Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
File: MgOPanu3dwpyrnANMbagCoHujbs.mft (raw, json)
Hash identifier: IsuNmSPsp1JL5wtqo3CTSeTqj5+swxyn8KDr62cG1wI=
Subject key identifier: 95:BC:87:8A:47:22:79:E7:7F:9B:41:F4:2D:04:CA:09:C2:6C:85:9F
Authority key identifier: 32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB
Certificate issuer: /CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb
Certificate serial: 019D98F51C2757DC2343A68BF49A0BA52E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
Manifest number: 0EAA
Signing time: Fri 17 Apr 2026 01:01:33 +0000
Manifest this update: Fri 17 Apr 2026 01:01:33 +0000
Manifest next update: Sat 18 Apr 2026 01:01:33 +0000
Files and hashes: 1: MgOPanu3dwpyrnANMbagCoHujbs.crl (hash: UshktN4fCGrfFaK/1smyGow9s5ioyoax5EZ9OW/V0SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:1c:27:57:dc:23:43:a6:8b:f4:9a:0b:a5:2e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32038f6a7bb7770a72ae700d31b6a00a81ee8dbb
Validity
Not Before: Apr 17 01:01:33 2026 GMT
Not After : Apr 18 01:01:33 2026 GMT
Subject: CN=95bc878a472279e77f9b41f42d04ca09c26c859f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:25:1a:e6:b6:b2:94:ee:84:07:c5:d0:48:
53:88:06:61:97:d3:d6:56:23:ec:c7:15:c6:21:2c:
34:f0:c4:7d:d6:45:98:c3:52:c1:16:5a:a9:7b:c6:
44:e5:dc:53:64:87:28:75:d8:e8:b0:31:87:5f:9a:
7d:9b:78:87:39:ed:52:0f:ad:05:ba:18:42:f4:54:
71:bd:d2:a3:34:c1:e9:5b:6b:37:35:6f:67:2c:e7:
e3:c7:16:75:bc:d4:11:3e:b6:fe:f8:08:0d:4b:d6:
53:8d:08:11:70:dd:fa:fa:9c:f1:49:4a:53:13:75:
68:0f:3f:96:06:f3:bf:76:3c:92:36:71:3c:e8:7e:
ed:80:80:f3:93:96:d2:f7:00:58:49:4f:3b:c8:eb:
06:db:f8:b7:f5:dd:f8:b9:e3:14:a3:78:66:b5:da:
92:e5:94:db:20:4f:53:10:36:48:d2:1b:25:1a:60:
53:88:9b:c1:ca:14:99:1d:fa:67:25:5b:d7:d8:d3:
f2:b6:82:17:85:0f:96:ce:2a:71:b4:5c:90:41:2d:
76:48:c7:d4:fc:5f:65:1f:2e:a2:cb:38:ab:e7:6b:
e6:4c:b8:42:6c:a3:54:91:ae:63:d3:9d:a0:e4:37:
65:3c:71:5a:da:ae:dc:bd:a1:bd:d0:aa:4b:5d:98:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BC:87:8A:47:22:79:E7:7F:9B:41:F4:2D:04:CA:09:C2:6C:85:9F
X509v3 Authority Key Identifier:
keyid:32:03:8F:6A:7B:B7:77:0A:72:AE:70:0D:31:B6:A0:0A:81:EE:8D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgOPanu3dwpyrnANMbagCoHujbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0beb2-c576-4e8d-b148-d79508e16869/1/MgOPanu3dwpyrnANMbagCoHujbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:33:a4:bd:cb:e2:4e:12:94:3a:bb:e8:51:0a:35:36:97:7c:
04:ff:9d:ca:8f:ec:3c:2a:91:4f:e0:0f:46:fb:da:d0:a9:17:
f3:83:78:d3:1d:70:f8:33:7e:a8:35:41:ad:39:bf:69:c9:10:
cf:06:86:f5:44:78:cc:ea:29:ca:e0:f3:1f:9a:29:c8:c7:d7:
0d:0a:31:7e:24:df:06:c8:8a:d4:6c:0f:26:fa:67:87:f5:01:
55:c0:30:dc:c0:c6:f4:b0:2a:a8:b9:6c:8d:2c:41:20:94:90:
6e:f0:49:f7:8e:da:da:30:87:26:52:72:79:db:65:17:d7:e5:
1c:41:87:1d:a5:b2:94:a9:15:af:38:d6:c0:32:c4:5b:05:6d:
f4:d2:f1:14:b6:90:f8:74:5d:91:e1:cd:cd:43:d9:4a:8c:0a:
88:1d:f8:bc:2d:e7:28:5a:59:19:09:22:0f:b2:1e:d2:54:3a:
90:73:0b:df:3d:08:5b:b4:b6:44:b2:d7:0b:fd:6e:f8:e8:6c:
fe:ae:be:59:88:fd:9d:18:4c:c3:8e:6c:fa:dd:5b:66:64:9d:
3d:fe:73:d4:d6:70:10:0d:fe:94:c2:ca:21:18:ce:17:95:24:
81:68:47:3a:06:cd:c3:54:7b:18:cd:fd:2d:28:e4:cf:9f:a7:
f9:ac:7e:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9RwnV9wjQ6aL9JoLpS5QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDM4ZjZhN2JiNzc3MGE3MmFlNzAwZDMxYjZhMDBhODFl
ZThkYmIwHhcNMjYwNDE3MDEwMTMzWhcNMjYwNDE4MDEwMTMzWjAzMTEwLwYDVQQD
Eyg5NWJjODc4YTQ3MjI3OWU3N2Y5YjQxZjQyZDA0Y2EwOWMyNmM4NTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGUlGua2spTuhAfF0EhTiAZhl9PW
ViPsxxXGISw08MR91kWYw1LBFlqpe8ZE5dxTZIcoddjosDGHX5p9m3iHOe1SD60F
uhhC9FRxvdKjNMHpW2s3NW9nLOfjxxZ1vNQRPrb++AgNS9ZTjQgRcN36+pzxSUpT
E3VoDz+WBvO/djySNnE86H7tgIDzk5bS9wBYSU87yOsG2/i39d34ueMUo3hmtdqS
5ZTbIE9TEDZI0hslGmBTiJvByhSZHfpnJVvX2NPytoIXhQ+WzipxtFyQQS12SMfU
/F9lHy6iyzir52vmTLhCbKNUka5j052g5DdlPHFa2q7cvaG90KpLXZg21QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJW8h4pHInnnf5tB9C0EygnCbIWfMB8GA1UdIwQY
MBaAFDIDj2p7t3cKcq5wDTG2oAqB7o27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdPUGFudTNkd3B5cm5BTk1iYWdDb0h1amJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kMGJlYjItYzU3Ni00ZThkLWIxNDgt
ZDc5NTA4ZTE2ODY5LzEvTWdPUGFudTNkd3B5cm5BTk1iYWdDb0h1amJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kMGJlYjItYzU3Ni00ZThkLWIxNDgtZDc5NTA4ZTE2ODY5
LzEvTWdPUGFudTNkd3B5cm5BTk1iYWdDb0h1amJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjOkvcvi
ThKUOrvoUQo1Npd8BP+dyo/sPCqRT+APRvva0KkX84N40x1w+DN+qDVBrTm/ackQ
zwaG9UR4zOopyuDzH5opyMfXDQoxfiTfBsiK1GwPJvpnh/UBVcAw3MDG9LAqqLls
jSxBIJSQbvBJ947a2jCHJlJyedtlF9flHEGHHaWylKkVrzjWwDLEWwVt9NLxFLaQ
+HRdkeHNzUPZSowKiB34vC3nKFpZGQkiD7Ie0lQ6kHML3z0IW7S2RLLXC/1u+Ohs
/q6+WYj9nRhMw45s+t1bZmSdPf5z1NZwEA3+lMLKIRjOF5UkgWhHOgbNw1R7GM39
LSjkz5+n+ax+mA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:43:21 2026 by rpki-client