Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
File: MGavc-_zrCH_F6CVL_Nw5gykS10.mft (raw, json)
Hash identifier: dLYOTvSNCZ2x6DEOJBt9St3rL/ONWdxObvTmrXJAxH4=
Subject key identifier: 98:CD:A8:23:64:18:07:E3:4A:02:00:B1:F5:3D:2A:6E:78:12:C7:72
Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
Certificate issuer: /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Certificate serial: 019D9AABF6846EF0951EB0E2BE0B7E2CF58E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 09:00:54 +0000
Manifest this update: Fri 17 Apr 2026 09:00:54 +0000
Manifest next update: Sat 18 Apr 2026 09:00:54 +0000
Files and hashes: 1: C1RBBN_ZVpEXr_O5XicmF9RRbqw.roa (hash: VWcYJnFNZXnjTlhzeEFW69/RT95ec57ErxUIeBg+zwo=)
2: MGavc-_zrCH_F6CVL_Nw5gykS10.crl (hash: 9f8UL/381HT53Aza5Bd5WX+7rDO/vk97Pnxbni+8CKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:f6:84:6e:f0:95:1e:b0:e2:be:0b:7e:2c:f5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Validity
Not Before: Apr 17 09:00:54 2026 GMT
Not After : Apr 18 09:00:54 2026 GMT
Subject: CN=98cda823641807e34a0200b1f53d2a6e7812c772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:3f:d5:6e:3b:14:b2:00:f1:72:3d:d2:a1:
e7:ca:2d:c2:f1:83:c5:00:6a:a1:77:eb:e5:f6:76:
32:55:05:94:28:90:50:83:6b:83:41:cd:1d:42:fd:
ac:47:35:1a:6e:60:15:e1:d7:05:3a:ae:99:b9:d9:
f9:6a:1f:e2:a8:a4:c8:57:02:bd:7c:7a:d7:5e:7f:
5f:6c:15:df:6f:c9:58:2e:29:52:69:25:3f:bd:5a:
18:3d:4c:d9:f1:43:06:9d:57:a9:5a:ba:24:40:49:
e8:d0:56:9c:92:a9:e6:6a:d7:61:52:d1:7e:25:92:
95:94:57:80:ad:2a:ee:79:7f:9f:03:af:21:e3:fb:
3d:08:4e:a5:6a:b4:6c:f9:1d:5b:4c:28:09:67:2b:
0e:72:e8:33:fd:9d:95:b1:ae:38:c5:02:a3:12:63:
a4:3e:86:19:8c:51:bf:d8:e6:a7:f5:24:e8:24:17:
ca:8a:02:93:c5:0f:2a:0e:c4:37:aa:30:d1:07:27:
77:73:57:01:74:1c:97:17:69:f0:59:57:49:49:23:
f5:ee:26:61:bc:e7:2b:b8:d6:30:4e:12:83:86:af:
ba:61:95:12:83:c5:15:56:bf:33:90:4f:57:5f:ec:
2d:47:29:4c:7e:bf:3b:b8:b5:f3:0b:f8:54:2a:df:
a8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CD:A8:23:64:18:07:E3:4A:02:00:B1:F5:3D:2A:6E:78:12:C7:72
X509v3 Authority Key Identifier:
keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b0:cf:ec:72:28:c7:ed:71:12:2e:a0:44:ca:fe:c6:09:00:
aa:36:0b:26:b1:32:82:c2:ff:3f:d8:16:11:c7:cd:41:0d:ba:
39:5f:c1:45:da:f9:59:8f:a9:a5:08:1a:72:33:f4:ef:ec:96:
a4:cc:8e:91:01:df:dd:59:60:d1:41:d6:25:f8:5d:3c:7e:84:
4a:29:21:78:1b:36:f7:24:47:a7:55:1b:8d:70:b6:c7:24:67:
41:fc:81:15:d3:5c:ef:1b:83:43:95:c7:50:4d:cc:f9:19:82:
97:50:ab:78:66:2f:51:57:42:55:09:a5:2e:51:20:92:c8:28:
a5:73:11:18:83:2e:8c:a2:9f:da:9f:26:0c:e7:d3:32:86:78:
0d:44:70:f0:e1:8d:98:c0:04:5b:87:ea:2c:b7:5f:a2:6c:07:
85:2c:4a:61:28:07:ff:b1:1d:8d:24:6f:9e:bb:cc:b0:af:81:
32:b7:e6:36:5c:77:71:16:fb:fc:a7:b6:ad:c0:4a:46:41:da:
0c:16:03:aa:3e:ec:a8:ce:f2:5f:cd:d5:2f:74:7a:f4:d5:be:
28:bc:7e:34:bc:f8:30:82:cc:1a:bd:40:5d:de:47:e2:1d:19:
56:4c:f8:a7:d5:5e:96:6b:f7:e2:26:76:37:fd:53:d2:21:e1:
cf:15:20:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:19 2026 by rpki-client