Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File: mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier: gEAgSV8wplPl7OYsbuOw2wScwlf+P7VoR63YPxLt7+4=
Subject key identifier: 3F:3D:1C:1C:BB:47:6B:D5:63:76:C0:1D:62:8F:CD:42:C2:01:F1:09
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial: 019FAD519E9F702339FB969C5312D7D4A457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number: 10B3
Signing time: Wed 29 Jul 2026 10:00:34 +0000
Manifest this update: Wed 29 Jul 2026 10:00:34 +0000
Manifest next update: Thu 30 Jul 2026 10:00:34 +0000
Files and hashes: 1: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: IbXxZjABKcEQtldnf80vnsnqtCFuVf8GKsOQ2VVRh9k=)
2: pgk6nsI3cK4BMyAq4yo3QkbL4pU.roa (hash: FD9gDw7QMQ6LHr1l8voFmg+wOG9WJ0q/3TSPnokXHZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:9e:9f:70:23:39:fb:96:9c:53:12:d7:d4:a4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Validity
Not Before: Jul 29 10:00:34 2026 GMT
Not After : Jul 30 10:00:34 2026 GMT
Subject: CN=3f3d1c1cbb476bd56376c01d628fcd42c201f109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:1e:ae:32:fd:64:31:ae:e0:81:58:23:25:
b5:b9:98:67:51:96:93:3e:de:da:23:2e:7d:8b:18:
de:94:b4:5e:9d:bc:1e:80:49:da:77:e0:6d:0d:65:
16:27:e3:dd:a8:e0:c3:6b:87:57:6c:d4:a7:3c:c0:
94:26:92:e2:24:37:92:b0:16:75:fa:35:cc:e7:6d:
f3:c9:ad:c5:68:13:43:e4:fe:e7:ab:40:10:e4:7b:
d4:59:80:c9:75:5e:18:a9:b6:dc:dd:c5:a3:f1:6b:
8f:a4:41:fc:ed:62:66:6e:4a:67:31:13:9e:da:d4:
04:da:09:15:20:6f:a7:d7:b7:40:b8:f5:cd:5e:aa:
e5:a8:83:20:24:67:53:e9:5b:d2:da:df:96:31:4d:
65:81:af:00:c8:c0:1b:30:55:d7:26:67:65:73:24:
56:b7:26:c7:a3:7c:7a:d2:a3:c7:01:5e:69:7f:c5:
48:a1:ae:39:11:8f:38:77:6b:59:42:e0:70:ef:90:
6b:aa:7b:3c:c3:93:9e:17:a7:45:e2:19:46:b9:63:
0f:e3:8d:aa:29:26:65:a1:34:f4:7c:03:fd:af:0f:
0d:68:59:18:57:6c:11:8d:2c:f1:d5:d2:59:34:65:
4c:3e:9a:21:ae:1e:5c:ea:4c:96:97:f3:99:4f:20:
45:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3D:1C:1C:BB:47:6B:D5:63:76:C0:1D:62:8F:CD:42:C2:01:F1:09
X509v3 Authority Key Identifier:
keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fb:6f:b8:77:5f:24:7c:b1:16:60:74:d6:ea:36:95:82:9f:
73:fe:9e:00:31:a4:0d:56:f3:3e:72:37:ce:cf:6e:6d:d3:ff:
a3:ba:c1:d2:e6:f8:97:6b:89:81:98:cf:3c:37:6a:dc:01:36:
f4:35:bd:86:b9:65:9b:03:6c:fe:5f:0d:32:45:e6:1e:83:0e:
bd:58:6e:3b:1d:f2:2a:cc:4d:8e:e6:23:b6:11:10:ae:1a:e2:
be:05:34:b4:ff:95:b0:18:9e:1f:7b:d1:3b:33:0a:18:0a:4e:
ed:43:18:5e:13:72:a7:cb:c3:6e:be:de:4b:a9:15:cd:13:6c:
19:ab:6f:1d:19:86:6c:f2:70:1a:45:fd:fd:f4:14:57:a7:be:
d9:ee:7d:78:cc:3e:34:4e:55:ab:bd:eb:4e:3c:55:79:7f:ac:
75:39:f9:0b:ff:0a:48:b9:e4:5d:c4:63:5f:7e:a8:7f:38:3b:
3c:cc:24:a3:e2:72:99:d3:7a:a5:9d:f9:44:61:7f:6d:f9:3d:
5f:3f:9e:cf:d9:e6:85:46:62:ca:e6:7b:fd:f8:2c:86:5e:d8:
e8:f4:ed:63:09:15:31:9c:1f:99:79:13:a1:36:1f:7a:38:11:
40:25:76:30:22:b5:2d:ee:35:18:37:52:aa:39:21:52:df:dd:
31:33:5e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:19 2026 by rpki-client