Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft
File: MGHmFV4_NfiOa0TNNV5uk26SGmw.mft (raw, json)
Hash identifier: 1WNt9Xvr37owWTywAHdvMfwXnrbaJW5ThLft6VtjcD0=
Subject key identifier: C1:FC:A3:91:38:71:CE:C0:B3:9E:D9:E7:0D:4F:60:09:C2:75:1F:B1
Authority key identifier: 30:61:E6:15:5E:3F:35:F8:8E:6B:44:CD:35:5E:6E:93:6E:92:1A:6C
Certificate issuer: /CN=3061e6155e3f35f88e6b44cd355e6e936e921a6c
Certificate serial: 019D9D3F14AB986CA6FFC1FF7257489D630E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft
Manifest number: 0194
Signing time: Fri 17 Apr 2026 21:00:50 +0000
Manifest this update: Fri 17 Apr 2026 21:00:50 +0000
Manifest next update: Sat 18 Apr 2026 21:00:50 +0000
Files and hashes: 1: MGHmFV4_NfiOa0TNNV5uk26SGmw.crl (hash: TIvB9LQ4ql3k+Md5IkaKb3DItvn9CnHMj34qdRBDOQA=)
2: O654y5p4Qf5vqt0PN2xJcmyF0Og.roa (hash: KRIvPR/2+jDrBziPo6SVSyDtCM7Okqo4BaF0x5mxhnE=)
3: ro1Jcp2lxC4NOVFabgqftamKm9c.roa (hash: pPjbit7yUoBryRtekoI8dZ+LsQVJcINu/p0DoPay2ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:14:ab:98:6c:a6:ff:c1:ff:72:57:48:9d:63:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3061e6155e3f35f88e6b44cd355e6e936e921a6c
Validity
Not Before: Apr 17 21:00:50 2026 GMT
Not After : Apr 18 21:00:50 2026 GMT
Subject: CN=c1fca3913871cec0b39ed9e70d4f6009c2751fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:aa:6b:dd:25:c5:50:8b:32:4c:7e:7c:c7:
f3:c9:9a:12:19:70:ca:e0:28:a2:07:c3:f2:83:2a:
7b:9b:26:9d:f7:d0:06:f5:f9:bb:19:17:68:d3:18:
50:d3:7d:13:6f:04:1f:e4:47:f5:2c:01:d1:4b:81:
d8:68:e4:78:b5:d2:7c:3f:a5:bd:07:e6:a7:40:f2:
a3:68:2b:4c:26:7a:76:13:5f:3a:f3:7d:9b:cf:2a:
cb:83:62:29:a8:21:d8:93:80:5a:33:1e:c7:74:ab:
9e:f6:3e:70:c7:33:b9:33:d6:28:e7:31:df:31:03:
44:bd:ea:fa:4c:43:2c:20:4a:b5:2d:60:c7:ca:f3:
47:ea:5d:4f:25:d1:2e:0c:13:1c:5e:24:90:ac:2a:
41:48:9c:ba:c4:f4:a3:f1:b1:73:15:58:5a:63:11:
6e:a9:9a:b5:c9:1e:23:1b:50:cd:ef:bc:b1:26:55:
a5:38:14:f2:5b:53:3e:18:83:42:44:41:57:71:6b:
91:be:89:51:6b:f9:3d:ad:fb:d2:95:36:35:54:52:
05:3d:50:98:00:44:49:a0:9c:8f:ad:52:95:fd:72:
20:67:98:03:11:29:a7:20:ed:a4:cd:b2:24:70:9a:
32:64:e5:34:57:21:fa:91:f2:33:20:bf:e8:a0:e5:
21:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FC:A3:91:38:71:CE:C0:B3:9E:D9:E7:0D:4F:60:09:C2:75:1F:B1
X509v3 Authority Key Identifier:
keyid:30:61:E6:15:5E:3F:35:F8:8E:6B:44:CD:35:5E:6E:93:6E:92:1A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:98:54:e1:1c:8d:60:59:06:30:19:6a:d4:f1:79:cc:49:50:
6b:6f:31:ef:b3:45:b9:2c:55:7f:e0:bc:63:01:6a:24:f5:cc:
96:ad:eb:89:57:c5:64:40:33:55:29:74:7e:ff:3a:c8:84:ee:
3c:33:8e:9b:e9:d9:d0:0b:a4:e6:41:2c:47:94:25:14:72:02:
63:9f:4f:ca:ae:8a:41:9f:7e:5a:9e:e3:f4:cf:09:61:7a:21:
99:57:56:3b:e6:21:b7:6b:95:b1:1b:af:c9:4d:1b:ed:56:6e:
56:94:08:4f:1b:8b:eb:06:a7:9d:15:b8:80:8b:b6:a3:b7:0d:
e0:80:65:6a:5c:a8:91:a0:e3:92:ac:70:bd:3e:3c:cf:53:f8:
f9:b2:a2:79:94:24:8d:31:d4:eb:ad:06:0c:c8:52:65:33:44:
39:4a:4c:be:7e:22:cd:56:ad:c1:ab:51:9c:8d:53:d9:d2:c9:
7d:61:e7:d3:89:dc:ac:3f:2c:8f:be:86:7c:47:d7:e8:e1:e6:
ea:a8:55:40:ed:e6:a3:0a:08:02:fd:02:99:70:be:5d:f0:71:
39:25:ed:38:97:c5:7f:43:e6:b6:c8:f5:45:48:32:eb:13:47:
5c:5f:ba:94:83:df:d9:3a:79:3c:cd:0e:68:f3:1e:9f:7c:f5:
f9:55:bc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:37:18 2026 by rpki-client