Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: 0sQFsoyef2NrgTVtP/yM7KiAsYRO5kR8IuiSx+6XubU=
Subject key identifier: 06:79:FF:64:2D:5F:34:EB:B3:74:A1:9C:B4:EC:F9:EE:84:CC:A3:B8
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 019D37C0974C4D1B08983A63D2E60C68D8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 142D
Signing time: Sun 29 Mar 2026 04:01:01 +0000
Manifest this update: Sun 29 Mar 2026 04:01:01 +0000
Manifest next update: Mon 30 Mar 2026 04:01:01 +0000
Files and hashes: 1: Bk9vyq1LgRpU9QeZwN0V_GD5gHw.roa (hash: yNE44jpnjgZHS9ufgLSJ6WIuzBw3d04Exh56Z7CxQ4s=)
2: KKpHDDFH2cfzrNDJZuhoGv_wS_w.roa (hash: ATx2mcVJOEtuVh1BU96vsI8Si7Mn1Bxh+fLVIbYJBSM=)
3: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: oH+qVqaKrr/wGBXhGN1I+eKFsY91tbJ1YKOwtExo9dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:97:4c:4d:1b:08:98:3a:63:d2:e6:0c:68:d8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Mar 29 04:01:01 2026 GMT
Not After : Mar 30 04:01:01 2026 GMT
Subject: CN=0679ff642d5f34ebb374a19cb4ecf9ee84cca3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ab:72:89:a6:fd:c3:5d:c4:9e:0f:5f:77:4b:
90:41:ed:e5:be:db:19:f5:5d:6e:92:56:ed:41:2d:
d9:8b:4f:90:9a:62:43:60:af:a6:b4:3a:c5:20:1d:
fe:b7:62:4c:4b:bf:60:c3:2e:0f:b7:76:af:3d:90:
11:ef:68:6d:a4:5e:ea:67:83:9c:51:e1:6a:0c:76:
b6:c8:22:01:c3:d4:d0:49:07:f4:86:4c:01:7e:62:
cb:e7:a2:e0:c7:76:3f:dc:bc:4c:11:13:3c:a0:21:
de:36:50:b8:c3:d8:88:2e:6f:3f:8a:dc:8e:56:5e:
66:c4:88:02:92:b8:b8:6d:c3:85:96:d5:3a:12:d1:
8f:70:05:e2:f4:50:b7:f6:e9:9c:28:c3:85:a8:71:
01:8d:79:c8:75:2f:19:24:a1:20:16:fd:6e:a2:ca:
84:40:86:86:f3:38:65:49:de:26:1a:d1:9a:cd:a5:
30:5e:ed:1a:41:ac:be:25:9e:82:cc:04:c2:e3:76:
87:df:31:3b:b3:1c:72:cb:84:06:26:4d:f2:6f:96:
79:14:1f:b6:04:00:5e:aa:41:b4:89:25:c1:f8:84:
51:ff:66:67:a2:43:83:34:87:ba:98:d8:4c:0c:fd:
f6:e4:a4:41:b4:79:47:28:93:c0:e1:be:1b:62:8c:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:79:FF:64:2D:5F:34:EB:B3:74:A1:9C:B4:EC:F9:EE:84:CC:A3:B8
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:18:a1:b1:3e:72:70:3b:1b:4d:55:0b:6c:3c:a4:cd:ca:ee:
85:47:9a:87:2e:51:c5:1a:4e:71:17:93:42:92:02:c8:db:82:
0e:0b:ea:37:d6:2d:da:e2:e7:6a:a0:58:b5:78:ba:12:11:6d:
b5:26:9e:a7:ed:93:7e:31:aa:28:7a:99:41:eb:95:eb:d2:67:
6c:cc:3e:2e:8e:cf:22:ce:12:5c:3f:de:6c:d5:ee:e8:1c:9d:
8f:f4:ac:21:01:9b:f3:fd:0d:38:a9:81:36:d7:da:5c:eb:a8:
c3:cd:02:c8:43:52:46:84:ed:a4:4b:22:bc:82:d6:f6:b0:fa:
fc:1a:d7:2a:5a:cb:d3:63:d1:41:62:25:23:3d:f2:40:92:0a:
70:71:72:90:6c:72:f8:a6:89:32:28:5d:9c:25:c3:27:f7:cb:
f8:d2:93:3d:2a:c2:41:44:b6:5d:25:e4:4b:dc:34:e4:72:ab:
fa:72:ae:61:98:9a:2d:09:67:1c:f1:24:f2:9d:26:7f:67:cf:
e9:aa:b6:a4:d0:aa:85:02:ec:b4:f0:35:b6:80:c4:a1:66:5e:
03:a7:17:8c:f3:26:9a:87:6c:36:12:17:3d:7b:ee:ae:89:0b:
53:30:5c:70:6a:ff:53:70:b6:52:f4:89:b5:a3:1f:cd:f4:a9:
4a:b0:63:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:50 2026 by rpki-client