Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: R3ZJyc3U9cXM82FUbw3b+34TSD9PqcivStw5S726Leg=
Subject key identifier: 62:A7:AE:B2:48:B1:B8:D6:E6:7F:E9:FF:F4:67:61:BA:8F:6C:71:F3
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 01A0859D57A11C01204390E75A8C51D6CB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 15E3
Signing time: Wed 09 Sep 2026 10:01:16 +0000
Manifest this update: Wed 09 Sep 2026 10:01:16 +0000
Manifest next update: Thu 10 Sep 2026 10:01:16 +0000
Files and hashes: 1: Bk9vyq1LgRpU9QeZwN0V_GD5gHw.roa (hash: yNE44jpnjgZHS9ufgLSJ6WIuzBw3d04Exh56Z7CxQ4s=)
2: KKpHDDFH2cfzrNDJZuhoGv_wS_w.roa (hash: ATx2mcVJOEtuVh1BU96vsI8Si7Mn1Bxh+fLVIbYJBSM=)
3: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: CGmCsJqUKt5mE6RCl+kfbgyhtptaEI7QI6ei7n4wGcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:9d:57:a1:1c:01:20:43:90:e7:5a:8c:51:d6:cb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Sep 9 10:01:16 2026 GMT
Not After : Sep 10 10:01:16 2026 GMT
Subject: CN=62a7aeb248b1b8d6e67fe9fff46761ba8f6c71f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:43:fc:a9:2a:65:ad:bd:94:55:d1:02:d7:
07:46:bc:39:79:b0:e3:6c:15:2e:7b:ab:ca:f5:56:
da:00:6e:1c:a4:10:a2:97:0c:eb:82:bc:06:c8:4c:
3c:75:a6:49:f6:29:3a:d8:96:2d:8d:2e:45:09:19:
df:23:57:82:5b:90:5a:22:72:17:0e:09:0c:1f:14:
f3:22:13:33:19:80:db:08:9c:25:0f:03:8d:8b:eb:
58:e6:92:a2:32:7e:64:ba:50:56:97:76:1f:8f:c4:
f3:b1:b5:84:69:35:e3:1f:36:8b:9a:20:08:78:15:
55:42:ef:6c:8c:1b:8a:20:be:39:7e:f5:e3:99:43:
9b:c4:cd:40:83:12:a0:2f:c4:43:2f:13:99:27:92:
68:66:9c:e9:49:18:db:f7:55:b8:eb:63:bb:ee:a8:
9c:f9:bc:70:03:20:40:f5:00:f5:54:56:2c:2f:56:
9d:0a:a6:73:4e:58:aa:fd:f4:94:d8:48:7d:17:d4:
a6:99:44:21:3f:fd:da:18:3f:87:c4:b4:de:65:29:
3e:81:c6:1c:49:7c:81:e5:0d:67:99:05:8c:5e:38:
23:a0:05:9d:39:f0:3c:15:5b:fd:8a:e0:7b:eb:50:
1e:7f:0b:5d:65:11:5e:f9:f4:c4:8f:6d:39:20:01:
45:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A7:AE:B2:48:B1:B8:D6:E6:7F:E9:FF:F4:67:61:BA:8F:6C:71:F3
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:33:2b:ef:7d:89:c9:34:8d:96:9b:02:b7:41:69:dc:30:b7:
b1:6a:14:52:f5:2b:eb:0c:71:f0:fd:84:16:77:93:fd:7e:01:
39:e7:7a:bf:11:d6:f9:21:b4:0f:f2:9a:02:ef:7c:75:9f:08:
3c:d4:97:61:2a:fb:53:b9:c4:d7:68:f7:af:b9:ba:52:d2:df:
e7:a1:f4:4b:4e:8a:f6:b4:1b:2e:32:59:5a:50:2f:f1:fa:76:
21:14:73:7c:ae:ea:71:ce:ae:bb:b9:d9:b4:9b:c9:53:e5:e7:
46:65:39:6a:ae:6e:c6:78:f5:4a:d5:94:5a:6a:c7:0a:ff:12:
71:b7:e9:d5:0d:61:c5:63:2c:ba:e2:d4:54:dc:87:e8:c3:92:
71:14:75:f2:4b:34:54:6c:60:80:fb:26:f4:2c:bd:e7:ef:00:
70:f6:93:5a:02:82:0c:7a:df:ab:9a:20:13:fe:8a:cb:63:5c:
1f:48:55:61:23:dc:fd:d3:a0:6c:5c:be:a3:b1:72:ba:62:2d:
b5:47:87:7b:1d:0c:fa:7d:f3:f5:eb:3d:04:58:6c:4f:d3:56:
85:f6:44:86:f2:3d:3f:43:75:88:2f:0c:eb:57:08:f9:f8:7a:
96:24:a1:2b:fc:b3:a9:26:62:40:57:7b:6a:82:86:8f:35:22:
bf:4a:f8:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCFnVehHAEgQ5DnWoxR1stWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNmQ2MTgzNTViZDg5MzdmNzViYjQ2NTBiYjVjMWFmNzBm
OWExMmUwHhcNMjYwOTA5MTAwMTE2WhcNMjYwOTEwMTAwMTE2WjAzMTEwLwYDVQQD
Eyg2MmE3YWViMjQ4YjFiOGQ2ZTY3ZmU5ZmZmNDY3NjFiYThmNmM3MWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQhD/KkqZa29lFXRAtcHRrw5ebDj
bBUue6vK9VbaAG4cpBCilwzrgrwGyEw8daZJ9ik62JYtjS5FCRnfI1eCW5BaInIX
DgkMHxTzIhMzGYDbCJwlDwONi+tY5pKiMn5kulBWl3Yfj8TzsbWEaTXjHzaLmiAI
eBVVQu9sjBuKIL45fvXjmUObxM1AgxKgL8RDLxOZJ5JoZpzpSRjb91W462O77qic
+bxwAyBA9QD1VFYsL1adCqZzTliq/fSU2Eh9F9SmmUQhP/3aGD+HxLTeZSk+gcYc
SXyB5Q1nmQWMXjgjoAWdOfA8FVv9iuB761AefwtdZRFe+fTEj205IAFFEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKnrrJIsbjW5n/p//RnYbqPbHHzMB8GA1UdIwQY
MBaAFDBtYYNVvYk391u0ZQu1wa9w+aEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2Ut
NTE2ZmZkODczNzZjLzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2UtNTE2ZmZkODczNzZj
LzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODMr732J
yTSNlpsCt0Fp3DC3sWoUUvUr6wxx8P2EFneT/X4BOed6vxHW+SG0D/KaAu98dZ8I
PNSXYSr7U7nE12j3r7m6UtLf56H0S06K9rQbLjJZWlAv8fp2IRRzfK7qcc6uu7nZ
tJvJU+XnRmU5aq5uxnj1StWUWmrHCv8Scbfp1Q1hxWMsuuLUVNyH6MOScRR18ks0
VGxggPsm9Cy95+8AcPaTWgKCDHrfq5ogE/6Ky2NcH0hVYSPc/dOgbFy+o7FyumIt
tUeHex0M+n3z9es9BFhsT9NWhfZEhvI9P0N1iC8M61cI+fh6liShK/yzqSZiQFd7
aoKGjzUiv0r4Ww==
-----END CERTIFICATE-----
Generated at Wed Sep 9 16:39:47 2026 by rpki-client