Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
File: MGY7W3BEIyuYmBjRLMkEkCElJN8.mft (raw, json)
Hash identifier: bwGGXeHc8VMKQeZsOPN17wJR84iN54PmP2QkPHkeSe8=
Subject key identifier: 5D:0C:C2:79:64:FA:65:4E:92:95:5F:F0:DA:36:FA:D7:7D:63:AF:DB
Authority key identifier: 30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
Certificate issuer: /CN=30663b5b7044232b989818d12cc90490212524df
Certificate serial: 019DA41C717D12977E1886BE4D149CED7542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
Manifest number: 03DC
Signing time: Sun 19 Apr 2026 05:00:20 +0000
Manifest this update: Sun 19 Apr 2026 05:00:20 +0000
Manifest next update: Mon 20 Apr 2026 05:00:20 +0000
Files and hashes: 1: MGY7W3BEIyuYmBjRLMkEkCElJN8.crl (hash: 9zS2tyeR5oNJhMRgBcFgIu7qzlECeY+91lAxWvEAX0c=)
2: gyvu9cFnJO4MAwvAgHj8LvBNP7s.roa (hash: eMyRVFCyce/Miwfnx+0dN7toaAvORgqRwSdJr9xSmK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:71:7d:12:97:7e:18:86:be:4d:14:9c:ed:75:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30663b5b7044232b989818d12cc90490212524df
Validity
Not Before: Apr 19 05:00:20 2026 GMT
Not After : Apr 20 05:00:20 2026 GMT
Subject: CN=5d0cc27964fa654e92955ff0da36fad77d63afdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7c:70:e8:15:f3:cd:62:43:6c:21:64:f1:74:
13:20:7c:58:ec:1d:50:32:86:06:94:d6:15:0a:d9:
39:79:7f:5f:1f:f3:5a:84:51:6b:22:03:5e:b1:85:
76:ae:4a:65:1e:f8:f7:78:18:34:51:0d:9c:8a:9a:
a1:a5:8c:99:b6:80:db:f7:20:31:80:01:ac:c0:ca:
83:9f:47:ee:12:07:2e:7c:03:a5:b2:64:66:97:52:
c2:62:60:63:fc:2e:ec:b1:0b:5e:30:d2:68:15:dc:
cb:0d:47:83:ee:f7:4e:63:c0:37:98:5e:17:40:f2:
04:b5:8f:8b:d8:4e:50:57:ea:d7:71:95:27:11:a9:
ca:89:e7:f3:3f:2c:0a:c2:b4:0b:df:40:a5:b1:d0:
e0:82:6f:8b:de:78:65:df:41:b2:7c:9d:1a:62:4e:
fc:10:cb:62:20:21:e5:34:61:c5:93:de:6f:17:da:
39:84:b0:13:94:19:4e:5a:05:03:83:2e:5f:91:9f:
ab:3a:de:1e:f7:a3:9f:ac:19:64:69:50:88:8a:5c:
ec:ad:f0:f6:61:17:a8:70:9e:55:2f:8f:fb:54:8a:
3c:a8:ea:12:13:66:33:2a:f9:bd:69:0c:b1:f6:c1:
92:1c:35:10:df:1f:63:73:96:be:65:37:01:30:dd:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0C:C2:79:64:FA:65:4E:92:95:5F:F0:DA:36:FA:D7:7D:63:AF:DB
X509v3 Authority Key Identifier:
keyid:30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1d:e1:06:f5:b6:33:d6:52:ed:81:b9:56:b7:00:27:af:82:
8c:c2:4d:ed:6f:a1:55:14:88:37:03:7d:ba:d7:e0:75:89:36:
33:7f:5c:7f:62:a6:c4:ab:56:19:ee:dc:d8:6b:c7:7f:d0:cb:
85:40:7e:7e:6f:80:df:8e:78:7c:3d:8b:c9:ab:8c:2c:35:52:
1c:f4:03:2c:57:2b:2c:78:cd:be:06:8e:2a:8d:11:7e:20:cb:
c6:0b:1a:3f:9c:53:74:e3:a4:6f:94:4b:b7:bf:be:0f:3a:56:
6c:fe:89:da:a5:77:66:2f:5e:86:36:30:8b:e1:f4:a4:b3:dc:
5a:6e:b7:4e:43:e4:86:03:d5:bd:b5:d3:4d:87:1b:c3:bc:a9:
df:de:9c:fd:0b:be:91:4e:d2:37:55:b2:72:d7:28:f1:bb:8c:
47:c3:1f:85:2b:ec:d7:89:89:17:2e:50:4d:f7:63:6b:2c:b1:
59:cc:a3:50:2f:8b:32:c0:6f:95:73:d7:24:52:2b:75:33:b8:
cf:73:8f:e8:99:01:ad:8f:14:46:ca:30:40:80:ef:92:19:bd:
ee:e7:ff:2e:5f:76:1e:37:3f:3f:2e:17:a8:e6:72:f6:cc:d1:
56:05:9a:d3:e8:f6:e2:cf:91:a6:01:c9:88:9f:b3:cd:8a:38:
05:d9:a0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:06:19 2026 by rpki-client