Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
File: MAGbyB3kqk6yn5tHmBwX8aCyunI.mft (raw, json)
Hash identifier: 9dT2dC7yb7+GzF6t8E19/n/CHknJhHl8R4NT/9lwrDc=
Subject key identifier: 43:C2:44:FC:A5:DB:AE:AB:DA:FE:2B:69:B5:EA:EE:A1:5C:C2:98:31
Authority key identifier: 30:01:9B:C8:1D:E4:AA:4E:B2:9F:9B:47:98:1C:17:F1:A0:B2:BA:72
Certificate issuer: /CN=30019bc81de4aa4eb29f9b47981c17f1a0b2ba72
Certificate serial: 01A0CBC7D92E383756AEB31A990B004868DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
Manifest number: 7C
Signing time: Wed 23 Sep 2026 01:01:07 +0000
Manifest this update: Wed 23 Sep 2026 01:01:07 +0000
Manifest next update: Thu 24 Sep 2026 01:01:07 +0000
Files and hashes: 1: MAGbyB3kqk6yn5tHmBwX8aCyunI.crl (hash: RRAf/Rtq43VHXcNBIIORVyGjkMi2sBawu52T9GCN0Ik=)
2: pNQEQwwSVbDCMLAveVXd1mwHJeQ.roa (hash: dBVLbfqlR4GtBzx1f02M/qqFPs/aMyQuLiXl/XvXTiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:d9:2e:38:37:56:ae:b3:1a:99:0b:00:48:68:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30019bc81de4aa4eb29f9b47981c17f1a0b2ba72
Validity
Not Before: Sep 23 01:01:07 2026 GMT
Not After : Sep 24 01:01:07 2026 GMT
Subject: CN=43c244fca5dbaeabdafe2b69b5eaeea15cc29831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:dd:c6:35:00:a1:90:f5:a1:34:9a:99:93:
fc:af:2b:6e:12:02:aa:44:c0:e0:49:f1:6c:8e:f4:
5d:4c:e8:4d:fe:54:91:17:6d:d8:a7:df:91:77:8d:
09:8b:e0:47:a6:97:40:8b:94:b2:2f:90:5d:db:be:
c7:21:3b:0a:28:be:1d:09:64:72:c5:ed:0f:09:6f:
f0:95:05:2d:b7:2d:1d:1b:23:dd:87:da:c0:af:f3:
d7:38:3d:e7:64:a6:d8:ee:80:1d:5f:fa:ab:b9:e3:
6f:a9:87:ee:57:51:de:06:96:be:d1:8b:98:3d:67:
39:7c:f4:51:16:be:bd:39:df:ed:d5:52:ce:81:2f:
dd:41:75:bf:d0:0b:41:48:64:a2:a4:bd:1c:e3:b2:
9f:0a:10:5b:9c:f1:8c:d4:73:9e:3e:ac:e7:84:de:
2d:b4:01:ac:fd:2f:07:f9:9d:4f:3b:b9:0f:43:54:
21:d8:e9:26:69:1e:88:dd:1d:ca:20:5f:2b:01:5d:
ea:c8:52:a8:4c:b6:e0:5e:8e:57:9f:a8:fa:34:d2:
50:de:8c:3f:0f:95:43:ee:8e:f3:25:f9:50:8b:d5:
45:3d:dc:87:0b:06:4e:c3:70:e7:7e:a7:20:ad:c3:
94:54:55:28:51:2b:73:07:74:92:2e:43:c0:cb:a3:
5c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C2:44:FC:A5:DB:AE:AB:DA:FE:2B:69:B5:EA:EE:A1:5C:C2:98:31
X509v3 Authority Key Identifier:
keyid:30:01:9B:C8:1D:E4:AA:4E:B2:9F:9B:47:98:1C:17:F1:A0:B2:BA:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a7:5b:8b:21:f5:7a:f2:9d:e2:18:8f:ab:01:00:d6:92:66:
3b:b3:ef:70:b0:fb:0f:01:0e:42:f6:fd:4e:a1:b4:bf:27:98:
10:15:8f:44:9f:90:f5:95:61:db:11:21:36:9c:0b:d4:26:0b:
e1:c0:c4:d6:3a:db:6e:32:d8:f0:40:a5:84:ff:3b:9d:07:62:
84:52:0d:c2:24:15:25:f4:72:80:39:70:c5:bb:24:f6:25:a5:
35:67:d7:6a:03:91:03:cb:b1:33:16:78:d4:2a:78:a7:29:35:
e8:41:55:5b:72:bc:0a:81:7b:cb:6a:41:77:54:70:38:bb:b1:
45:59:37:50:f0:ce:1f:2a:25:46:47:63:35:94:b0:88:56:19:
a0:de:0b:5c:80:64:a7:38:7e:62:a6:f6:f8:77:23:1a:2f:d4:
8c:da:2f:6e:34:14:85:ac:4a:16:4c:de:35:9c:c5:f2:0e:ff:
2b:a6:3e:8f:fc:14:cb:01:34:cf:f3:08:80:c6:4b:75:f9:15:
b5:bc:22:9f:7b:33:73:67:65:a1:05:e7:4f:42:31:3f:b0:e4:
63:59:7d:f3:46:6e:ab:7b:46:62:7a:61:f1:33:d7:18:2a:a6:
41:5c:b6:0a:51:3b:92:0d:d6:c5:8c:29:f0:10:55:04:85:97:
49:90:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:19:18 2026 by rpki-client