Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft
File: mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft (raw, json)
Hash identifier: PU6m1Zx5jOUAsQzNnMPi91IHdmX3TJlOzOBJCHx+kvk=
Subject key identifier: 66:22:31:D7:24:A0:68:70:40:D4:3B:7E:6E:A3:47:3F:99:F5:42:E6
Authority key identifier: 9A:0B:BB:9F:85:0B:45:8C:62:46:7F:02:B7:D6:90:85:42:A5:05:93
Certificate issuer: /CN=9a0bbb9f850b458c62467f02b7d6908542a50593
Certificate serial: 01A0C9A1CE389D6841D05C08B4D9E18B5C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft
Manifest number: 48
Signing time: Tue 22 Sep 2026 15:00:19 +0000
Manifest this update: Tue 22 Sep 2026 15:00:19 +0000
Manifest next update: Wed 23 Sep 2026 15:00:19 +0000
Files and hashes: 1: hoPDPLNiWu-9zpQhgukPEyLhtuM.roa (hash: XsLZob1RA7jolFvgyscIzhZR6yadd8m7VJ1KCp4ecOA=)
2: mgu7n4ULRYxiRn8Ct9aQhUKlBZM.crl (hash: b19GuM917E5HVn5YG/vNuyYzT3/adZGNP3uJANIdPbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:ce:38:9d:68:41:d0:5c:08:b4:d9:e1:8b:5c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a0bbb9f850b458c62467f02b7d6908542a50593
Validity
Not Before: Sep 22 15:00:19 2026 GMT
Not After : Sep 23 15:00:19 2026 GMT
Subject: CN=662231d724a0687040d43b7e6ea3473f99f542e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:77:89:2c:41:99:c9:70:4c:d7:79:6f:0c:
ef:81:c5:7f:60:21:fb:68:fd:75:6b:c1:76:3a:00:
be:50:9c:2b:27:0c:39:6d:71:b6:9f:23:8b:99:75:
72:81:2d:ff:cb:43:a6:d4:e3:9e:f0:dc:1e:3b:3c:
cc:f5:8c:ed:96:45:ea:e7:1a:69:66:b6:5f:f9:cf:
00:bf:fe:ae:19:39:53:c7:5f:ca:8f:db:10:ec:de:
9f:a9:a7:e6:2f:60:78:10:0b:3f:ac:a7:71:fe:be:
14:2c:f2:ef:fc:56:23:56:11:0c:75:d4:61:43:4e:
18:8b:09:ad:8a:b8:63:72:f3:af:f0:e6:04:52:1f:
36:6b:da:7e:ef:58:fe:78:73:37:27:59:f7:e9:f2:
7a:6e:0e:6c:d9:09:37:a3:f0:d0:1d:4d:ab:35:1a:
4b:6d:d2:66:6d:2d:20:ef:50:9b:63:69:d2:6c:10:
40:02:22:a8:58:89:46:05:2b:47:a0:12:25:c0:88:
77:6a:ad:c4:7f:bc:9c:cf:23:d8:e5:cc:53:61:44:
d5:2d:7c:30:25:9f:07:23:74:80:da:45:5b:2d:df:
fe:1b:d0:12:e4:b2:ae:26:99:21:6e:92:03:6e:b0:
e9:35:ab:76:4b:ae:b3:1f:cd:2c:ac:a7:04:05:79:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:22:31:D7:24:A0:68:70:40:D4:3B:7E:6E:A3:47:3F:99:F5:42:E6
X509v3 Authority Key Identifier:
keyid:9A:0B:BB:9F:85:0B:45:8C:62:46:7F:02:B7:D6:90:85:42:A5:05:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:95:88:49:6f:99:9c:9d:2b:a5:07:6d:e1:a1:94:d3:1d:14:
5b:10:99:f3:00:70:da:a1:be:0d:23:bb:7c:2c:bd:36:a6:0d:
e9:7c:85:fc:f1:a4:bd:a9:08:26:cd:18:11:73:76:28:fe:af:
e8:33:c5:69:4f:ba:cc:89:fb:21:6b:6c:59:89:95:c0:aa:56:
8c:25:51:ab:7a:26:72:dc:64:be:a0:df:ee:0d:3d:7d:00:69:
0d:a4:ef:68:e3:b8:f9:b8:f4:30:5a:ca:70:6e:a5:fc:4b:cb:
be:a2:6e:6b:9a:7d:ad:d0:e7:a0:25:a2:76:b3:56:c3:f8:49:
11:74:0f:16:10:ec:34:f2:0f:d3:5c:64:5a:08:d6:34:64:ea:
f6:44:2a:ea:fd:15:07:6d:87:f9:a0:f9:76:b0:b3:27:56:ed:
b2:30:e8:07:51:9c:29:19:84:2d:08:44:66:14:70:41:15:46:
f4:0e:f9:d6:d9:19:0e:df:1d:10:39:8b:bc:36:f5:3f:6f:66:
c3:7d:22:be:f9:43:2f:35:d8:ee:e0:8f:73:d6:b9:7a:6d:12:
3e:ff:34:02:27:d4:48:10:4a:ca:af:d0:57:8f:7d:2e:e4:77:
af:0b:b8:3e:88:f0:25:de:2a:ac:7b:ef:f7:cc:2f:97:a8:89:
6a:d1:5f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:50:23 2026 by rpki-client