
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
File: MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft (raw, json)
Hash identifier: cXKb6ieEt+14NKlactXNO2k/PFsSVmTAnHFbr3KPjw8=
Subject key identifier: C2:DE:6F:A4:0B:9E:85:06:D2:E6:21:87:C4:07:6E:A9:7E:2D:BF:AF
Authority key identifier: 32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
Certificate issuer: /CN=32010f70276e418d58f08c56a79a82b99aca1763
Certificate serial: 019CAC1047097158CB27FABFBDC956383E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
Manifest number: 0ABC
Signing time: Mon 02 Mar 2026 01:01:13 +0000
Manifest this update: Mon 02 Mar 2026 01:01:13 +0000
Manifest next update: Tue 03 Mar 2026 01:01:13 +0000
Files and hashes: 1: 0hu74NT9Nl_eazTEnAcyb5h2InE.roa (hash: m6XuEPCt02s4/4h9V+rmT4i+jJ/Bk1HfFseea23UT9Y=)
2: MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl (hash: y8cwpzUGkOBvz7rcVgAX6Zfe5M1uLgIO1n6hO6WUQ0I=)
3: Sjohw2kq71FHa4gPxaUKTKd6HR0.roa (hash: Ij9LgFLc0en2koC2Go8CCw321xI1XXKyMHvV0ylYHL8=)
4: joxndE8POQgSo8Jcd9jCNmlS5vQ.roa (hash: DniED2LTzPs96x/Too8QwFC0ZIE3r5JA+PWRXtxxs3Q=)
5: naC9tmlsUhgbJLA03hz741hMbFg.roa (hash: Yv/9jK6omovr8t6/O6AjIBsjxvzoLwnUDO913RNu4UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:47:09:71:58:cb:27:fa:bf:bd:c9:56:38:3e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32010f70276e418d58f08c56a79a82b99aca1763
Validity
Not Before: Mar 2 01:01:13 2026 GMT
Not After : Mar 3 01:01:13 2026 GMT
Subject: CN=c2de6fa40b9e8506d2e62187c4076ea97e2dbfaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:63:47:fc:28:39:bb:af:c4:dc:26:1c:ed:
b2:9f:d3:28:cc:9b:c3:f3:94:df:ca:d2:74:c9:d4:
f1:2b:cf:27:c7:b4:b8:8c:60:f1:68:cc:7b:c4:98:
fb:23:33:46:e9:53:80:f8:f2:fe:40:fb:e4:ef:25:
57:39:b6:62:f7:e5:bc:bb:da:b3:ed:f4:fc:a7:92:
f2:4f:41:7f:37:cd:2e:0f:63:cd:1c:d8:3e:e1:d1:
e6:59:c2:a0:eb:45:39:63:9a:63:1f:f0:a0:50:a1:
3e:43:a5:50:b8:a0:7b:77:58:13:f5:e2:f6:9d:86:
f1:7f:64:cd:05:8b:bc:4d:e4:9c:27:04:e8:59:77:
94:02:cf:58:53:3a:88:9b:50:24:91:5c:76:06:c8:
83:a2:e1:e5:ba:7c:c1:90:27:ac:b6:7e:9d:c3:ec:
08:c3:91:c6:38:17:b9:6e:da:60:a9:5f:92:2c:13:
22:7c:34:93:09:a2:c5:2c:55:ff:03:4a:0a:d3:b5:
e9:8d:aa:80:ad:38:6a:8e:cf:e1:4d:67:c5:ab:b1:
cb:2a:df:15:70:1c:58:46:7c:ae:91:d2:e6:1d:ff:
68:c7:21:49:c0:1f:96:e7:54:f5:b3:d5:00:6c:73:
35:87:29:5a:85:56:fc:4e:f3:e0:af:00:28:46:41:
c7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DE:6F:A4:0B:9E:85:06:D2:E6:21:87:C4:07:6E:A9:7E:2D:BF:AF
X509v3 Authority Key Identifier:
keyid:32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bf:45:78:51:1f:16:7e:ce:3f:f3:35:59:f6:57:0b:82:70:
6f:62:b9:1b:94:46:22:82:e6:58:72:80:9a:fb:dc:e7:dc:25:
49:9a:f5:cb:50:8f:19:f2:eb:36:19:21:d6:fa:f7:a1:61:95:
44:0d:e6:f7:0e:e8:f9:7d:a3:c0:3e:2f:73:a9:ba:35:81:66:
27:0a:60:27:53:78:e6:81:85:9b:c1:cf:90:14:3a:bd:79:d5:
fc:61:6b:25:80:f0:34:ca:2a:b3:0c:29:13:0c:6d:bf:12:3f:
83:21:b1:69:35:fe:11:62:1f:68:f7:f8:b3:a1:70:90:5c:9f:
5e:6d:ce:34:74:4e:8a:50:9b:f9:3a:84:05:b8:11:91:ba:bc:
4e:c1:ac:03:c5:f3:22:f5:68:18:5d:ac:bc:2b:5c:0a:bd:93:
e3:8a:8d:21:85:fd:f0:b8:c2:ae:63:1d:bb:23:93:d4:72:87:
47:ba:c9:79:ab:76:cd:89:7e:63:cf:f8:f2:3d:13:20:02:21:
53:24:73:fd:52:3c:70:42:28:c2:ab:8f:fd:8b:03:3e:16:3e:
a9:13:d6:51:69:4b:67:11:55:33:80:23:86:dc:51:fc:33:81:
dd:93:a0:6b:d4:08:a1:58:fc:02:84:74:8b:da:b5:1a:9c:86:
e5:37:1c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:09 2026 by rpki-client