Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File: mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier: WqBXLMY3fm8MOEP5WECZJUGGslKuvqVjBhQRAKUlcTE=
Subject key identifier: 0B:CD:8E:FB:3F:4B:66:00:74:8A:13:8F:2F:35:4C:F4:97:3B:5F:97
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial: 019CAAC611E83BDF74349DEABDBAB69C84E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number: 0F24
Signing time: Sun 01 Mar 2026 19:00:33 +0000
Manifest this update: Sun 01 Mar 2026 19:00:33 +0000
Manifest next update: Mon 02 Mar 2026 19:00:33 +0000
Files and hashes: 1: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: OL8KSl2z+fuQaSC7yNS7wqVTRWbvDdPMbTVjlTxinV0=)
2: pgk6nsI3cK4BMyAq4yo3QkbL4pU.roa (hash: FD9gDw7QMQ6LHr1l8voFmg+wOG9WJ0q/3TSPnokXHZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:11:e8:3b:df:74:34:9d:ea:bd:ba:b6:9c:84:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Validity
Not Before: Mar 1 19:00:33 2026 GMT
Not After : Mar 2 19:00:33 2026 GMT
Subject: CN=0bcd8efb3f4b6600748a138f2f354cf4973b5f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:0c:70:a7:4e:49:66:54:bd:51:00:59:de:
1e:26:46:f8:4f:d6:fc:c1:4d:88:32:e6:3e:c3:f2:
83:a2:eb:89:0a:52:8e:a2:be:7e:76:c3:45:f7:46:
30:c7:42:87:7c:55:91:24:19:56:cd:64:2d:96:d9:
fe:20:e2:e4:ac:b5:e3:5c:8f:74:06:e8:cf:74:bd:
2c:ed:0a:9c:67:8b:5c:e6:19:4c:c6:4f:05:23:af:
97:99:48:78:73:62:e6:2d:77:01:ed:92:26:c8:f4:
74:3e:09:3a:c0:d7:57:5a:43:aa:1f:04:39:c4:b9:
8b:7a:a0:58:4b:cb:0d:33:f1:0a:b7:04:3c:65:09:
e8:21:94:3f:99:93:ba:83:f7:0e:f7:82:9a:0e:e9:
5e:de:36:d4:96:d7:89:52:05:8b:54:ad:91:6f:0a:
2e:6f:73:5d:95:74:68:0d:36:73:d5:57:4d:3d:e6:
dc:db:09:e7:f4:f5:db:e0:9f:ba:2a:31:7e:0c:cf:
13:1e:6a:0b:a5:72:a8:e8:57:ed:21:ad:e9:a4:a7:
c1:c4:f5:20:d2:5c:a3:c3:2a:d0:90:0c:45:37:cd:
03:8c:9b:00:a7:17:6d:cc:df:95:18:cf:bf:33:0e:
17:27:f7:97:48:9c:02:9f:32:87:2e:06:56:f1:2e:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CD:8E:FB:3F:4B:66:00:74:8A:13:8F:2F:35:4C:F4:97:3B:5F:97
X509v3 Authority Key Identifier:
keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:de:f7:0e:c4:60:87:be:68:b8:ee:9e:2c:71:6a:9a:c1:99:
f8:df:9c:70:68:d8:8a:35:31:cf:aa:8d:e0:cd:72:04:71:74:
5c:c6:d3:56:1c:b6:05:f0:5a:a6:27:dd:3a:ec:e9:76:a0:1b:
4a:a8:87:90:71:ce:02:d8:84:50:5a:37:1f:7f:ad:8b:f5:41:
51:4c:ee:49:a7:51:1a:f2:dc:2c:10:18:35:19:79:28:29:37:
dc:76:f7:83:05:68:0b:3f:0f:a7:41:4b:96:a7:05:72:a8:eb:
6d:ad:ef:6f:86:13:18:50:39:96:bf:10:44:f9:88:f0:9f:a7:
ad:a7:5a:28:93:8e:50:a6:d3:9d:c6:6d:97:2a:12:12:42:51:
43:c7:5d:43:c0:ab:d6:30:31:59:c5:ae:4f:2e:63:37:3c:74:
2e:48:08:5d:36:f7:9c:fd:cc:74:bf:a8:18:41:65:2a:b3:7e:
9a:6b:d9:4c:5c:5a:a5:d8:cc:38:a0:3e:2e:52:ff:83:d5:ca:
6b:fd:9f:96:f1:92:f0:a9:d1:cb:58:de:f3:c0:a9:09:13:6e:
57:95:46:58:37:b4:a2:62:b9:b9:2b:9c:25:0f:9d:50:2f:40:
54:77:8e:08:47:2c:2e:f2:d8:bf:46:a6:89:89:e1:49:b6:1e:
94:6d:6f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:54 2026 by rpki-client