Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
File: MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json)
Hash identifier: 1cm1v4gLhg7Fhzmm5vAVUB+z8ELO19R3/pYC/57qMS4=
Subject key identifier: 52:77:EC:88:D1:FE:5C:19:37:12:B9:47:0C:2C:A4:37:CD:CC:1A:FF
Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7
Certificate serial: 019F8568BEA1BA0AFDC29B3762D2A08321DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
Manifest number: 1954
Signing time: Tue 21 Jul 2026 16:01:01 +0000
Manifest this update: Tue 21 Jul 2026 16:01:01 +0000
Manifest next update: Wed 22 Jul 2026 16:01:01 +0000
Files and hashes: 1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: QRyd2pTYZ1Gsyiyxl+FNALqaUsgWu7s4IRAiN3fYnyE=)
2: dDj4-eFRfq_UroSu2HQ22smKlA8.roa (hash: ahRStajN/bb570o/RBHvcfEKEL2KTD1bW5s9wAnONq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:be:a1:ba:0a:fd:c2:9b:37:62:d2:a0:83:21:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7
Validity
Not Before: Jul 21 16:01:01 2026 GMT
Not After : Jul 22 16:01:01 2026 GMT
Subject: CN=5277ec88d1fe5c193712b9470c2ca437cdcc1aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:c5:7a:88:5f:ba:a5:a5:fa:f1:24:d2:29:
70:ab:b5:1e:3d:6b:4d:67:7f:0e:83:2a:8b:5f:da:
1a:39:4a:19:3c:20:39:fc:90:33:28:b3:ae:cf:68:
96:bc:15:70:76:b7:97:7c:07:2d:88:4e:51:1c:89:
4c:6b:3d:39:16:97:6b:61:d2:2c:ec:75:ab:ed:10:
c2:02:5b:14:40:a2:24:08:c0:70:b5:f1:48:a1:6b:
d5:97:66:a1:57:87:1a:bd:f6:f6:bd:cb:72:1b:7c:
a0:2a:23:ba:da:16:bc:e5:61:b5:df:68:26:f0:3e:
db:a0:d7:6b:fc:ed:b7:42:28:5b:b5:45:fb:44:d3:
26:83:9e:a0:08:20:68:94:50:01:ed:37:d7:56:3c:
e1:32:d3:50:c5:a8:aa:da:30:6e:71:76:01:bf:dd:
fe:ee:c3:63:6a:86:b7:d9:d4:88:be:0c:33:93:9b:
df:14:8c:de:28:bf:79:31:a0:08:3e:ca:04:06:c7:
97:b3:5b:bf:7d:ca:ce:13:5f:35:b9:0e:59:bb:97:
c3:0c:cf:8a:8d:17:e8:77:47:e3:f1:5d:a9:f6:3f:
e1:da:ea:1c:bb:1c:0f:60:ce:da:c3:2f:38:ce:7e:
a0:2a:80:53:4c:15:3a:3b:b8:7a:f3:20:02:75:b9:
b4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:77:EC:88:D1:FE:5C:19:37:12:B9:47:0C:2C:A4:37:CD:CC:1A:FF
X509v3 Authority Key Identifier:
keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c4:5f:86:2b:94:d8:93:ab:78:7f:be:67:69:94:47:5c:8d:
f9:78:1b:72:8f:91:93:a8:32:c7:bf:53:ee:26:b6:af:54:8a:
37:00:cf:0e:19:e1:7e:f6:44:e7:3b:03:16:0b:fc:64:fd:f9:
c7:b4:51:78:d4:3d:52:d8:ab:a4:27:01:a9:c1:f8:07:e1:df:
f4:33:99:05:1e:d7:82:2d:f3:99:79:2e:60:c7:e3:f8:ad:00:
4e:b5:56:15:6a:b7:fd:91:96:53:f2:21:92:08:5c:6e:d6:5c:
4a:63:8c:9f:d7:5e:23:02:da:a2:6c:a7:73:49:79:22:6f:f5:
e1:0a:5c:6c:8a:b0:57:8c:88:c0:86:df:16:fd:5a:fb:da:ed:
38:23:a3:be:b3:0a:cd:e8:32:fc:00:6e:d6:95:65:a1:ed:a1:
c3:ad:32:32:3d:f8:08:9d:b5:e8:c4:1c:55:9c:23:17:1f:b1:
6b:22:36:6f:8f:1e:a4:79:46:da:2b:79:51:bd:7e:f3:97:e5:
9b:42:75:98:f1:3e:2e:dd:05:ee:ec:17:96:68:7c:73:c6:d1:
bb:f5:a4:ee:c2:5a:a3:4c:d0:e8:76:8f:95:0c:f9:1b:fc:ff:
21:56:b1:36:0a:f3:95:b6:67:0e:13:8c:19:0c:92:12:87:db:
89:ae:c9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:02:49 2026 by rpki-client