Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: JEKO4O4LPGhxv4KSksJgLrs8s86CShDx0P0ip3crJs4=
Subject key identifier: CE:90:26:BA:B7:17:81:F8:D8:95:5E:CF:E9:25:51:D8:63:D5:BE:93
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 01A188645273A72C2E2E80322DEDBC8093BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 1669
Signing time: Thu 29 Oct 2026 16:00:38 +0000
Manifest this update: Thu 29 Oct 2026 16:00:38 +0000
Manifest next update: Fri 30 Oct 2026 16:00:38 +0000
Files and hashes: 1: Bk9vyq1LgRpU9QeZwN0V_GD5gHw.roa (hash: yNE44jpnjgZHS9ufgLSJ6WIuzBw3d04Exh56Z7CxQ4s=)
2: KKpHDDFH2cfzrNDJZuhoGv_wS_w.roa (hash: ATx2mcVJOEtuVh1BU96vsI8Si7Mn1Bxh+fLVIbYJBSM=)
3: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: MrCA86P9S45ZELHLGzzVhwU2IGzhUDM9gZ1HkpAwVL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:64:52:73:a7:2c:2e:2e:80:32:2d:ed:bc:80:93:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Oct 29 16:00:38 2026 GMT
Not After : Oct 30 16:00:38 2026 GMT
Subject: CN=ce9026bab71781f8d8955ecfe92551d863d5be93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:46:2a:90:04:78:3e:5f:48:6e:b6:d9:53:c0:
a0:46:a9:35:b8:fb:f1:2d:68:77:3b:4b:43:10:19:
0f:db:c5:47:4d:33:e2:b2:0c:e5:fd:25:b5:d4:6b:
90:9b:c3:ef:a5:46:9b:08:01:91:60:e1:df:1b:94:
1b:f9:c7:f5:79:4b:a2:4b:07:f0:c2:6c:45:cc:0f:
1c:ec:19:8c:46:34:e4:55:5a:22:d9:cf:b0:a5:cd:
72:17:23:a5:b8:19:b0:e2:82:1c:24:9f:54:dd:32:
0b:c3:4b:94:ed:ed:2f:e7:59:af:eb:30:ea:30:8f:
fd:e2:70:01:8f:63:85:93:46:44:80:88:a8:42:b5:
43:fc:3d:a7:69:bd:a3:a5:f6:ac:71:79:6f:69:5f:
50:4a:bd:6c:be:20:65:64:86:2e:49:ff:ca:e3:38:
85:b7:30:47:76:d6:4e:75:68:87:49:98:06:68:35:
4e:5b:cd:70:b4:21:b4:c3:51:33:92:42:da:c0:6a:
ab:85:f8:44:6c:9b:05:a3:45:03:11:53:00:45:55:
eb:45:26:5e:49:18:cf:29:13:7e:1c:73:f6:4d:a7:
d9:7b:4b:60:d4:f9:7a:e1:5f:d7:fa:45:4c:54:4b:
bc:82:02:ce:a2:fd:74:67:9e:1f:26:03:68:97:63:
e0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:90:26:BA:B7:17:81:F8:D8:95:5E:CF:E9:25:51:D8:63:D5:BE:93
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:63:a9:fd:08:9a:99:1f:19:90:2c:a2:a6:d4:53:10:f1:74:
0d:52:20:b2:50:ad:ea:80:31:f9:78:64:eb:f4:92:64:98:98:
30:91:74:fa:62:16:3d:88:5f:a7:ea:90:e7:15:f2:48:de:d7:
7d:a2:60:00:fd:f5:35:4e:d6:84:09:a3:1d:7f:09:21:7d:f0:
7b:7d:47:c9:72:17:03:9d:80:54:79:a4:9b:b6:9a:ca:f5:41:
c7:9d:54:8f:b3:b8:32:fd:36:d5:1e:d1:de:c1:4b:28:72:6b:
7e:bf:a6:5b:ff:55:6e:9e:10:62:5b:28:ea:52:ce:e4:8d:06:
da:08:d9:6a:d9:f7:01:de:90:65:96:84:0b:4c:a4:c0:67:8a:
78:4b:6d:28:61:8f:e4:98:90:45:72:17:28:8c:3e:83:bb:e5:
30:c4:7c:be:c4:eb:31:93:cc:bb:20:9f:4e:e2:00:ae:fc:2b:
41:d1:f0:4f:e7:7d:2c:92:c9:a2:90:80:02:88:a6:03:23:4e:
89:ad:68:ad:c0:31:e9:39:7c:ed:29:79:b9:b7:92:1d:16:91:
04:64:0a:c3:d7:c8:aa:43:17:43:9f:0b:a4:bf:9c:63:e5:db:
6c:c6:a5:32:62:aa:e7:c9:f1:77:29:f6:30:82:24:d1:50:f5:
a8:d6:52:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:28:02 2026 by rpki-client