Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
File: MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json)
Hash identifier: YyycA+CCf6ela5l/VChZQw3G0W3ozyMEcAaqx4mDkFk=
Subject key identifier: 27:D8:A8:9C:67:8C:66:CD:A6:0B:3A:30:44:40:65:68:B0:11:9F:50
Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
Certificate issuer: /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Certificate serial: 019CACEBA59D64A9C7487BCF13E17DB18134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
Manifest number: 04B5
Signing time: Mon 02 Mar 2026 05:00:50 +0000
Manifest this update: Mon 02 Mar 2026 05:00:50 +0000
Manifest next update: Tue 03 Mar 2026 05:00:50 +0000
Files and hashes: 1: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: 4PVXiqEivMQUGuuURt3E4JITkD/gCT5WnxLvTIx/UUc=)
2: n8zARsIOBpHO-_C7tzB3YGju7H4.roa (hash: em6ynddbBEnzvLtotX/PQZUnXz7ZD/kDDU89M7ttH+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:a5:9d:64:a9:c7:48:7b:cf:13:e1:7d:b1:81:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Validity
Not Before: Mar 2 05:00:50 2026 GMT
Not After : Mar 3 05:00:50 2026 GMT
Subject: CN=27d8a89c678c66cda60b3a3044406568b0119f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:a4:75:ae:67:3a:d3:bb:42:5b:8b:9f:94:
1e:a8:e1:73:34:35:9a:1d:03:18:4b:ed:0a:72:6c:
5d:8d:86:8b:33:a8:86:bb:6a:e0:33:68:8b:7f:33:
4a:0f:6a:73:5c:3b:54:b0:81:e4:b2:f1:47:16:c5:
5f:6e:c0:e8:b6:df:f1:81:c4:e0:73:ec:44:50:98:
53:60:86:91:7f:57:32:10:aa:d4:2b:44:37:e0:35:
47:5f:86:69:e0:36:89:a2:5c:86:32:16:93:f8:71:
18:30:cc:93:b5:f1:30:c9:1e:c2:87:0c:73:e0:bd:
94:a4:5f:89:b9:7f:ce:e6:7d:6c:ad:77:70:1c:23:
03:4f:63:61:7d:eb:34:33:7f:2c:2f:72:41:30:76:
dd:04:3c:8a:55:94:04:48:ea:40:af:3f:c2:bd:d2:
67:2e:d0:41:b0:54:f0:fc:82:43:8a:fb:bf:0c:54:
dd:fa:05:87:b8:67:21:be:0a:1e:6b:b4:07:77:44:
f0:e7:08:09:8c:04:31:dc:af:32:39:91:d7:5c:51:
03:e4:50:f2:57:8b:06:e7:03:9a:f5:9c:5a:bd:82:
0e:15:1c:87:c6:a9:2e:69:68:b4:20:f6:05:eb:5e:
c4:89:62:7c:3d:58:e0:e1:e3:94:38:35:c5:34:f5:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D8:A8:9C:67:8C:66:CD:A6:0B:3A:30:44:40:65:68:B0:11:9F:50
X509v3 Authority Key Identifier:
keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f7:69:2b:3b:c4:f6:b5:d0:34:22:85:8d:3a:a5:17:11:f2:
8b:ed:60:cf:b9:5e:f3:b6:1d:49:b0:ab:cd:04:47:2a:06:37:
d7:48:20:d3:6b:52:c0:3e:ac:1d:5d:d2:cc:e2:70:72:e5:71:
6a:71:19:11:98:4c:0e:aa:9b:94:d5:5d:38:c0:ab:00:ac:77:
8f:39:a5:99:b2:e9:a1:a1:b9:60:68:02:8b:52:a5:92:85:b2:
3c:ce:5b:96:b0:da:92:76:c6:41:52:e5:03:af:11:5c:b5:69:
06:6a:90:57:16:88:6c:b7:56:5e:93:a0:cc:e9:48:0a:f4:71:
cf:95:11:05:6d:ea:01:0f:e0:af:5d:8b:32:24:9f:ee:96:60:
43:70:82:34:bb:98:7e:4c:84:59:d5:c7:e6:f9:e4:3a:46:06:
0b:b8:6e:88:f8:34:6d:4b:e2:14:2d:cb:fb:2e:4a:71:e2:e8:
f3:87:45:b7:4f:06:5b:61:63:72:ad:d6:6d:b3:54:9b:0d:12:
56:db:22:1c:84:90:c1:f1:31:d1:4c:14:ac:03:40:68:94:ef:
cb:a0:73:cd:1a:25:98:3a:a1:3b:ce:64:60:77:78:01:9c:f7:
ca:07:1c:bc:51:78:46:59:c1:f7:70:3a:7c:a4:f8:4d:22:ac:
40:dd:64:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:16:01 2026 by rpki-client