Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
File: MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json)
Hash identifier: IbO5bzzIyfzQinIwh9g7H+yTGfZkY8zjhcZ3lAF34Z4=
Subject key identifier: 6D:53:E9:15:B4:4F:00:51:2E:F8:C0:69:82:CA:F2:6D:C3:AE:DD:DC
Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
Certificate issuer: /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Certificate serial: 019DA41CCDF849FC129976AE78D645843ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
Manifest number: 0535
Signing time: Sun 19 Apr 2026 05:00:44 +0000
Manifest this update: Sun 19 Apr 2026 05:00:44 +0000
Manifest next update: Mon 20 Apr 2026 05:00:44 +0000
Files and hashes: 1: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: Awl+WZTw7Tm5TIe+60ciMUilubwtY7ZIw/85iGwFMpg=)
2: n8zARsIOBpHO-_C7tzB3YGju7H4.roa (hash: em6ynddbBEnzvLtotX/PQZUnXz7ZD/kDDU89M7ttH+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:cd:f8:49:fc:12:99:76:ae:78:d6:45:84:3a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Validity
Not Before: Apr 19 05:00:44 2026 GMT
Not After : Apr 20 05:00:44 2026 GMT
Subject: CN=6d53e915b44f00512ef8c06982caf26dc3aedddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:ea:14:0c:7b:3f:68:2a:e9:e7:97:7a:ef:
1c:35:ae:ef:99:8c:7c:1a:db:bc:1b:9e:77:58:38:
97:6a:a9:fd:8e:fb:3c:07:05:a4:0b:67:fd:c2:b6:
31:2f:97:41:8b:65:1a:d4:1d:c7:13:41:a2:f6:5d:
63:d0:b5:bf:37:37:82:da:5e:02:4a:0c:52:4b:52:
75:16:c7:b8:0b:7a:be:f8:1a:b4:ff:5b:ea:d0:bf:
b1:89:11:eb:6b:b0:d7:cf:65:08:8e:34:2b:44:50:
b3:6f:87:a3:da:ef:63:cc:76:60:92:71:ec:7b:8c:
58:6c:7e:73:00:91:c5:02:fe:83:80:61:20:ab:c1:
87:29:63:86:e7:a1:58:21:00:bd:84:67:fc:53:1d:
90:6d:2c:29:e0:29:fd:8e:6d:99:7e:3a:7d:ee:1e:
5e:14:8e:f4:67:38:bc:e7:84:9b:09:37:8e:03:12:
4a:bc:77:ee:c1:38:61:60:50:52:65:01:6d:e5:25:
25:e6:6a:0f:60:03:c6:17:99:8c:5a:5c:d1:a1:a7:
ec:cf:67:c7:78:56:64:a7:aa:ea:3a:8c:1f:14:e4:
75:3a:ca:c1:e7:22:b1:73:66:9b:ba:9f:64:9a:20:
35:24:83:4e:88:88:07:a5:6e:4f:af:59:da:7d:a8:
1b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:53:E9:15:B4:4F:00:51:2E:F8:C0:69:82:CA:F2:6D:C3:AE:DD:DC
X509v3 Authority Key Identifier:
keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:76:72:c3:1b:d8:61:ba:5f:e7:c6:12:f4:34:dc:fc:26:96:
f2:df:c5:e5:ec:a7:63:54:bc:07:85:a1:38:57:21:77:17:00:
7d:9a:87:0a:2f:74:a5:04:9d:a0:38:87:6f:13:f7:60:f1:34:
f2:d3:9b:46:9f:84:e3:cf:f1:cf:f9:3e:78:5c:cd:74:b2:ae:
23:18:c5:b2:5b:9a:20:37:15:e5:79:69:cc:2a:cd:5f:ee:01:
c8:e1:a9:76:09:a3:04:07:2a:07:5f:c2:a1:30:11:44:e4:71:
b4:a0:a3:58:bc:d0:a6:9e:62:27:d3:d0:77:16:b0:dd:cc:68:
5e:18:65:fb:21:c9:44:31:ef:6e:3b:d2:0e:49:0b:10:a1:79:
d9:6f:f0:82:ba:2e:1e:71:c9:9f:bb:82:56:d4:07:92:21:9e:
79:ca:bb:12:d4:f8:c3:a4:d8:b3:64:5c:e6:68:fc:c4:c0:7c:
fa:54:44:a9:dc:ae:18:f0:f2:3d:11:9a:c8:7f:e7:c3:35:d1:
3b:f1:5f:5a:26:bd:8c:dc:63:23:e2:33:90:15:29:1b:d3:06:
b4:d7:83:6f:ec:6e:d7:16:68:b8:06:83:ff:d6:da:7a:47:4c:
ce:3c:02:5e:09:3a:8b:f7:be:89:5c:3e:e4:dc:8f:f7:48:de:
51:d9:08:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:24 2026 by rpki-client