Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File: mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier: aQNegS5VPsTkrIS5I9zP3LJZQjdbBpKBUMGpsg7ul7E=
Subject key identifier: A5:81:C0:BC:DD:CB:97:E1:BB:1D:C7:41:C0:04:29:0D:E9:10:C8:B9
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial: 019EBFC8CE7F8A1DC8B5258548B2BA421668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number: 1038
Signing time: Sat 13 Jun 2026 07:01:08 +0000
Manifest this update: Sat 13 Jun 2026 07:01:08 +0000
Manifest next update: Sun 14 Jun 2026 07:01:08 +0000
Files and hashes: 1: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: kA3w8bEQFxD97hOrCU43rCw9wrq5wyWRJYWgLNLkBY4=)
2: pgk6nsI3cK4BMyAq4yo3QkbL4pU.roa (hash: FD9gDw7QMQ6LHr1l8voFmg+wOG9WJ0q/3TSPnokXHZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:ce:7f:8a:1d:c8:b5:25:85:48:b2:ba:42:16:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Validity
Not Before: Jun 13 07:01:08 2026 GMT
Not After : Jun 14 07:01:08 2026 GMT
Subject: CN=a581c0bcddcb97e1bb1dc741c004290de910c8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:c7:ce:76:ce:aa:89:ed:9e:2e:5b:fe:b2:
7a:68:41:73:38:89:22:9e:8d:03:f3:d7:57:d2:d1:
e9:ff:3f:db:47:ae:8d:67:26:cd:e2:0a:7e:24:be:
ab:a3:a3:00:41:61:c8:de:ff:c5:a7:84:37:c4:ef:
5d:11:3d:e2:ef:d3:1b:13:e7:36:af:60:3f:3e:94:
4a:a3:18:75:2e:b2:29:0e:e0:c8:ca:b2:a5:e9:28:
26:5c:f3:cc:9a:cc:be:68:8f:6f:54:60:6a:c6:3f:
98:b1:8b:b1:0c:23:d8:0a:84:17:48:6f:fa:74:b4:
4d:92:62:33:26:c4:ec:1c:61:a7:1b:eb:a3:42:0a:
0b:bc:44:71:15:50:e9:df:15:83:45:f8:f1:5a:bc:
81:88:ea:7c:22:8e:f9:6c:4b:d6:e8:7c:5e:7b:da:
d4:d7:83:56:f1:63:cd:92:59:50:24:a6:6f:47:36:
9e:a7:06:a8:e8:fd:8b:8c:92:c4:10:7b:79:73:a5:
7c:c4:69:cf:ed:29:c3:4a:df:bb:70:d3:ea:a0:48:
85:e7:49:a4:f4:88:89:66:13:2b:a7:0a:68:ee:5f:
64:ae:21:00:a4:a9:96:e4:96:ca:65:55:0e:98:02:
ce:ef:f0:79:3b:4e:35:1c:a3:b3:3e:0d:04:f9:fc:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:81:C0:BC:DD:CB:97:E1:BB:1D:C7:41:C0:04:29:0D:E9:10:C8:B9
X509v3 Authority Key Identifier:
keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:12:de:7c:d1:69:20:d3:fb:4f:ab:41:32:c0:38:fe:6f:cc:
30:b0:28:b2:0f:33:d4:a1:d3:b4:f7:cf:8b:ad:5f:54:27:bb:
13:19:2a:3a:86:f7:06:4c:6b:48:2f:1c:88:54:87:f6:4e:24:
05:23:c3:a9:65:65:83:cb:15:56:9e:c5:b5:00:71:85:7b:6d:
4b:77:1b:c9:86:dd:d3:8c:40:4b:21:a6:95:5e:80:96:a3:22:
bc:76:cf:ce:fe:8c:f5:4b:31:15:81:3f:20:c5:82:c3:ec:f9:
f2:e8:b6:13:06:32:c6:04:16:0a:80:08:3b:33:61:dd:b3:ea:
8c:a7:a8:be:94:46:96:49:c0:5f:5a:43:6c:62:4e:e2:5c:b2:
ec:fa:93:d2:c9:33:59:43:70:4a:20:d4:26:18:08:56:03:d8:
6f:8f:36:ce:2d:cf:ad:59:91:f6:06:46:52:34:a9:c4:3b:f0:
6a:b4:93:72:42:3d:f2:51:d3:2c:0d:13:51:11:6c:3a:35:4b:
27:07:21:31:36:1f:0a:9e:18:71:80:14:ab:98:95:2f:d2:9e:
fd:03:c0:6c:20:7e:92:88:90:81:3c:42:80:b0:2f:2c:b9:2d:
5b:71:66:6a:1d:db:2a:ea:f4:54:30:f4:7a:8f:17:90:37:67:
f9:84:ab:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:34:08 2026 by rpki-client