Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: llCAHtjHee6xHXou7zvd4qhKZCR9O6IDSKaRBxcVSpQ=
Subject key identifier: 9F:7E:8B:C5:A9:81:C1:08:E1:F6:7B:BF:66:34:08:11:80:C2:15:CD
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 019CAB6B7B45DDE65E22F61D9D58B39594C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 22:01:13 +0000
Manifest this update: Sun 01 Mar 2026 22:01:13 +0000
Manifest next update: Mon 02 Mar 2026 22:01:13 +0000
Files and hashes: 1: J5P3_JUxrLqrnXDXiWzAe9FDnRM.roa (hash: 85ulhRZmPxsRvLMOYGzBL98RjNzzbmxq5th6uCIJYyU=)
2: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: srpoa+sbktIoUWebhHd0+JDNP5sK1lRqOEL7V10qTk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:7b:45:dd:e6:5e:22:f6:1d:9d:58:b3:95:94:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: Mar 1 22:01:13 2026 GMT
Not After : Mar 2 22:01:13 2026 GMT
Subject: CN=9f7e8bc5a981c108e1f67bbf6634081180c215cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:3c:64:9e:42:9f:6b:d0:7d:9b:78:73:d9:
7f:57:e1:52:23:39:5a:95:64:63:fb:e9:d4:fc:3f:
8e:85:59:27:e4:69:da:2f:dd:bd:8e:22:0a:e4:bd:
be:06:56:03:2e:88:65:cb:6b:b1:b5:27:74:94:d6:
43:7c:3b:fa:31:bb:d1:d4:2e:02:11:cf:83:4b:b2:
66:a3:6b:9c:38:a7:27:b2:37:78:4c:2d:eb:b8:cf:
e8:62:78:a4:5e:2e:93:e9:a9:7f:8f:bd:32:06:ff:
61:ff:6d:2d:fe:72:e9:83:3c:fc:dc:43:bd:21:4d:
be:e4:c4:8d:9a:64:b9:d7:20:e5:42:ca:0c:ee:5c:
d7:69:3a:90:22:cf:88:59:12:44:90:b1:00:18:87:
06:f4:c5:ca:11:74:b6:13:26:5d:86:ea:76:0c:b0:
75:11:16:51:bf:c1:09:62:3a:bb:76:f8:e0:a6:6b:
60:96:fe:94:18:1c:84:c0:4e:cc:76:73:91:ea:08:
28:fe:02:89:f9:ce:01:a0:9b:42:c4:81:14:73:77:
d8:91:8f:50:5c:f7:12:55:da:c9:de:0f:b8:53:ea:
51:d5:b9:e4:09:60:e7:96:68:ae:d3:c0:9e:98:e7:
24:b0:80:8a:09:31:e1:66:4f:0d:9c:25:3e:93:69:
e2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7E:8B:C5:A9:81:C1:08:E1:F6:7B:BF:66:34:08:11:80:C2:15:CD
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:df:10:6f:d0:4a:5c:64:45:ae:eb:6f:26:f0:ec:79:45:b0:
6b:1d:7f:4a:01:7b:f1:21:e8:12:94:43:80:1d:ff:7e:e8:41:
c0:96:b0:23:c6:b2:11:78:34:15:a6:b9:29:d4:14:ec:7a:23:
63:0e:90:0e:48:55:16:1b:9f:57:60:ea:b7:38:96:de:63:10:
1b:1a:95:36:7b:cc:c6:e8:5a:e3:39:e4:bb:d4:56:f2:c7:ba:
ee:d4:a4:03:24:ca:21:a5:22:c2:15:07:13:c4:3c:ee:be:cb:
e8:85:e9:d7:d4:61:5d:11:2c:51:a0:99:25:c7:cb:02:2a:c4:
b9:18:9f:48:c2:a8:fb:ef:d5:de:0a:57:10:08:ab:ce:1f:f7:
1b:ed:78:05:97:dd:ba:1d:7a:af:3f:28:91:40:41:4e:c6:b6:
14:07:9a:fe:67:ad:03:07:7a:14:6a:8f:f0:ae:8a:47:16:57:
ae:3f:6a:cd:5d:26:22:53:93:0a:1e:c5:6e:86:80:f3:2c:ec:
3e:34:11:6f:d3:c5:d1:4f:de:ff:2c:ea:50:76:96:01:92:c1:
b2:6d:9e:b6:c5:0b:0f:ef:8c:8e:ed:5d:89:78:04:7b:b4:1a:
01:05:1b:42:af:25:f5:e6:fb:34:b8:5f:59:6a:18:2e:a3:18:
d8:fe:d1:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra3tF3eZeIvYdnVizlZTEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjZhZDYxYzE2MmRmMDY1MGVlMGFiNjBjNjgwNzViMjlh
MjExYzgwHhcNMjYwMzAxMjIwMTEzWhcNMjYwMzAyMjIwMTEzWjAzMTEwLwYDVQQD
Eyg5ZjdlOGJjNWE5ODFjMTA4ZTFmNjdiYmY2NjM0MDgxMTgwYzIxNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucg8ZJ5Cn2vQfZt4c9l/V+FSIzla
lWRj++nU/D+OhVkn5GnaL929jiIK5L2+BlYDLohly2uxtSd0lNZDfDv6MbvR1C4C
Ec+DS7Jmo2ucOKcnsjd4TC3ruM/oYnikXi6T6al/j70yBv9h/20t/nLpgzz83EO9
IU2+5MSNmmS51yDlQsoM7lzXaTqQIs+IWRJEkLEAGIcG9MXKEXS2EyZdhup2DLB1
ERZRv8EJYjq7dvjgpmtglv6UGByEwE7MdnOR6ggo/gKJ+c4BoJtCxIEUc3fYkY9Q
XPcSVdrJ3g+4U+pR1bnkCWDnlmiu08CemOcksICKCTHhZk8NnCU+k2ni0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9+i8WpgcEI4fZ7v2Y0CBGAwhXNMB8GA1UdIwQY
MBaAFDBmrWHBYt8GUO4KtgxoB1spohHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YjM0YjAtMzAxYS00MWEyLWI0YzUt
YTg4NjZhYTk1YzcxLzEvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YjM0YjAtMzAxYS00MWEyLWI0YzUtYTg4NjZhYTk1Yzcx
LzEvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp98Qb9BK
XGRFrutvJvDseUWwax1/SgF78SHoEpRDgB3/fuhBwJawI8ayEXg0Faa5KdQU7Hoj
Yw6QDkhVFhufV2DqtziW3mMQGxqVNnvMxuha4znku9RW8se67tSkAyTKIaUiwhUH
E8Q87r7L6IXp19RhXREsUaCZJcfLAirEuRifSMKo++/V3gpXEAirzh/3G+14BZfd
uh16rz8okUBBTsa2FAea/metAwd6FGqP8K6KRxZXrj9qzV0mIlOTCh7FboaA8yzs
PjQRb9PF0U/e/yzqUHaWAZLBsm2etsULD++Mju1diXgEe7QaAQUbQq8l9eb7NLhf
WWoYLqMY2P7R8w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:09 2026 by rpki-client