Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft
File: MGHmFV4_NfiOa0TNNV5uk26SGmw.mft (raw, json)
Hash identifier: rNYat2r+QE575Xk1YJHoONh9UDDrgNqq86DS+9k+00E=
Subject key identifier: 47:10:14:38:EF:2E:02:BA:75:49:9F:5D:2B:D2:99:A3:2B:38:E4:E3
Authority key identifier: 30:61:E6:15:5E:3F:35:F8:8E:6B:44:CD:35:5E:6E:93:6E:92:1A:6C
Certificate issuer: /CN=3061e6155e3f35f88e6b44cd355e6e936e921a6c
Certificate serial: 019CAFB60873C6D460D11B16B2E0AD4BAEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft
Manifest number: 0119
Signing time: Mon 02 Mar 2026 18:01:08 +0000
Manifest this update: Mon 02 Mar 2026 18:01:08 +0000
Manifest next update: Tue 03 Mar 2026 18:01:08 +0000
Files and hashes: 1: MGHmFV4_NfiOa0TNNV5uk26SGmw.crl (hash: 2O91SAoipPB/toQ/yH5DCwIbZEkRmLuaq8DTnghAKlo=)
2: O654y5p4Qf5vqt0PN2xJcmyF0Og.roa (hash: KRIvPR/2+jDrBziPo6SVSyDtCM7Okqo4BaF0x5mxhnE=)
3: ro1Jcp2lxC4NOVFabgqftamKm9c.roa (hash: pPjbit7yUoBryRtekoI8dZ+LsQVJcINu/p0DoPay2ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:08:73:c6:d4:60:d1:1b:16:b2:e0:ad:4b:ae:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3061e6155e3f35f88e6b44cd355e6e936e921a6c
Validity
Not Before: Mar 2 18:01:08 2026 GMT
Not After : Mar 3 18:01:08 2026 GMT
Subject: CN=47101438ef2e02ba75499f5d2bd299a32b38e4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fe:bd:8c:fb:25:bc:1a:d3:15:4c:0c:f9:a2:
90:26:71:43:18:e6:4b:c4:c5:e4:94:c2:6a:15:92:
94:99:67:f0:d3:53:ce:0d:5c:37:cc:48:53:8d:4e:
7d:4a:ec:67:08:e3:b5:09:13:3f:26:a9:6b:60:ee:
44:2c:db:2c:2b:43:33:86:89:cc:74:25:45:ff:9c:
51:a6:f7:9a:22:29:9c:0f:7f:2f:68:27:3a:b0:5f:
f4:12:d6:08:89:65:27:20:c3:85:80:b0:ef:75:ae:
a5:46:6e:71:37:b9:3f:10:f8:1a:a0:16:bc:29:21:
8d:46:c5:07:b9:12:63:4c:e7:c0:85:c3:60:d7:c5:
b4:59:84:9c:b6:30:22:d4:e8:f8:84:0c:1c:d1:42:
82:8c:2d:c3:d2:b2:56:11:e2:4d:a3:e0:92:10:e8:
bc:a1:32:e3:f2:7b:e0:81:63:c6:96:91:03:84:ed:
68:0b:25:bd:c0:52:e9:bc:08:a0:ea:42:6c:9b:5c:
31:50:f4:17:f5:72:cc:d7:ee:68:a0:73:e3:f0:7c:
ab:db:45:73:f5:bc:8f:06:04:82:a4:8b:02:6d:c0:
13:8b:b5:8a:c2:33:4c:d5:8d:f0:e7:04:cb:9c:53:
e3:2a:1c:4a:e7:9d:2c:05:c5:b0:37:3f:bc:5f:b2:
4c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:10:14:38:EF:2E:02:BA:75:49:9F:5D:2B:D2:99:A3:2B:38:E4:E3
X509v3 Authority Key Identifier:
keyid:30:61:E6:15:5E:3F:35:F8:8E:6B:44:CD:35:5E:6E:93:6E:92:1A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:96:d2:e9:8e:38:ef:b3:f0:af:30:db:59:f5:fa:fc:93:4f:
a6:15:58:99:4e:27:8e:e4:99:e0:e4:56:87:0a:87:1b:89:06:
a7:38:43:fa:e4:03:af:1c:8d:41:21:4c:b1:a3:ae:ad:6c:ee:
c7:24:5c:74:d8:8c:05:3c:5c:6f:fb:1e:15:02:e7:3f:7b:3d:
4b:dd:4f:51:f5:07:91:8d:0b:8c:f8:22:07:f8:ac:e8:4c:49:
7b:94:6b:e2:4a:9c:2a:c9:2f:1a:d5:a2:09:d7:be:2f:08:f6:
13:e3:f5:5a:26:0a:88:8f:8a:aa:fe:37:6c:1a:a4:b6:b1:44:
2a:be:7e:fa:95:59:38:76:5f:a1:8f:ae:d3:e3:1a:c4:e3:16:
fd:9d:ed:02:13:1d:b6:bc:c9:cc:00:1f:ef:6a:10:67:b5:05:
e1:4f:fd:a4:5f:6d:66:3e:92:ef:30:9b:77:88:8e:af:6f:77:
77:3b:db:60:26:3f:8b:66:75:c0:33:87:4c:51:93:33:82:2a:
33:44:89:36:13:45:ae:87:61:40:37:da:bc:55:7e:5e:9c:d9:
61:9c:e0:9c:f3:59:09:95:39:66:95:f6:73:7a:a8:60:a4:49:
ef:d8:5e:77:b3:84:71:03:6f:72:12:9c:0d:93:42:b5:5c:41:
96:36:a1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:03 2026 by rpki-client