Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
File: mpGLgMuzJzekayRIaaatVQlUP6E.mft (raw, json)
Hash identifier: CXqluNHGDHrcJDt2agMtk6Nijc1QapmHYV+D1TcNMGM=
Subject key identifier: C5:96:CD:E6:FC:BE:1A:5A:FC:4D:1F:C3:24:EC:E0:A5:5D:A1:69:90
Authority key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
Certificate issuer: /CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Certificate serial: 019DA309EFA183A01E778E626EE08ECEB849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
Manifest number: 0C6E
Signing time: Sun 19 Apr 2026 00:00:30 +0000
Manifest this update: Sun 19 Apr 2026 00:00:30 +0000
Manifest next update: Mon 20 Apr 2026 00:00:30 +0000
Files and hashes: 1: V7JsXJ0GLKjgHsCk3ewLigNI5bU.roa (hash: h3m+52oeLH7xOWJ+THQYW7O1i1kOSNXejnm2XZ2qwIU=)
2: mpGLgMuzJzekayRIaaatVQlUP6E.crl (hash: UH6sRCP+GHZBisjqtncZB3l3SyN30DJL480wUD2M+BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:ef:a1:83:a0:1e:77:8e:62:6e:e0:8e:ce:b8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Validity
Not Before: Apr 19 00:00:30 2026 GMT
Not After : Apr 20 00:00:30 2026 GMT
Subject: CN=c596cde6fcbe1a5afc4d1fc324ece0a55da16990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:1f:45:99:40:52:5c:8e:09:bd:53:a3:18:
05:db:a8:85:44:a2:6e:93:cb:10:90:7c:da:8c:1f:
ef:30:04:98:74:c2:d6:23:92:99:9f:76:ee:2f:f8:
b5:d8:f9:be:64:b6:31:06:df:d0:e0:60:e1:ee:c2:
6d:a7:99:39:39:aa:84:d8:cc:e7:fc:85:6f:d3:2b:
8b:4e:08:18:c5:0a:ee:58:ee:18:59:23:c8:fc:c9:
41:57:b4:36:91:bb:88:e4:f3:f2:41:0a:46:8d:e8:
4d:79:0c:f1:6b:89:9e:be:46:e8:6a:9e:d4:b2:ca:
6d:3c:59:de:d8:3d:aa:89:b4:cf:86:0d:37:cd:8b:
f9:3b:6e:e9:25:eb:62:7f:b0:2b:c5:9f:33:7f:36:
ff:ec:d0:d4:0d:4a:2b:ed:7f:f6:82:27:2b:cd:71:
fe:fd:27:d2:1d:30:4c:6b:27:29:a8:21:08:cd:59:
e6:b5:cc:a5:8d:20:6d:f8:22:6f:a1:32:5d:ae:27:
b4:42:91:a7:20:32:5d:71:4a:a6:db:f3:52:f9:0c:
9d:87:66:ca:bf:6d:77:36:5a:db:d3:2d:b6:36:d2:
7a:da:8e:5e:ba:5e:2b:b2:e6:ac:39:5d:12:59:3f:
b3:1c:e9:12:ec:d2:f0:75:62:dc:1f:ab:b4:7d:aa:
a1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:96:CD:E6:FC:BE:1A:5A:FC:4D:1F:C3:24:EC:E0:A5:5D:A1:69:90
X509v3 Authority Key Identifier:
keyid:9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b0:4e:31:78:27:d2:d2:47:2e:e9:ec:17:5e:82:4a:40:63:
d6:29:dd:c3:61:5e:7e:4f:ae:f7:d9:38:78:4a:15:4a:36:81:
cb:21:fc:c0:4c:5f:2b:06:c0:05:49:87:e3:e6:47:95:48:3a:
f2:85:85:b8:ef:22:04:f5:b4:3f:7e:cd:73:6c:83:38:76:b6:
bd:e8:f0:d9:26:98:70:15:96:50:3e:71:bd:2b:44:83:ce:a3:
e6:40:7d:f5:f4:c6:3d:8b:dc:9e:d5:9d:b8:98:e0:55:81:31:
a5:a8:13:0c:d8:a7:a7:8d:cf:de:d0:3a:08:14:da:95:33:c9:
b5:30:1e:91:90:20:b7:b2:d7:c0:db:03:64:9c:f5:5c:94:8a:
62:01:2e:c8:92:a6:a8:1f:a5:da:e2:d7:70:60:00:09:32:4c:
5e:45:fc:9a:68:10:55:dd:de:4f:af:d9:91:0e:3d:11:f4:ba:
94:91:64:dd:81:68:5c:5f:57:2b:1e:70:ec:49:19:3d:0e:11:
f7:1a:c0:19:f6:6a:07:4c:3c:c1:82:ac:e1:b7:72:64:97:1f:
4e:51:21:60:7c:27:f9:4e:c8:97:f0:ed:49:6c:39:de:5e:ce:
8f:4c:a9:12:45:6b:f3:87:4c:cd:3b:28:c1:bd:69:72:72:6c:
d7:83:9d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:46:23 2026 by rpki-client