Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File: mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier: TDHh214hhNRpUVZiFKZoGLHAwxO1xP8jR8GzZPXyyFg=
Subject key identifier: 36:19:9B:89:E9:94:3B:BE:AD:E8:1F:2F:20:7A:C4:A8:97:FA:8A:C2
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial: 019D9A3E513BF81C2024D0D08DCF2F0EC2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number: 0FA0
Signing time: Fri 17 Apr 2026 07:01:08 +0000
Manifest this update: Fri 17 Apr 2026 07:01:08 +0000
Manifest next update: Sat 18 Apr 2026 07:01:08 +0000
Files and hashes: 1: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: O9VH+SH/w2WMXmxBscMOAOPV5Bd4pLP9MFvL++tOvZk=)
2: pgk6nsI3cK4BMyAq4yo3QkbL4pU.roa (hash: FD9gDw7QMQ6LHr1l8voFmg+wOG9WJ0q/3TSPnokXHZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:51:3b:f8:1c:20:24:d0:d0:8d:cf:2f:0e:c2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Validity
Not Before: Apr 17 07:01:08 2026 GMT
Not After : Apr 18 07:01:08 2026 GMT
Subject: CN=36199b89e9943bbeade81f2f207ac4a897fa8ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:27:44:6c:f1:72:5c:00:f5:c1:f7:90:cd:d7:
5d:38:40:89:10:8e:84:29:39:c9:eb:dc:0e:89:de:
23:ee:e7:ac:7d:24:36:a1:e8:fa:20:f9:27:cf:14:
5c:a9:6b:84:54:9f:12:fc:c1:33:78:f8:4d:d9:7a:
3c:3f:72:dd:41:2b:d7:38:fd:83:b7:e6:54:c0:67:
9f:88:c0:00:63:f7:20:f9:d1:fa:2d:98:45:92:3c:
23:e3:4a:aa:0a:1c:32:bb:4d:2a:db:ca:cc:d1:8e:
6d:5d:85:b4:a8:a7:87:3e:af:7b:c6:94:7d:fa:c6:
82:99:38:d3:3b:3a:f4:11:2b:7b:17:fb:91:8f:f0:
60:45:5b:a5:7a:12:10:78:73:dc:bf:79:4d:25:5b:
6c:c1:7d:a5:09:16:00:2f:31:90:58:1a:16:ea:ad:
c6:2e:5e:a5:46:30:09:1c:93:7f:60:b3:09:37:6c:
4a:2b:f7:a1:fe:ec:9e:ed:ea:4b:be:88:98:6a:23:
0c:9d:96:e5:00:ff:3c:61:06:46:e9:2f:d6:c8:54:
4c:2e:a6:8b:e1:dc:00:b5:ac:b9:eb:93:37:b8:a5:
2a:ff:25:40:d4:17:70:e7:52:a8:44:42:b0:cd:5c:
94:8b:cb:9c:b0:d3:43:47:f3:46:e7:f5:ae:e0:b7:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:19:9B:89:E9:94:3B:BE:AD:E8:1F:2F:20:7A:C4:A8:97:FA:8A:C2
X509v3 Authority Key Identifier:
keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1a:96:fb:8d:93:e6:48:7b:5c:fb:e7:16:f6:45:16:0e:04:
6a:17:56:c7:29:5a:76:26:a4:30:3c:c2:5f:2d:3d:01:07:f5:
26:6c:a3:14:78:03:0a:49:c4:a9:5d:ac:1a:e8:21:b4:65:64:
16:2c:22:57:20:ef:a1:95:26:83:25:cf:d2:32:bb:3c:d7:34:
3d:cd:bd:91:ab:81:25:27:46:d2:fd:36:4b:68:4a:51:0d:89:
c6:3e:e7:0c:15:a1:66:46:ed:15:91:f0:58:31:35:db:a3:d8:
6b:88:dd:17:6b:65:36:55:b7:75:95:35:d9:4d:c5:4c:7b:b5:
14:25:b6:66:9d:36:ca:93:df:9d:5b:de:8d:92:c6:f6:44:5d:
59:aa:7b:4a:4b:79:a0:0f:c5:63:a5:66:73:a8:b9:02:08:eb:
45:ca:9b:b0:ce:8d:af:e9:86:7e:fe:0a:24:4b:4b:d2:56:27:
fb:53:6c:47:89:4f:04:56:23:26:2e:8d:4f:94:a6:e3:af:67:
4b:4e:65:8b:8c:23:2d:2c:e6:a5:fc:6e:6d:6d:25:13:c8:b7:
df:4d:28:8e:ff:67:36:e6:28:50:9e:ea:17:c3:72:96:3a:86:
1f:81:e2:b1:75:93:52:8a:38:e0:c2:47:00:b4:37:90:5b:1a:
16:0a:44:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:14 2026 by rpki-client