Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
File: MJAbMGF-hmq8nOULrb6IRl048Dc.mft (raw, json)
Hash identifier: ufi+Tj9bK6agDh2CnGZV2gFKCmZDl42ENXCgnFdk6A8=
Subject key identifier: 40:42:91:AB:86:DC:B6:56:11:29:74:F4:CB:68:CB:61:64:7C:77:43
Authority key identifier: 30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
Certificate issuer: /CN=30901b30617e866abc9ce50badbe88465d38f037
Certificate serial: 019CAAC703E9E729424B9C77ECD1B725E97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
Manifest number: 06E5
Signing time: Sun 01 Mar 2026 19:01:35 +0000
Manifest this update: Sun 01 Mar 2026 19:01:35 +0000
Manifest next update: Mon 02 Mar 2026 19:01:35 +0000
Files and hashes: 1: AhPIKJoDQdgLjGET1BK2dVVDQqc.roa (hash: Q3fb64kGjsH794Do1VZTcE4nKENu+RgVJiY4SIL8Ab0=)
2: MJAbMGF-hmq8nOULrb6IRl048Dc.crl (hash: PIOxvMRKUlxqKBwO4hP6HFq1+E5UEkHaK/dQ+TaJVwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:03:e9:e7:29:42:4b:9c:77:ec:d1:b7:25:e9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30901b30617e866abc9ce50badbe88465d38f037
Validity
Not Before: Mar 1 19:01:35 2026 GMT
Not After : Mar 2 19:01:35 2026 GMT
Subject: CN=404291ab86dcb656112974f4cb68cb61647c7743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:21:11:f3:56:fd:89:ce:97:fe:3d:a8:17:
d5:ee:c9:d9:2d:7e:da:44:eb:1f:74:0e:99:8d:78:
1f:be:cf:25:39:c4:56:a4:12:f8:af:97:e6:71:64:
e8:80:c3:63:d7:55:b2:c2:15:32:43:84:5f:02:8f:
e5:b3:73:da:dc:c5:81:62:12:a2:35:29:90:91:06:
28:a1:23:a7:d9:08:2e:f3:db:ea:7d:b6:90:79:79:
da:ae:6a:eb:73:ca:22:e7:b7:9f:fc:54:3d:33:b8:
e5:49:7b:8c:d1:2d:86:29:13:a7:ad:4f:fd:c1:d6:
21:c4:39:2f:06:d7:ed:ea:a3:af:44:92:d4:e0:1a:
5a:60:df:a6:d2:74:c1:dc:2e:2c:0f:58:fe:24:2b:
86:cc:83:ba:3f:11:c2:e7:53:31:7f:f1:90:23:d9:
ce:ba:27:30:41:7d:7b:03:93:90:93:c4:11:5c:7a:
f8:1f:15:a2:b9:ef:9f:dc:d8:8a:76:a2:65:62:ba:
47:d1:c9:61:f3:94:e4:9e:0c:53:a3:c4:78:55:a7:
f1:f7:76:8e:1d:dd:74:c7:e0:42:2c:e2:47:f5:3b:
8c:5d:0e:8c:22:2f:13:d4:80:fd:26:d0:0b:e3:69:
e0:c5:89:2c:8b:73:7d:af:73:4c:46:77:07:d0:cf:
b5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:42:91:AB:86:DC:B6:56:11:29:74:F4:CB:68:CB:61:64:7C:77:43
X509v3 Authority Key Identifier:
keyid:30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:83:9f:fb:88:40:4e:64:8a:b3:8c:51:a4:31:d0:ca:c2:6c:
c6:09:d9:9c:22:a4:d8:fc:7c:ab:d0:7d:ef:df:77:3d:06:39:
12:51:2b:0e:c6:bb:cd:5a:ac:c8:40:74:03:22:08:a0:67:39:
8e:7a:62:88:12:3b:3c:17:e4:5f:bd:4d:0a:73:e7:74:78:e3:
f2:79:f7:31:1e:06:c2:f8:f5:d5:ec:20:e5:c4:b1:67:e3:86:
b0:09:c1:53:77:06:57:04:83:5e:5e:00:3f:7b:3e:ae:7d:4d:
55:6f:90:65:d2:f3:c3:b6:56:40:9b:07:b8:99:76:5c:6f:e0:
6a:6c:1b:85:3c:ba:c0:f8:8f:69:92:b6:0d:48:a0:97:72:3d:
87:c1:02:8f:52:46:ea:00:10:c6:a2:43:95:7f:41:83:e6:79:
b5:15:bf:0a:0a:16:bd:ef:2f:5d:ea:44:fd:fe:9f:53:9c:7e:
d0:7a:d6:f6:f1:c3:64:ae:dd:ae:e6:8e:46:a7:9d:39:b2:1a:
a2:84:5f:17:f3:c5:f3:a9:bc:d0:23:10:3e:86:19:e9:fc:75:
f0:09:f2:a5:20:43:dd:52:c2:94:bc:25:14:29:d5:7f:5d:3b:
48:50:1e:5c:0d:30:85:2e:e1:6d:0e:f5:c7:27:0f:f0:f1:9a:
0a:8f:10:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:10 2026 by rpki-client