Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
File: mgNSX2jrayNfHeIrYLG67S_H_4M.mft (raw, json)
Hash identifier: iV59I3yF+RzIjPy8KrFvWQOQuCOZJrOX+7jx+og+eNg=
Subject key identifier: D1:A2:4D:7D:41:CA:C6:51:CA:23:8C:65:8F:31:AA:9F:53:6C:16:AC
Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
Certificate issuer: /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Certificate serial: 019D98BD3FB1C42162A258EC8F540D872406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 00:00:32 +0000
Manifest this update: Fri 17 Apr 2026 00:00:32 +0000
Manifest next update: Sat 18 Apr 2026 00:00:32 +0000
Files and hashes: 1: MFu4iIS8ULhZnY4FxnMd7rTjHBE.roa (hash: TCJSYgPCBj82L62nMaeEdJ0VmNDiGeeuJdnCuR6MdlA=)
2: mgNSX2jrayNfHeIrYLG67S_H_4M.crl (hash: G20GI8LU2Vs0ZouEZcroJ/H2CdiQvr1g4Y1U1OVazBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:3f:b1:c4:21:62:a2:58:ec:8f:54:0d:87:24:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Validity
Not Before: Apr 17 00:00:32 2026 GMT
Not After : Apr 18 00:00:32 2026 GMT
Subject: CN=d1a24d7d41cac651ca238c658f31aa9f536c16ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:17:95:93:02:c2:12:c1:55:23:3b:b7:0a:
6a:da:e1:2e:79:f3:58:4f:fb:2e:6b:5f:f1:f0:ba:
a4:86:29:ee:43:cb:9a:4f:01:8f:81:e3:e9:24:bb:
97:98:a2:31:a4:92:c3:47:80:e9:0d:ef:e3:62:5b:
12:d0:fd:bf:a4:bf:dd:53:e7:1d:86:13:66:fb:e2:
42:4d:27:89:9f:a5:61:81:5e:e9:2b:76:07:52:83:
e1:3a:07:68:5a:82:57:35:fd:8f:cd:a1:ce:df:fc:
fd:96:f4:a4:f0:65:7e:38:3b:d1:67:ac:a4:88:96:
c7:f1:c3:40:f7:2f:15:72:47:14:c5:64:e6:56:9b:
5c:b3:e7:a1:78:3d:11:4b:aa:5f:02:1d:8f:35:6d:
09:12:ab:b0:48:0a:3a:a4:6c:96:90:99:1c:1b:5c:
79:84:3d:b2:93:3c:fb:d1:2e:1c:ff:96:19:8a:de:
23:15:b2:d3:e3:72:79:1d:b1:a7:5b:2f:0e:d3:27:
77:dc:3d:e2:bb:7f:de:da:9a:21:60:19:eb:78:a5:
66:2b:53:7d:fa:6f:96:1b:b6:81:5b:f3:9e:f8:7a:
f3:5c:1a:58:0b:c7:d6:be:a7:49:0c:f9:45:b7:91:
30:e4:bf:e4:f1:9a:31:58:3a:75:a1:06:71:be:3a:
2a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A2:4D:7D:41:CA:C6:51:CA:23:8C:65:8F:31:AA:9F:53:6C:16:AC
X509v3 Authority Key Identifier:
keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:34:dd:75:1b:ea:24:73:e5:e3:c7:8f:27:c1:1d:96:ae:d5:
2f:85:3d:4d:78:cd:42:86:17:73:46:ba:ac:ac:64:8f:f9:4f:
85:77:f7:32:01:3e:ce:bf:aa:69:c9:2c:0b:98:21:48:e0:62:
dd:c3:c5:de:aa:92:d9:8d:83:f2:6d:b9:ba:8b:25:5a:17:ae:
77:34:cb:76:69:f5:38:3f:7f:f4:1c:d3:01:c2:79:be:c6:cf:
c5:b9:e4:60:e2:96:f0:36:5e:92:f6:89:4b:d3:00:f4:0b:6f:
a4:8a:ba:b3:85:32:44:87:b6:60:1d:c1:6f:ef:5b:5e:3b:44:
1f:8e:94:d1:39:50:a3:df:40:db:3f:31:8b:79:54:ce:fe:8c:
a2:61:d1:5f:fd:09:a8:13:39:be:62:30:70:cf:65:1f:f5:29:
67:4a:bc:5e:13:ff:bc:24:37:6d:bb:6b:48:66:95:40:bd:b4:
62:d0:49:76:2f:5f:e2:22:62:be:e7:8e:44:86:e2:e0:e2:c3:
d6:73:17:1b:f4:23:53:40:71:08:cf:30:90:6d:d4:ad:46:55:
90:ec:22:81:15:ff:1b:ba:5a:0c:d4:ac:29:ef:57:fc:6a:f5:
cc:b0:46:ef:b5:8d:7d:b5:34:5f:76:b2:9a:01:1c:c0:10:7b:
7c:41:76:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvT+xxCFioljsj1QNhyQGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMDM1MjVmNjhlYjZiMjM1ZjFkZTIyYjYwYjFiYWVkMmZj
N2ZmODMwHhcNMjYwNDE3MDAwMDMyWhcNMjYwNDE4MDAwMDMyWjAzMTEwLwYDVQQD
EyhkMWEyNGQ3ZDQxY2FjNjUxY2EyMzhjNjU4ZjMxYWE5ZjUzNmMxNmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaIXlZMCwhLBVSM7twpq2uEuefNY
T/sua1/x8LqkhinuQ8uaTwGPgePpJLuXmKIxpJLDR4DpDe/jYlsS0P2/pL/dU+cd
hhNm++JCTSeJn6VhgV7pK3YHUoPhOgdoWoJXNf2PzaHO3/z9lvSk8GV+ODvRZ6yk
iJbH8cNA9y8VckcUxWTmVptcs+eheD0RS6pfAh2PNW0JEquwSAo6pGyWkJkcG1x5
hD2ykzz70S4c/5YZit4jFbLT43J5HbGnWy8O0yd33D3iu3/e2pohYBnreKVmK1N9
+m+WG7aBW/Oe+HrzXBpYC8fWvqdJDPlFt5Ew5L/k8ZoxWDp1oQZxvjoqMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGiTX1BysZRyiOMZY8xqp9TbBasMB8GA1UdIwQY
MBaAFJoDUl9o62sjXx3iK2Cxuu0vx/+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81YTdlNDYtY2UxYi00OTU1LTlmMzkt
NGIzMTEzMjZjMjMwLzEvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81YTdlNDYtY2UxYi00OTU1LTlmMzktNGIzMTEzMjZjMjMw
LzEvbWdOU1gyanJheU5mSGVJcllMRzY3U19IXzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzTddRvq
JHPl48ePJ8Edlq7VL4U9TXjNQoYXc0a6rKxkj/lPhXf3MgE+zr+qacksC5ghSOBi
3cPF3qqS2Y2D8m25uoslWheudzTLdmn1OD9/9BzTAcJ5vsbPxbnkYOKW8DZekvaJ
S9MA9AtvpIq6s4UyRIe2YB3Bb+9bXjtEH46U0TlQo99A2z8xi3lUzv6MomHRX/0J
qBM5vmIwcM9lH/UpZ0q8XhP/vCQ3bbtrSGaVQL20YtBJdi9f4iJivueORIbi4OLD
1nMXG/QjU0BxCM8wkG3UrUZVkOwigRX/G7paDNSsKe9X/Gr1zLBG77WNfbU0X3ay
mgEcwBB7fEF2kw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:56:00 2026 by rpki-client