:
f8:e2:91:81:cc:2a:bc:33:6c:00:72:20:70:c6:22:2c:a8:f0:
a8:81:01:bb:91:24:99:10:a4:e9:5d:cd:1f:c3:24:41:cb:d8:
6f:49:67:b3:ea:1b:50:7a:5b:48:72:b9:66:06:34:91:e5:d4:
43:c4:a1:b2:bb:a5:59:8d:cb:03:b6:11:3f:27:d6:23:ca:cb:
38:66:4e:a2:a1:d1:18:63:06:40:72:d7:09:86:a4:91:5f:0e:
73:2e:59:57:92:87:2b:5f:f9:25:8d:d9:1b:6e:89:98:fa:3c:
07:7b:50:62:68:6c:6c:53:ef:4a:ca:3e:4c:a8:5d:49:64:7a:
d9:b4:f9:6c:a2:bd:89:3a:d9:bb:4f:53:17:01:76:ca:8f:50:
5b:d0:d5:36:5a:e9:ef:4b:59:6b:97:f2:b8:49:0c:f3:5f:be:
bb:9e:6a:23:ef:c1:78:4c:05:4f:e5:d5:7f:e8:cc:3b:0e:2e:
35:b7:39:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps/4fqOrL3Qq/Ccu7jLJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNmMwODY2ZGMyNTIwOGU2YzA3ZDRhMjFkN2Q4MDUwYjUw
OGQ2YTIwHhcNMjYwMzAxMTQwMTExWhcNMjYwMzAyMTQwMTExWjAzMTEwLwYDVQQD
EygxNWY0ZWRlNzIwMjM2NWE2MTNhZTk5MGZhZjliNDdhYTdmZDVjMTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/YMu5ga8s1S7+mY596W7dcUlRtV
Aea4M89tNa0WhGbaAUhupize6v89JYlrTzrJqfQHZk28fwRQSjrD99CR96GeJ9vG
/1FzyyGeyA9h5mNh4Mc+nncwNOY7prKK8JLGfAh+W59K2jCASd0ytrCKf00eF4V0
jYVZTJiWF0WRv7pbTRDxI9xMPz5zcBWvx7JsarKBWIEw5eQuwP01J0uGFnzxzfyZ
bagPiD2KNjf8ldTvCUQ5CPFgCxYw4lsU8GOCQHXA4fWzUwUBKyImcDiKsGfD8gco
o+WIdvvJrenL8MTAkAV9XYJ/acwNLvKuUiWTb92mcD05JbFJHp/Hu9ilKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBX07ecgI2WmE66ZD6+bR6p/1cFCMB8GA1UdIwQY
MBaAFDBsCGbcJSCObAfUoh19gFC1CNaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUd3SVp0d2xJSTVzQjlTaUhYMkFVTFVJMXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iYWRlZGYtZDBlOS00NWE5LWFmNzUt
MTBlZGI1NDFlNmZmLzEvTUd3SVp0d2xJSTVzQjlTaUhYMkFVTFVJMXFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9iYWRlZGYtZDBlOS00NWE5LWFmNzUtMTBlZGI1NDFlNmZm
LzEvTUd3SVp0d2xJSTVzQjlTaUhYMkFVTFVJMXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX92cG5X3
ouo5l5UPB0XVdBQMBJE+EOyn5U7Rr7a7PAe6wMDAESuejfRV1mOEm0OYS0pz4sXm
IQi3pT/mDZkVwPTud0Bo0qMS+OKRgcwqvDNsAHIgcMYiLKjwqIEBu5EkmRCk6V3N
H8MkQcvYb0lns+obUHpbSHK5ZgY0keXUQ8ShsrulWY3LA7YRPyfWI8rLOGZOoqHR
GGMGQHLXCYakkV8Ocy5ZV5KHK1/5JY3ZG26JmPo8B3tQYmhsbFPvSso+TKhdSWR6
2bT5bKK9iTrZu09TFwF2yo9QW9DVNlrp70tZa5fyuEkM81++u55qI+/BeEwFT+XV
f+jMOw4uNbc5kg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:26 2026 by rpki-client