Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json)
Hash identifier: eaRlgcZ0gkfc4FT/Bi8HVfojEESDElWGX6mHe82hSkk=
Subject key identifier: 18:BE:C4:94:60:38:E7:9A:12:4A:93:6B:3F:B1:C3:AE:88:3B:BA:BD
Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Certificate serial: 019CACB47741961B1549D1421210292A8FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:00:34 +0000
Manifest this update: Mon 02 Mar 2026 04:00:34 +0000
Manifest next update: Tue 03 Mar 2026 04:00:34 +0000
Files and hashes: 1: AJubno4ZrqTS0RpcQUJX01d0Kkw.roa (hash: p6tmt7fq6LNsnRh4ZNDQsOuCuF6aJ3pZ0TDsZFJJx24=)
2: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: AIq6b6yumWWdaIHBVP1x9T+WYK6dbNLZxTtEdE2Cu1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:77:41:96:1b:15:49:d1:42:12:10:29:2a:8f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Validity
Not Before: Mar 2 04:00:34 2026 GMT
Not After : Mar 3 04:00:34 2026 GMT
Subject: CN=18bec4946038e79a124a936b3fb1c3ae883bbabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:14:08:b6:b5:16:e3:4f:88:c4:c7:92:f1:1d:
1e:6c:3f:d8:62:93:ec:bd:a2:e9:fb:b8:0e:56:58:
3b:40:5b:4d:e3:58:70:77:b2:90:98:1e:f2:60:95:
e0:99:95:bd:a9:64:69:55:79:13:f8:f6:e9:c6:8b:
29:c6:cb:b1:af:f9:1e:cb:57:57:76:81:2f:f5:ec:
1f:4b:ce:76:41:e5:48:7a:7e:3f:49:34:03:be:8a:
57:96:a9:07:90:22:28:9d:e1:a9:45:87:6c:b1:ed:
34:c6:d8:c9:bd:dd:aa:2c:50:86:e2:6b:28:2a:76:
81:38:72:69:a4:b1:f4:a4:9a:4b:89:46:49:f2:50:
f0:9f:ed:c9:08:9f:4c:24:b7:a5:c0:ca:5a:e4:87:
d1:d3:50:3b:de:e8:dc:93:68:33:9a:96:47:9e:fd:
c5:99:96:22:1e:c6:0c:a9:c6:a7:14:9e:5d:c9:28:
0f:77:36:b7:77:ee:f7:83:b5:7f:5e:b0:93:df:ea:
9d:8c:57:23:79:c1:35:0f:0d:05:a6:5f:ca:25:05:
93:d5:23:c6:01:89:77:db:39:ef:f6:e8:08:ec:4f:
22:67:7b:bf:b1:f6:28:63:8f:93:6e:56:26:0b:32:
34:d2:07:e2:24:e0:5b:6c:8d:7c:b8:b1:66:83:9a:
f8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BE:C4:94:60:38:E7:9A:12:4A:93:6B:3F:B1:C3:AE:88:3B:BA:BD
X509v3 Authority Key Identifier:
keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b7:ec:67:00:8f:2b:3f:83:6e:11:44:e6:c6:5a:d3:89:d3:
cc:f3:d3:8c:7e:39:27:48:6c:c6:27:56:b5:92:db:27:2d:5a:
df:9a:cb:5e:a7:cc:29:00:a3:fc:93:79:ca:ba:49:ea:9f:44:
8b:c8:b2:4b:79:1a:90:af:ab:da:68:df:2b:e6:60:4a:6c:0d:
6b:37:20:40:84:ff:9d:49:72:94:06:fa:ac:fc:b3:e8:22:b0:
19:91:aa:4f:a4:44:bc:e6:4b:94:9b:5e:20:25:9c:ee:81:33:
6f:ee:3c:1c:d0:6d:1a:4e:fc:15:0d:29:0e:fc:c1:72:08:e3:
c6:09:ae:4f:12:f9:3d:47:a8:50:7c:43:15:cd:9f:b0:26:96:
de:86:b7:6b:5b:5f:00:3b:5f:8c:bb:7d:d1:7b:a4:c8:52:1e:
b0:76:12:da:1b:a5:07:ac:e2:6a:4b:b8:5c:aa:20:c0:92:09:
30:3a:c5:27:52:70:6c:e9:bd:27:60:43:9b:29:87:84:5c:fc:
ce:98:ca:93:90:d4:3e:cf:a7:f7:93:67:25:e3:19:6f:21:5a:
f2:a0:41:9c:c5:c2:7a:0e:e0:9d:b9:06:e9:2a:46:ce:2b:42:
df:d1:28:a6:96:73:54:1c:ff:3d:61:dc:12:c8:1b:f1:be:d9:
b9:c7:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:46 2026 by rpki-client