Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
File: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft (raw, json)
Hash identifier: qWaoDe92BTmPknwqr+ezTkNmPwbhvw1mQEIhuoB4W+k=
Subject key identifier: 23:15:B0:1C:93:A7:AF:12:DF:84:A8:3B:7B:1E:16:E5:D2:86:85:08
Authority key identifier: 30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
Certificate issuer: /CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Certificate serial: 019CAC7E189F2251D7B3960C00BF0DC7524F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
Manifest number: 08AD
Signing time: Mon 02 Mar 2026 03:01:10 +0000
Manifest this update: Mon 02 Mar 2026 03:01:10 +0000
Manifest next update: Tue 03 Mar 2026 03:01:10 +0000
Files and hashes: 1: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl (hash: 47OpZgPkrfIOPQRyymNlIkk4TPI/KbuNKqe4NtMVNpQ=)
2: dIqWZ2cWHiBFVvZxoBhqWpuAwmQ.roa (hash: uE7jBQ3nDWE2TUDIdFmUrQEZmjWLtoSS41WGaaBfii4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:18:9f:22:51:d7:b3:96:0c:00:bf:0d:c7:52:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Validity
Not Before: Mar 2 03:01:10 2026 GMT
Not After : Mar 3 03:01:10 2026 GMT
Subject: CN=2315b01c93a7af12df84a83b7b1e16e5d2868508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:95:21:be:b4:9e:12:05:89:b9:a3:fe:3e:00:
20:a5:3c:4a:96:c1:cd:3c:46:7c:96:26:74:68:55:
e0:ed:cb:47:a9:7e:e7:ff:5b:fb:0f:76:b2:42:af:
90:21:2f:55:2a:12:ba:78:ce:a8:ee:99:0a:6f:5f:
91:3e:3f:f5:33:83:b4:87:af:4a:00:0f:74:86:c8:
ab:c5:10:a0:81:66:15:a8:14:cb:59:44:7e:a7:28:
bb:7c:11:f6:af:21:8f:ca:36:81:2a:90:2d:02:6c:
bd:ed:58:58:32:b0:83:08:0b:e2:9d:2d:37:9b:33:
87:99:9e:bd:b3:d8:3a:94:60:a4:20:52:cb:f6:ce:
9e:db:7b:00:2a:dc:0e:61:ce:76:4c:40:55:c7:a5:
67:c1:76:f7:1b:f1:2b:b7:d6:c4:5a:42:d6:c2:85:
35:42:ac:29:a8:8d:43:cb:cb:b4:f5:bc:94:0a:46:
8d:80:75:b2:3f:5b:47:fb:01:56:62:6f:af:27:bc:
f6:53:98:2e:53:cd:44:ed:d6:5b:04:18:e6:2e:d6:
92:be:f9:c4:ad:41:4c:c9:f9:30:4d:0f:dc:2f:c9:
79:76:2d:0d:54:f6:57:31:6d:da:27:d0:13:00:78:
e3:8d:17:68:5c:c2:74:70:bd:67:6d:c3:0a:f7:87:
4b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:15:B0:1C:93:A7:AF:12:DF:84:A8:3B:7B:1E:16:E5:D2:86:85:08
X509v3 Authority Key Identifier:
keyid:30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:01:2d:67:ba:c3:c9:d2:2c:10:06:99:40:bb:5f:6a:f4:c4:
61:c2:fb:8a:46:16:4f:c0:ec:30:93:0a:70:e0:dd:1f:14:1d:
49:14:9f:b4:0b:a6:03:2e:00:d3:db:13:7a:c5:74:52:b9:27:
ff:01:3d:9a:8c:70:01:2d:39:3e:26:1e:b2:ba:d0:b2:9e:e4:
d0:90:72:14:b0:9e:63:d5:76:e4:48:b3:c4:93:a0:68:3b:eb:
ef:ef:2b:ef:07:27:45:26:65:a5:04:ec:36:b9:c8:c4:de:13:
ca:ba:52:3f:41:dd:b3:64:f2:87:cb:b3:e2:93:30:b4:6c:ca:
41:9c:ad:9a:23:58:0c:cc:c3:94:34:7e:15:a5:4d:26:33:bd:
6e:67:5e:0e:0d:7e:2c:e0:c6:a7:ba:20:42:56:1b:88:6b:c9:
fa:f4:1c:ba:75:63:a1:68:a7:26:64:4a:3c:1d:d1:54:51:16:
a6:41:56:69:a6:78:f4:f1:96:40:13:8d:ca:5a:c3:db:64:84:
0f:46:13:77:7d:59:be:2c:63:ee:db:89:f7:9d:54:11:f0:fa:
51:cd:b7:d9:39:33:02:01:46:fb:20:c3:56:99:c7:55:ae:75:
96:17:92:15:5c:5c:ef:f5:f8:5f:5d:a0:04:9b:b8:e6:ff:cb:
76:b3:fd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:31 2026 by rpki-client