Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
File: MGwIZtwlII5sB9SiHX2AULUI1qI.mft (raw, json)
Hash identifier: O5Uscx8CcaCpEWcYMmXIKC3WDoIc+fwv6k2c/Q2oRm0=
Subject key identifier: 51:AE:DF:79:D9:85:53:BD:F4:87:7B:D6:48:B9:15:A9:3B:BB:24:2C
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial: 019D992B5B68169D8315FABFD2854F1A823D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
Manifest number: 173D
Signing time: Fri 17 Apr 2026 02:00:48 +0000
Manifest this update: Fri 17 Apr 2026 02:00:48 +0000
Manifest next update: Sat 18 Apr 2026 02:00:48 +0000
Files and hashes: 1: MGwIZtwlII5sB9SiHX2AULUI1qI.crl (hash: G1z+Wnv0xRwewy1eRAthqYJ6F/MJeRikHtWMbKwSyB4=)
2: b07UfMEb7bgqS9YVKg3FeyWplBY.roa (hash: 5La9pjg5nSt4KkLswON450P9sRutO7xwpRh6hKJ6x+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:5b:68:16:9d:83:15:fa:bf:d2:85:4f:1a:82:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Validity
Not Before: Apr 17 02:00:48 2026 GMT
Not After : Apr 18 02:00:48 2026 GMT
Subject: CN=51aedf79d98553bdf4877bd648b915a93bbb242c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:f1:45:99:67:b4:71:d6:26:93:b5:6d:ec:
06:9d:14:39:75:80:e3:06:d4:5c:d0:be:d0:16:62:
fc:52:04:36:47:f3:92:df:1d:a9:b4:ab:18:2e:98:
db:00:10:f0:c1:70:73:3d:f8:ec:80:91:03:82:dd:
a4:e7:e4:10:fa:4e:45:e6:20:3a:33:99:57:5a:81:
16:7a:11:ab:d6:56:ac:f8:c2:10:70:fe:a0:b0:88:
7e:d2:de:8a:8a:17:03:d8:71:bc:34:30:8a:66:87:
9e:ca:00:4c:50:09:af:e3:f1:1b:27:cf:bb:6d:a9:
a4:b6:8c:ab:92:03:05:f6:5f:c1:bb:d3:c9:11:c4:
eb:f9:d3:b4:e2:ef:1a:53:da:93:21:8b:22:6c:da:
4d:3a:6a:a8:b5:e5:cf:06:06:05:2c:a5:ce:2b:0b:
d2:2e:ba:a6:1c:8f:2d:ab:1e:fd:18:18:89:b7:0d:
a8:4e:f2:64:95:4e:cb:01:0b:9a:4f:e1:02:81:39:
2e:43:e4:89:f9:72:55:26:f3:c7:08:d2:40:26:13:
9d:50:d6:2a:9b:4e:f1:12:fa:4c:01:3f:5c:f9:da:
8f:f7:f5:28:84:7a:7c:3c:d5:06:fb:de:60:f0:4e:
06:11:d5:2a:c8:95:18:9e:3c:84:bf:12:c4:fc:93:
4f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AE:DF:79:D9:85:53:BD:F4:87:7B:D6:48:B9:15:A9:3B:BB:24:2C
X509v3 Authority Key Identifier:
keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e2:f1:43:8a:45:78:dd:ca:b1:1e:89:67:20:79:1c:b7:f8:
03:f4:62:e5:b4:cb:ea:51:0b:dd:35:61:80:50:38:da:d3:49:
fa:24:0b:8a:a7:8c:d9:e5:1a:18:79:26:d3:08:95:f0:f9:0a:
01:47:88:cf:db:3b:aa:c9:19:70:74:a4:e4:27:53:10:1f:38:
7b:1f:3c:fa:d9:5e:1b:4a:90:7a:e2:1a:47:a0:23:03:17:7f:
59:01:e5:53:d7:55:e1:24:5f:dc:1e:95:de:6b:d0:c7:c9:0d:
ce:1c:86:94:f3:34:a0:16:59:f6:63:40:81:2c:21:55:b6:c6:
98:d4:85:ed:61:22:d8:87:a9:aa:24:20:7a:73:40:b1:b4:60:
55:cd:b4:ae:04:31:da:bb:c9:47:ad:e3:df:5e:cb:a2:d9:74:
97:3a:89:df:5e:77:a9:eb:30:36:cc:0d:73:8e:93:3c:63:46:
f0:79:c8:d4:b6:eb:09:7f:d9:64:79:73:aa:81:ea:6c:df:67:
74:0d:7d:6c:fe:bc:51:91:62:ce:11:fb:ad:75:3d:2f:43:0d:
83:9f:51:d2:87:8f:5c:56:48:9e:1e:d7:ee:07:1a:bb:69:3c:
bd:ce:f6:03:b5:4e:49:e0:e2:28:24:c3:a1:0b:65:00:3c:f2:
11:e3:7e:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK1toFp2DFfq/0oVPGoI9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNmMwODY2ZGMyNTIwOGU2YzA3ZDRhMjFkN2Q4MDUwYjUw
OGQ2YTIwHhcNMjYwNDE3MDIwMDQ4WhcNMjYwNDE4MDIwMDQ4WjAzMTEwLwYDVQQD
Eyg1MWFlZGY3OWQ5ODU1M2JkZjQ4NzdiZDY0OGI5MTVhOTNiYmIyNDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V3xRZlntHHWJpO1bewGnRQ5dYDj
BtRc0L7QFmL8UgQ2R/OS3x2ptKsYLpjbABDwwXBzPfjsgJEDgt2k5+QQ+k5F5iA6
M5lXWoEWehGr1las+MIQcP6gsIh+0t6KihcD2HG8NDCKZoeeygBMUAmv4/EbJ8+7
bamktoyrkgMF9l/Bu9PJEcTr+dO04u8aU9qTIYsibNpNOmqoteXPBgYFLKXOKwvS
LrqmHI8tqx79GBiJtw2oTvJklU7LAQuaT+ECgTkuQ+SJ+XJVJvPHCNJAJhOdUNYq
m07xEvpMAT9c+dqP9/UohHp8PNUG+95g8E4GEdUqyJUYnjyEvxLE/JNPDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGu33nZhVO99Id71ki5Fak7uyQsMB8GA1UdIwQY
MBaAFDBsCGbcJSCObAfUoh19gFC1CNaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUd3SVp0d2xJSTVzQjlTaUhYMkFVTFVJMXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iYWRlZGYtZDBlOS00NWE5LWFmNzUt
MTBlZGI1NDFlNmZmLzEvTUd3SVp0d2xJSTVzQjlTaUhYMkFVTFVJMXFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9iYWRlZGYtZDBlOS00NWE5LWFmNzUtMTBlZGI1NDFlNmZm
LzEvTUd3SVp0d2xJSTVzQjlTaUhYMkFVTFVJMXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeLxQ4pF
eN3KsR6JZyB5HLf4A/Ri5bTL6lEL3TVhgFA42tNJ+iQLiqeM2eUaGHkm0wiV8PkK
AUeIz9s7qskZcHSk5CdTEB84ex88+tleG0qQeuIaR6AjAxd/WQHlU9dV4SRf3B6V
3mvQx8kNzhyGlPM0oBZZ9mNAgSwhVbbGmNSF7WEi2IepqiQgenNAsbRgVc20rgQx
2rvJR63j317Lotl0lzqJ3153qeswNswNc46TPGNG8HnI1LbrCX/ZZHlzqoHqbN9n
dA19bP68UZFizhH7rXU9L0MNg59R0oePXFZInh7X7gcau2k8vc72A7VOSeDiKCTD
oQtlADzyEeN+kg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:49:17 2026 by rpki-client