Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
File: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft (raw, json)
Hash identifier: w1Sbd9qPYMOso98kXN5X7rC6+3ADOVdZqyfpcY4c39E=
Subject key identifier: 46:7B:B3:79:FA:38:97:2E:E2:17:D9:86:85:36:C5:26:00:A7:B8:A8
Authority key identifier: 30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
Certificate issuer: /CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Certificate serial: 019DA3AEEBCC451ECB13E6F0A8291A902078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
Manifest number: 092D
Signing time: Sun 19 Apr 2026 03:00:42 +0000
Manifest this update: Sun 19 Apr 2026 03:00:42 +0000
Manifest next update: Mon 20 Apr 2026 03:00:42 +0000
Files and hashes: 1: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl (hash: +68v+hSVScp+KqDz4JZUbPG0xh27KTajYhUv052JZcY=)
2: dIqWZ2cWHiBFVvZxoBhqWpuAwmQ.roa (hash: uE7jBQ3nDWE2TUDIdFmUrQEZmjWLtoSS41WGaaBfii4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:eb:cc:45:1e:cb:13:e6:f0:a8:29:1a:90:20:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Validity
Not Before: Apr 19 03:00:42 2026 GMT
Not After : Apr 20 03:00:42 2026 GMT
Subject: CN=467bb379fa38972ee217d9868536c52600a7b8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:f3:e2:d7:e7:6a:0e:2b:cc:0b:6a:e3:51:
3a:21:dc:bf:09:3d:64:85:b0:88:85:bf:1d:d5:3a:
34:b5:78:e3:bd:4b:8e:55:98:a1:da:b0:fe:bc:7a:
37:af:27:da:80:07:62:72:c9:a9:e6:bd:05:46:30:
ec:42:f6:5c:2c:ca:f3:f0:88:9b:ea:6e:97:d5:bf:
c9:f4:ae:1a:8a:2d:5a:6b:f1:df:2b:09:15:e3:30:
72:16:b7:94:20:71:cc:7c:71:df:a6:cf:f3:11:e3:
f0:84:9b:ca:14:8e:20:98:d0:1c:dd:fb:0b:7e:f0:
c4:fd:c0:ba:11:7b:7f:68:87:03:d6:61:50:69:48:
57:7a:58:92:20:8a:47:e6:db:61:a6:cc:1c:18:7c:
a7:f6:31:d9:ba:9e:f2:a6:30:21:60:b3:2b:25:0d:
a9:4d:6b:6c:c2:cc:55:e0:5d:4e:99:01:9d:41:e4:
06:53:91:cb:f1:27:7f:ed:e5:5e:b5:ff:df:90:37:
ec:d3:97:1e:f2:07:22:0e:c5:9a:9e:1a:90:6e:d4:
62:b2:04:6b:bd:be:71:13:40:ca:86:2a:f9:9f:5e:
71:07:c5:0f:8d:db:40:37:34:6d:95:f3:6d:b3:67:
bd:74:af:99:8b:45:04:5b:88:00:a9:1d:5f:f8:cc:
19:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7B:B3:79:FA:38:97:2E:E2:17:D9:86:85:36:C5:26:00:A7:B8:A8
X509v3 Authority Key Identifier:
keyid:30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3b:20:18:de:7a:d0:fe:cf:f3:38:e4:c9:88:db:a6:42:15:
0d:f7:57:0a:c3:5f:6b:f5:fc:cb:9a:ef:fe:61:89:1d:fd:e3:
15:82:4f:be:81:e0:cc:33:1d:04:a6:c1:ca:0c:58:04:65:5f:
83:2d:62:cc:24:fa:c3:59:97:d8:cf:65:a5:a2:f1:ee:bb:7f:
d4:a2:11:ae:86:dc:34:f3:a9:a4:aa:cc:27:3d:8f:19:41:6e:
b3:0f:f9:f1:e1:3c:a6:7f:b4:ac:25:68:3e:2a:79:50:ef:69:
a3:d4:bc:24:98:d2:c5:28:6f:d8:e6:78:52:74:23:9d:84:3b:
1b:1f:d7:85:73:3a:29:b4:39:2b:1e:39:ce:fe:45:bc:0f:c9:
4c:10:24:eb:f7:a4:1d:26:9b:0c:70:92:b8:7f:61:87:67:a3:
1f:62:48:eb:65:e0:6d:04:56:f2:10:a6:e2:37:c4:04:6c:73:
b1:89:e9:65:80:56:2d:ca:2d:49:5b:41:4d:fa:33:19:a5:d5:
90:2e:b7:f5:59:22:fb:2e:be:86:b7:19:75:3e:24:9e:4a:93:
07:ae:69:ef:df:15:20:0c:78:b2:35:30:54:59:ec:95:19:7a:
18:90:95:bc:d0:9c:bd:a2:3e:d3:91:a4:b5:6b:91:30:ea:72:
85:6b:bf:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:16 2026 by rpki-client