Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/488792-37b6-4877-ad9e-6b7703b6d389/1/Mgzf4WTS55w6aI4DwQdebwbpy0w.mft
File: Mgzf4WTS55w6aI4DwQdebwbpy0w.mft (raw, json)
Hash identifier: wuKEi8WaPx3hCzYP/zTNK30+DCpDwgkTA4irFWunbxc=
Subject key identifier: 5E:85:BA:EB:D1:36:6F:51:97:B3:0A:2C:F2:B8:F8:C1:67:0B:BE:C4
Authority key identifier: 32:0C:DF:E1:64:D2:E7:9C:3A:68:8E:03:C1:07:5E:6F:06:E9:CB:4C
Certificate issuer: /CN=320cdfe164d2e79c3a688e03c1075e6f06e9cb4c
Certificate serial: 01A17DE1ADE30880C477D71776AEFD821B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgzf4WTS55w6aI4DwQdebwbpy0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/488792-37b6-4877-ad9e-6b7703b6d389/1/Mgzf4WTS55w6aI4DwQdebwbpy0w.mft
Manifest number: 6C
Signing time: Tue 27 Oct 2026 15:01:44 +0000
Manifest this update: Tue 27 Oct 2026 15:01:44 +0000
Manifest next update: Wed 28 Oct 2026 15:01:44 +0000
Files and hashes: 1: Mgzf4WTS55w6aI4DwQdebwbpy0w.crl (hash: fuPwoUulyvOteJ+C+NRYFoqgPMY9FAvtv8/BJO7A69o=)
2: zlkYlNw0T-tzjjfAEXz5T13JQ6I.roa (hash: m4NNNToMR65yNmoLx4cGJCUaxPOQmHV/g6ORMVnnWqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/488792-37b6-4877-ad9e-6b7703b6d389/1/Mgzf4WTS55w6aI4DwQdebwbpy0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/488792-37b6-4877-ad9e-6b7703b6d389/1/Mgzf4WTS55w6aI4DwQdebwbpy0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgzf4WTS55w6aI4DwQdebwbpy0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:ad:e3:08:80:c4:77:d7:17:76:ae:fd:82:1b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320cdfe164d2e79c3a688e03c1075e6f06e9cb4c
Validity
Not Before: Oct 27 15:01:44 2026 GMT
Not After : Oct 28 15:01:44 2026 GMT
Subject: CN=5e85baebd1366f5197b30a2cf2b8f8c1670bbec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:13:71:aa:54:42:73:94:bb:f0:8f:42:00:
fb:d8:59:e2:12:bf:d8:ee:5d:9f:a3:d3:a5:fd:b6:
1a:73:df:a7:dd:a8:1d:98:cc:3b:11:0b:00:d0:62:
d4:e3:3b:0f:a7:75:ca:3d:cd:c4:70:52:e5:c9:36:
3a:7a:4f:18:cc:da:a8:8a:74:32:a9:2f:d8:f3:51:
eb:fa:67:95:bd:94:73:d5:ae:37:62:f0:74:16:89:
93:02:37:c0:99:41:c9:2e:b8:5d:44:b4:57:a5:89:
ee:40:e9:c1:4b:5f:b1:53:22:e4:3c:15:d3:17:e5:
23:47:43:2d:19:b7:a9:15:bf:7f:c7:7a:ca:e7:fd:
7f:70:4b:aa:36:37:78:ab:85:01:d6:59:67:be:76:
3d:94:f4:07:4c:0e:94:9e:55:aa:0f:1f:9a:bb:0c:
11:ab:b8:17:88:e6:07:a4:34:83:73:37:33:23:21:
cc:58:a7:9d:f1:82:c1:a3:22:fc:fe:94:25:24:4e:
49:89:4a:88:a3:5f:9d:7f:74:4f:7f:fb:8a:99:c2:
87:3b:4c:a0:ff:77:52:31:d6:ca:09:a6:cc:2e:78:
b6:8c:21:aa:df:1a:d6:93:25:85:0b:8b:aa:3a:cc:
c2:8d:bb:92:b9:d4:68:70:7c:77:81:06:3f:56:d2:
c0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:85:BA:EB:D1:36:6F:51:97:B3:0A:2C:F2:B8:F8:C1:67:0B:BE:C4
X509v3 Authority Key Identifier:
keyid:32:0C:DF:E1:64:D2:E7:9C:3A:68:8E:03:C1:07:5E:6F:06:E9:CB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgzf4WTS55w6aI4DwQdebwbpy0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/488792-37b6-4877-ad9e-6b7703b6d389/1/Mgzf4WTS55w6aI4DwQdebwbpy0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/488792-37b6-4877-ad9e-6b7703b6d389/1/Mgzf4WTS55w6aI4DwQdebwbpy0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:aa:44:24:94:11:8b:73:54:2e:d5:52:08:e3:a5:9d:e9:0a:
22:9c:0f:8f:0e:1f:eb:79:f3:66:23:cc:3e:67:b0:d8:ba:e5:
58:7e:31:42:78:e5:95:55:88:5d:ba:1a:5f:47:63:ed:7f:4f:
7c:d9:8f:08:8d:2f:09:48:41:d5:84:2f:97:8f:7a:11:28:3e:
2c:53:94:03:8d:5a:24:40:98:63:87:09:12:65:40:cd:6c:18:
1e:8c:1d:45:e6:a7:f4:01:10:f4:39:61:f4:0b:5e:71:8c:06:
09:fa:65:5c:15:ce:5e:42:9e:a8:30:17:a0:da:00:55:17:a5:
b8:37:c4:01:5e:06:68:39:be:0d:ba:1a:e3:40:7c:31:65:74:
a0:19:83:72:3e:f9:43:15:c0:fb:93:7c:9c:7a:07:1d:1d:5c:
ca:8c:57:44:cb:29:01:9a:8f:d9:94:09:3a:58:d8:f9:2c:93:
93:99:88:90:23:c7:47:3f:c0:e6:18:c4:8d:8b:1a:b9:2a:3f:
0b:ac:52:1d:3b:d5:6e:03:09:b6:91:f8:b7:f5:16:a8:76:2f:
e5:50:cf:4f:d4:4d:9c:f5:cd:77:3c:5a:43:f3:d9:69:aa:b9:
8a:3a:6b:da:65:59:47:24:0d:b4:90:4f:87:3c:1e:8d:2e:c3:
1d:c4:52:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF94a3jCIDEd9cXdq79ghsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMGNkZmUxNjRkMmU3OWMzYTY4OGUwM2MxMDc1ZTZmMDZl
OWNiNGMwHhcNMjYxMDI3MTUwMTQ0WhcNMjYxMDI4MTUwMTQ0WjAzMTEwLwYDVQQD
Eyg1ZTg1YmFlYmQxMzY2ZjUxOTdiMzBhMmNmMmI4ZjhjMTY3MGJiZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQcTcapUQnOUu/CPQgD72FniEr/Y
7l2fo9Ol/bYac9+n3agdmMw7EQsA0GLU4zsPp3XKPc3EcFLlyTY6ek8YzNqoinQy
qS/Y81Hr+meVvZRz1a43YvB0FomTAjfAmUHJLrhdRLRXpYnuQOnBS1+xUyLkPBXT
F+UjR0MtGbepFb9/x3rK5/1/cEuqNjd4q4UB1llnvnY9lPQHTA6UnlWqDx+auwwR
q7gXiOYHpDSDczczIyHMWKed8YLBoyL8/pQlJE5JiUqIo1+df3RPf/uKmcKHO0yg
/3dSMdbKCabMLni2jCGq3xrWkyWFC4uqOszCjbuSudRocHx3gQY/VtLAMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6FuuvRNm9Rl7MKLPK4+MFnC77EMB8GA1UdIwQY
MBaAFDIM3+Fk0uecOmiOA8EHXm8G6ctMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWd6ZjRXVFM1NXc2YUk0RHdRZGVid2JweTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80ODg3OTItMzdiNi00ODc3LWFkOWUt
NmI3NzAzYjZkMzg5LzEvTWd6ZjRXVFM1NXc2YUk0RHdRZGVid2JweTB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80ODg3OTItMzdiNi00ODc3LWFkOWUtNmI3NzAzYjZkMzg5
LzEvTWd6ZjRXVFM1NXc2YUk0RHdRZGVid2JweTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiapEJJQR
i3NULtVSCOOlnekKIpwPjw4f63nzZiPMPmew2LrlWH4xQnjllVWIXboaX0dj7X9P
fNmPCI0vCUhB1YQvl496ESg+LFOUA41aJECYY4cJEmVAzWwYHowdRean9AEQ9Dlh
9AtecYwGCfplXBXOXkKeqDAXoNoAVReluDfEAV4GaDm+Dboa40B8MWV0oBmDcj75
QxXA+5N8nHoHHR1cyoxXRMspAZqP2ZQJOljY+SyTk5mIkCPHRz/A5hjEjYsauSo/
C6xSHTvVbgMJtpH4t/UWqHYv5VDPT9RNnPXNdzxaQ/PZaaq5ijpr2mVZRyQNtJBP
hzwejS7DHcRSyw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:03:35 2026 by rpki-client