Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File: mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier: ggD/hrIVjJl09jMGVodVFWoGoMzT4DOnuIOidW1sDq8=
Subject key identifier: 74:B8:08:D8:1D:F4:88:85:6E:F0:56:CF:E1:1B:7E:20:70:E5:91:88
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial: 01A0CB233FA6F7E825CAEA29D0280157CD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number: 1147
Signing time: Tue 22 Sep 2026 22:01:19 +0000
Manifest this update: Tue 22 Sep 2026 22:01:19 +0000
Manifest next update: Wed 23 Sep 2026 22:01:19 +0000
Files and hashes: 1: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: gXnlXZx5kRUC078oBt3toPixXRqhKxWadj4sgsCY7nY=)
2: pgk6nsI3cK4BMyAq4yo3QkbL4pU.roa (hash: FD9gDw7QMQ6LHr1l8voFmg+wOG9WJ0q/3TSPnokXHZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:23:3f:a6:f7:e8:25:ca:ea:29:d0:28:01:57:cd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Validity
Not Before: Sep 22 22:01:19 2026 GMT
Not After : Sep 23 22:01:19 2026 GMT
Subject: CN=74b808d81df488856ef056cfe11b7e2070e59188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:15:2a:2b:60:06:0d:f0:5d:bc:67:2a:c5:
b3:ac:f5:17:51:e9:96:ad:5d:f7:83:ec:d3:b0:24:
23:49:ad:b8:97:3a:d9:53:0e:19:eb:1d:92:88:f2:
fa:7b:fd:75:04:6a:c9:75:cf:d3:6d:e1:e5:a2:4c:
5f:9f:7e:98:ac:05:0f:37:70:9f:52:fc:82:26:1d:
35:e1:b6:ce:92:83:5d:a6:dd:39:47:56:68:46:c5:
dd:ac:b6:3d:39:ab:d7:28:8d:a7:b3:91:1c:f3:3b:
53:4f:6c:b6:02:13:ad:dd:65:85:f6:cc:c5:55:6d:
1f:00:7a:41:2a:90:64:96:71:d5:e4:98:d7:1c:4d:
8d:f2:ba:3a:ed:53:af:8b:88:a5:d2:a4:76:32:ea:
b8:03:b9:d0:63:3c:ca:dc:9b:0d:e2:18:7d:a1:ca:
13:7a:d6:f3:81:8d:f9:66:55:62:d7:6c:8c:8d:92:
1c:7d:af:65:04:fe:f6:eb:c9:3f:5d:ba:c9:0e:13:
e0:cf:3e:73:ef:ec:16:3d:83:87:67:9f:fa:b9:f4:
35:e3:45:49:cd:99:f7:c3:5e:84:9d:0c:58:41:8f:
fe:09:0b:a1:c9:f0:8b:85:b8:f8:66:e3:54:1d:47:
b9:30:d5:1f:ef:41:85:b9:80:01:ca:1a:e1:67:00:
f6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B8:08:D8:1D:F4:88:85:6E:F0:56:CF:E1:1B:7E:20:70:E5:91:88
X509v3 Authority Key Identifier:
keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d3:53:b3:4f:ef:96:ed:d5:c0:b1:45:ba:1f:2c:c5:d7:cd:
34:29:b1:84:ff:1d:16:74:a1:79:62:64:8c:67:40:cb:f9:bf:
f9:0e:a5:94:9d:14:89:ba:f3:f7:70:32:d9:21:5c:bb:1b:75:
0d:e8:3d:97:2d:a2:5b:00:a2:2f:87:5d:6b:91:7a:d7:c1:11:
6d:f5:de:ba:b4:fe:54:53:86:d5:38:eb:f0:58:e4:b8:c5:31:
ab:10:f7:0b:7c:1c:65:4c:a1:96:62:b0:9d:8c:0e:13:30:06:
13:c0:3c:1c:da:e1:b5:cf:2a:8b:cf:fc:21:7d:87:8f:31:90:
80:70:05:e4:6f:21:62:15:4c:c4:d0:de:38:2e:06:37:8a:74:
ed:38:40:a3:61:ec:f6:7b:12:2d:7e:15:e9:62:74:d6:42:fe:
26:b1:3d:19:b1:a2:4c:88:48:02:7a:a0:c6:ce:a9:c5:cd:96:
4f:10:cf:94:01:34:34:5b:c4:d9:dd:31:ee:aa:9f:48:be:2b:
44:43:bd:10:b3:79:ec:f3:1b:31:16:cb:36:a0:31:98:85:05:
f5:11:43:90:71:48:f2:46:f3:05:17:c6:e9:e2:67:94:72:97:
95:d4:5b:f1:2d:5c:47:c4:f0:f4:99:19:6c:d2:00:22:b4:61:
c2:60:db:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLIz+m9+glyuop0CgBV80eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMDg1ZTA2ZjJlMmEyZTMwNDI1NmY4ODEzNWZmMTNkZTcy
ZDA3MzYwHhcNMjYwOTIyMjIwMTE5WhcNMjYwOTIzMjIwMTE5WjAzMTEwLwYDVQQD
Eyg3NGI4MDhkODFkZjQ4ODg1NmVmMDU2Y2ZlMTFiN2UyMDcwZTU5MTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpMVKitgBg3wXbxnKsWzrPUXUemW
rV33g+zTsCQjSa24lzrZUw4Z6x2SiPL6e/11BGrJdc/TbeHlokxfn36YrAUPN3Cf
UvyCJh014bbOkoNdpt05R1ZoRsXdrLY9OavXKI2ns5Ec8ztTT2y2AhOt3WWF9szF
VW0fAHpBKpBklnHV5JjXHE2N8ro67VOvi4il0qR2Muq4A7nQYzzK3JsN4hh9ocoT
etbzgY35ZlVi12yMjZIcfa9lBP7268k/XbrJDhPgzz5z7+wWPYOHZ5/6ufQ140VJ
zZn3w16EnQxYQY/+CQuhyfCLhbj4ZuNUHUe5MNUf70GFuYAByhrhZwD2mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHS4CNgd9IiFbvBWz+EbfiBw5ZGIMB8GA1UdIwQY
MBaAFJoIXgby4qLjBCVviBNf8T3nLQc2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWdoZUJ2TGlvdU1FSlctSUUxX3hQZWN0QnpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xMGZjZTAtZWU0Ny00ZWQ0LWEwM2Qt
MGQ0NTQyOTIwYmNiLzEvbWdoZUJ2TGlvdU1FSlctSUUxX3hQZWN0QnpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8xMGZjZTAtZWU0Ny00ZWQ0LWEwM2QtMGQ0NTQyOTIwYmNi
LzEvbWdoZUJ2TGlvdU1FSlctSUUxX3hQZWN0QnpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNNTs0/v
lu3VwLFFuh8sxdfNNCmxhP8dFnSheWJkjGdAy/m/+Q6llJ0Uibrz93Ay2SFcuxt1
Deg9ly2iWwCiL4dda5F618ERbfXeurT+VFOG1Tjr8FjkuMUxqxD3C3wcZUyhlmKw
nYwOEzAGE8A8HNrhtc8qi8/8IX2HjzGQgHAF5G8hYhVMxNDeOC4GN4p07ThAo2Hs
9nsSLX4V6WJ01kL+JrE9GbGiTIhIAnqgxs6pxc2WTxDPlAE0NFvE2d0x7qqfSL4r
REO9ELN57PMbMRbLNqAxmIUF9RFDkHFI8kbzBRfG6eJnlHKXldRb8S1cR8Tw9JkZ
bNIAIrRhwmDb7g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:44:26 2026 by rpki-client