Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: 87a2MvC4MWeh/MVRXUwcAo0ko3XwCoJEgX/wiQq9HhM=
Subject key identifier: 73:45:4B:CD:C3:80:0E:88:F5:68:7E:B6:AF:22:9C:35:B2:B8:88:69
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 019D98F501D9486B17C9BAF7A24DE753A7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 01:01:26 +0000
Manifest this update: Fri 17 Apr 2026 01:01:26 +0000
Manifest next update: Sat 18 Apr 2026 01:01:26 +0000
Files and hashes: 1: J5P3_JUxrLqrnXDXiWzAe9FDnRM.roa (hash: 85ulhRZmPxsRvLMOYGzBL98RjNzzbmxq5th6uCIJYyU=)
2: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: f90fp5jR9/l1msYO9QNhKZKwHNN1/MYkHOW8XU4ZvGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:01:d9:48:6b:17:c9:ba:f7:a2:4d:e7:53:a7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: Apr 17 01:01:26 2026 GMT
Not After : Apr 18 01:01:26 2026 GMT
Subject: CN=73454bcdc3800e88f5687eb6af229c35b2b88869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:4d:4b:f6:f4:bd:27:4f:50:29:0a:0b:ad:
5e:f9:00:fe:f8:9f:51:36:b1:76:7a:49:e2:1a:6b:
cd:c2:78:b2:4b:ae:e0:f9:d6:a5:3a:b6:1f:30:7b:
d4:6d:d7:d4:fc:a8:e6:33:d3:cc:d3:4b:5b:e1:23:
21:82:6d:0b:e2:37:ee:c6:2f:b2:b2:f8:19:45:2a:
5c:3c:98:d6:e1:bb:33:bf:5d:fe:b6:d7:94:82:a2:
8a:27:5e:a0:b1:17:c7:92:30:6b:eb:07:43:d8:ff:
02:b1:ac:8d:79:80:41:bb:f0:85:af:f3:63:7a:0c:
7c:77:48:af:1b:78:37:e6:a8:d2:d7:f3:3d:a7:91:
9d:cf:60:8b:3d:53:7e:e7:a6:e1:9d:3c:5b:40:2e:
71:93:f5:19:ef:0a:50:34:36:14:f3:8c:5e:88:7a:
1e:a0:16:19:53:2c:54:a0:b4:1b:ad:70:15:aa:98:
82:34:89:ce:c3:b7:bb:d3:9d:ee:f8:79:74:ab:06:
57:f3:10:c8:d0:46:bf:68:8a:6f:f4:74:d1:24:ba:
d7:25:18:66:20:b8:0c:c4:ab:53:a4:18:20:10:17:
8e:e6:6d:66:3e:16:cc:96:17:e9:3f:4a:69:47:14:
71:b9:e9:35:13:95:93:9a:d5:14:6e:18:a8:1b:8a:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:45:4B:CD:C3:80:0E:88:F5:68:7E:B6:AF:22:9C:35:B2:B8:88:69
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ea:2c:d1:ca:41:b4:e8:02:df:ce:d3:16:ed:c0:66:ef:58:
14:b1:5b:f5:86:7c:e9:1a:57:30:eb:2f:87:2e:52:a5:f9:5b:
38:b8:d2:b1:fc:56:4e:35:1b:b6:b3:f5:8d:18:4a:2a:36:d0:
df:3d:7c:9f:ad:8b:0a:67:a5:70:c2:a8:de:32:da:42:b4:20:
ed:04:cf:69:0b:05:15:6e:5f:84:ec:a2:18:4a:ca:85:1b:27:
7b:de:a8:e4:4e:6c:31:8d:cc:a4:30:8a:18:77:b7:bd:7e:63:
3c:d3:4c:f3:8c:ab:b0:c6:23:41:be:97:04:d9:ac:76:20:c3:
bc:1f:cb:8e:ef:e2:35:58:b6:ad:33:21:48:11:4c:3e:b6:76:
dd:4f:0b:11:6f:ea:55:1c:ac:42:f0:d9:4b:b1:64:34:66:a7:
4c:78:bb:64:47:8c:99:3c:d1:ec:af:0b:08:4c:79:7d:56:c6:
d6:2a:bf:77:b5:43:44:9c:07:6f:a6:4e:b6:52:5c:98:d1:f5:
a0:28:f7:3a:70:44:c3:cd:ad:3f:b5:5f:7e:46:04:ea:2d:d2:
7e:35:07:6f:8d:fe:cf:52:ef:7a:73:a5:5a:ab:77:95:c9:9c:
85:51:c2:57:fc:3f:13:2b:6f:29:9b:9d:ca:01:3c:78:2f:17:
e5:47:d8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:08:18 2026 by rpki-client