Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: 8f2OhDVYEI5jjSXZ8hK+DSaUwBhefehviU/68l53wD4=
Subject key identifier: B2:A9:77:0D:FE:C6:0D:5B:AC:F5:1C:8E:6A:CD:EB:85:2E:E8:C4:AA
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 01A0E8C0C703CFE855A92C99D6E787AF7D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 16:02:23 +0000
Manifest this update: Mon 28 Sep 2026 16:02:23 +0000
Manifest next update: Tue 29 Sep 2026 16:02:23 +0000
Files and hashes: 1: J5P3_JUxrLqrnXDXiWzAe9FDnRM.roa (hash: 85ulhRZmPxsRvLMOYGzBL98RjNzzbmxq5th6uCIJYyU=)
2: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: 9SmgbNS07p7Q8iU5HejzFoDZfeWZzktM2f26xwF68gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c0:c7:03:cf:e8:55:a9:2c:99:d6:e7:87:af:7d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: Sep 28 16:02:23 2026 GMT
Not After : Sep 29 16:02:23 2026 GMT
Subject: CN=b2a9770dfec60d5bacf51c8e6acdeb852ee8c4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:9a:cb:96:ae:6c:2f:2e:1b:2b:41:0b:a8:
e2:cc:0b:37:0a:7e:dd:32:81:77:d0:33:5c:fc:26:
2f:d5:90:78:d6:55:20:e2:0f:30:fd:0e:59:9f:1b:
29:25:1d:dc:6b:0b:50:e5:07:52:1a:89:fa:81:75:
44:82:d0:1b:52:96:b7:c3:04:5e:1d:cc:f1:11:71:
e0:dc:c9:f6:3b:c8:80:92:d6:bc:e9:77:fe:66:b9:
3d:81:1c:f8:2d:d5:fe:f3:10:25:5f:35:75:37:c7:
6f:0a:06:66:b9:5b:e8:56:4b:35:9c:40:fe:b3:5c:
f3:ee:3f:2b:9b:f7:f9:99:6c:e2:6a:a8:5d:1c:96:
40:b6:e7:a1:48:60:17:0a:d6:d5:71:0c:34:4f:f0:
d8:69:1f:c9:a3:65:0c:b9:c9:a2:31:fe:96:32:5e:
48:2f:16:ac:ab:40:79:5c:b5:a5:a9:56:c3:a5:ce:
bd:f5:0b:69:d5:6e:27:47:b5:26:d5:ec:c8:9c:53:
f1:bc:0e:58:a6:9e:cf:b4:92:6b:07:c1:6b:10:1c:
3e:6d:7a:f2:fc:da:c5:a2:35:ca:1f:4b:db:0b:8f:
39:e5:8d:8f:87:10:f3:e0:5a:b1:52:b9:9a:2a:f9:
3a:0a:79:da:a0:d0:7e:30:e6:7e:31:ce:b7:a5:3a:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A9:77:0D:FE:C6:0D:5B:AC:F5:1C:8E:6A:CD:EB:85:2E:E8:C4:AA
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:76:b0:c8:a7:ad:fc:cd:e6:12:66:28:e6:f1:e7:5d:7d:f9:
37:c6:90:7f:59:24:1d:87:5a:04:90:5b:d5:d3:88:15:7c:47:
f1:06:ee:c5:18:eb:89:d3:f9:91:c7:7b:5b:10:97:d4:8d:3c:
b1:5a:84:97:0b:b8:e3:96:8a:f8:d2:df:58:43:4e:8f:d7:2d:
93:7d:89:d8:f5:37:68:9c:4f:89:25:6e:22:0c:25:e4:6d:5a:
42:13:bb:75:16:a7:12:cf:8c:e9:15:ba:42:df:70:be:f3:25:
1f:52:9e:61:93:f5:e4:9f:ec:66:42:a2:77:cc:99:b1:04:5c:
5e:a3:e8:59:37:9a:6f:fd:4d:bf:aa:11:3e:60:cc:bf:50:eb:
69:24:d0:d7:93:1a:22:40:4f:5c:ba:28:69:23:a3:41:a7:8a:
a1:3c:f1:cd:04:7e:41:8d:a0:fd:5d:54:5e:01:59:fa:22:1f:
f8:ff:e4:8e:0d:e8:6c:e0:e7:21:d0:f8:8f:c2:50:15:13:0e:
a3:a8:e4:b3:5b:31:ae:7e:6f:f7:47:4c:20:a2:c8:f1:11:10:
1f:b7:a8:fd:e9:9a:c8:d1:16:71:2d:68:0f:c3:5a:df:3a:dd:
f8:1e:1a:f0:7d:d8:bf:a4:38:50:36:ba:fb:42:74:af:16:10:
e9:ae:bb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:11:13 2026 by rpki-client