Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json)
Hash identifier: feLpbyJBTnzk0ArpZfxxZbUv6SSzJV6HWUH/22AKybQ=
Subject key identifier: 99:43:7A:22:58:44:F1:23:C6:FB:81:0D:94:1C:1B:40:A7:C4:4B:81
Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Certificate serial: 019D984FCD69FBF95307E04B3E08CB661F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 22:00:59 +0000
Manifest this update: Thu 16 Apr 2026 22:00:59 +0000
Manifest next update: Fri 17 Apr 2026 22:00:59 +0000
Files and hashes: 1: AJubno4ZrqTS0RpcQUJX01d0Kkw.roa (hash: p6tmt7fq6LNsnRh4ZNDQsOuCuF6aJ3pZ0TDsZFJJx24=)
2: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: 9ds/y52DTKKAYP8W1Z1FIiBXVALqGDqqQ1xswB2qgyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:cd:69:fb:f9:53:07:e0:4b:3e:08:cb:66:1f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Validity
Not Before: Apr 16 22:00:59 2026 GMT
Not After : Apr 17 22:00:59 2026 GMT
Subject: CN=99437a225844f123c6fb810d941c1b40a7c44b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0f:e3:67:70:53:5b:bd:fe:a7:a6:1d:b9:8a:
ea:05:02:4b:92:1f:bd:57:4c:a7:eb:15:87:72:8f:
6b:db:99:34:cd:57:aa:19:8d:ef:10:43:f0:37:4b:
78:57:ca:2d:66:29:fa:7a:c8:92:0d:b6:c4:91:31:
c9:90:a8:0e:96:b8:b3:77:1f:7d:8d:9c:49:90:4b:
ab:3c:59:ef:55:a8:04:42:8e:c5:a3:ff:c4:a7:fc:
73:86:73:1c:64:46:8b:e9:58:b5:cd:f9:ae:b5:f9:
60:b8:a6:e9:19:57:f0:32:24:9d:49:4b:ea:88:74:
af:27:3e:a0:83:80:19:35:85:d1:95:ac:fd:cd:8f:
e6:28:c1:f4:4d:22:16:10:74:c7:35:7d:d7:08:1b:
c4:a5:fe:65:81:f2:86:1f:6a:ea:e9:f8:f3:7c:da:
ec:87:9b:57:12:cb:25:b0:dd:72:ac:53:b9:d1:58:
cb:e2:3a:91:46:3a:fb:96:0c:c4:db:ba:2a:3c:87:
81:dc:ff:a6:63:06:bb:76:f7:58:77:fc:fe:17:62:
97:c5:cc:e0:fd:60:ba:b4:d1:1e:c2:fb:c1:22:d9:
73:f7:0a:f2:01:af:68:47:29:3a:fe:45:a6:f1:ef:
1b:0f:e2:76:d3:4c:e3:49:96:3c:9d:67:16:3a:9f:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:43:7A:22:58:44:F1:23:C6:FB:81:0D:94:1C:1B:40:A7:C4:4B:81
X509v3 Authority Key Identifier:
keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:17:e5:6e:86:48:9f:89:ca:90:2f:9c:92:bd:d6:05:0b:42:
e2:ca:f3:ed:43:13:1a:86:7a:90:e6:78:40:11:3c:de:74:74:
2a:3f:72:89:13:47:a2:34:21:09:03:23:d3:fb:e5:db:95:ab:
ca:62:a5:a8:e7:26:9c:6b:9f:5d:b7:a7:18:76:a9:dc:6a:1d:
8a:6c:74:3c:b9:5b:c9:33:25:8b:2e:18:3c:09:5e:97:37:79:
7e:62:31:42:a4:a8:15:34:7f:ea:d0:39:ee:75:e3:b4:65:8d:
e5:58:59:d8:a3:a0:c7:09:ca:9a:3e:d4:04:ba:2b:2d:a6:c7:
00:3d:35:ca:95:79:47:a7:bb:76:80:c3:45:0c:e7:1b:72:a3:
66:b1:30:7b:61:ce:83:69:d5:73:24:bb:79:9f:0b:95:0f:c1:
32:fd:4b:7a:b4:a0:3c:e6:75:65:af:ca:92:d4:56:3c:8c:f9:
8a:3f:97:23:04:3b:de:c4:00:5a:0d:3d:21:60:9c:52:18:73:
e5:1b:42:d1:1b:47:39:f6:6d:a2:fe:ef:b9:70:d1:6d:d5:ad:
c4:7a:06:64:fe:57:35:df:58:04:be:af:49:a0:69:7f:e3:da:
b0:ee:21:18:b9:e8:7f:80:fa:90:09:15:d8:1e:b9:e8:20:d0:
74:01:ef:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:18:35 2026 by rpki-client