Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: KUoWM6iqoWDFpt0BLvGeD7C6vERbxv2dbuah77jzuJw=
Subject key identifier: 36:CA:B6:97:C3:A1:F7:F0:D3:A8:46:B4:E5:9E:B7:64:A0:40:AF:52
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 019ED3BD358FDE185F9F2184C1BF7D923D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 1966
Signing time: Wed 17 Jun 2026 04:00:52 +0000
Manifest this update: Wed 17 Jun 2026 04:00:52 +0000
Manifest next update: Thu 18 Jun 2026 04:00:52 +0000
Files and hashes: 1: J5P3_JUxrLqrnXDXiWzAe9FDnRM.roa (hash: 85ulhRZmPxsRvLMOYGzBL98RjNzzbmxq5th6uCIJYyU=)
2: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: kOfYs0UKwSwVSxVDygKR6zQh2U/le1h2e55U0BZWXoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:bd:35:8f:de:18:5f:9f:21:84:c1:bf:7d:92:3d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: Jun 17 04:00:52 2026 GMT
Not After : Jun 18 04:00:52 2026 GMT
Subject: CN=36cab697c3a1f7f0d3a846b4e59eb764a040af52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:42:fe:60:6a:56:ec:2a:82:e1:45:08:98:
eb:ca:26:40:5e:e1:68:34:ff:cd:4c:c5:20:3e:92:
a0:a3:37:45:1d:e3:23:b2:9f:2d:73:16:ef:88:7a:
be:e3:2c:3f:c5:32:21:2e:b3:20:17:83:5f:83:9a:
5d:9b:ae:e6:7c:da:40:ff:59:cb:94:f9:fe:b8:43:
45:74:dc:33:fc:d5:84:b1:95:f9:ac:da:db:ed:5d:
7d:9b:16:af:3c:7d:80:47:dc:c8:d1:45:9a:ca:6d:
df:61:09:35:fb:b7:9a:31:94:6e:8b:f7:9c:a1:2f:
94:9f:59:c9:1a:11:e3:e8:86:86:36:14:28:23:dd:
37:5a:a3:82:6d:c1:7f:13:39:c0:89:9d:3e:e3:d1:
2a:8b:4a:12:91:35:81:11:19:a0:49:c1:51:4d:83:
8a:a9:37:22:22:c6:5a:5e:21:17:5a:43:92:7e:bd:
d5:5e:a8:31:c0:f2:a8:d3:39:71:c3:73:65:be:60:
34:b0:83:b2:fd:e4:a1:c9:44:99:a0:7b:75:3e:a3:
ed:97:94:89:cb:5f:03:71:cc:12:cd:6c:85:d1:8a:
3f:0d:a4:f7:2c:cf:bc:ca:7b:6f:72:12:36:56:09:
4c:a1:dc:db:8e:29:bb:ba:29:b8:2e:69:86:cf:9b:
55:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CA:B6:97:C3:A1:F7:F0:D3:A8:46:B4:E5:9E:B7:64:A0:40:AF:52
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e5:cc:e3:05:0f:4c:1d:87:b1:a7:67:4e:96:8d:19:36:d1:
cf:72:6e:57:55:d7:b6:58:5a:fe:c0:12:d6:63:4f:3e:ef:4e:
1b:80:c8:b6:c9:30:54:e5:d5:bc:40:c1:76:48:8b:d7:98:bf:
16:1c:6d:fe:e9:7f:ef:ae:98:be:fb:72:a4:cb:c7:76:d9:22:
45:10:18:c7:b5:5a:c2:54:fc:c0:59:6d:5f:4f:3f:88:11:e9:
26:d1:96:ed:19:ac:c3:2e:6c:10:82:de:01:9a:78:4c:ed:25:
0c:5c:d1:3d:ff:08:39:da:75:55:f8:ea:10:52:80:f2:c4:70:
54:c2:ba:1d:c0:17:4b:0d:41:d4:9d:63:c7:d0:f9:e2:34:4f:
8d:cb:a0:b2:4e:c5:7e:1f:8f:73:c2:5d:67:c3:fa:e4:52:15:
89:65:53:83:42:63:94:3f:fb:75:42:6f:bb:9d:a4:c0:d9:85:
8c:11:28:6c:f0:90:45:6a:72:74:9f:6d:7f:c4:0f:11:4a:22:
da:8f:92:c2:5a:6a:f5:d2:79:72:df:c4:8d:c6:5c:a4:dc:4c:
74:9d:50:44:32:03:d1:31:f1:79:8f:f6:0a:dd:26:85:06:0b:
76:05:49:b7:f4:81:3a:97:4f:5c:35:c1:ca:1a:f2:ff:5b:85:
d1:b0:69:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:55:36 2026 by rpki-client