Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: +CrKuPGre/+86C7ulIxQ9yCWUmiBXcGwPPY1auDZ/FU=
Subject key identifier: EE:07:22:B3:76:E0:86:8E:B2:E7:86:74:6F:AC:66:C2:14:50:8C:8F
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 019EB6200CC9DD0A8DAEE658F272CBB7EBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 14F3
Signing time: Thu 11 Jun 2026 10:00:14 +0000
Manifest this update: Thu 11 Jun 2026 10:00:14 +0000
Manifest next update: Fri 12 Jun 2026 10:00:14 +0000
Files and hashes: 1: Bk9vyq1LgRpU9QeZwN0V_GD5gHw.roa (hash: yNE44jpnjgZHS9ufgLSJ6WIuzBw3d04Exh56Z7CxQ4s=)
2: KKpHDDFH2cfzrNDJZuhoGv_wS_w.roa (hash: ATx2mcVJOEtuVh1BU96vsI8Si7Mn1Bxh+fLVIbYJBSM=)
3: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: 57iaRm8njF5eXj77Fyq9PI/izyDaBpeaBinnFEEfAWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:0c:c9:dd:0a:8d:ae:e6:58:f2:72:cb:b7:eb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Jun 11 10:00:14 2026 GMT
Not After : Jun 12 10:00:14 2026 GMT
Subject: CN=ee0722b376e0868eb2e786746fac66c214508c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:0c:ef:b7:93:5a:d3:eb:eb:ed:30:f3:a7:
60:a5:05:19:60:41:3c:6a:db:b9:b9:bc:c2:0a:39:
85:b3:38:63:af:59:70:66:3c:47:9b:83:42:ed:e6:
0e:df:76:a7:b0:11:5c:cb:ae:56:6d:15:1c:25:ba:
f9:47:2b:e1:84:f1:74:e9:43:c1:d0:75:fd:b2:0e:
e4:ca:27:ea:ed:3b:dd:9f:f1:75:ec:ce:c9:38:01:
aa:cd:55:f3:34:79:3e:54:ec:06:55:fb:21:56:91:
70:70:81:26:99:f9:c5:fc:83:18:7b:15:b3:46:33:
a8:6d:84:02:35:68:cb:68:f5:84:56:ad:84:bb:14:
d3:bd:de:ba:12:9b:fa:c8:f4:a6:e7:c1:16:27:12:
98:f2:74:f4:3b:4b:7e:76:44:fc:72:2a:a8:ff:2a:
f3:32:b9:21:41:35:ca:97:64:85:e5:68:e2:28:ad:
3c:94:93:61:8a:15:47:5d:b1:89:08:e8:42:84:86:
1d:56:43:78:c6:1c:a1:05:07:0f:40:3e:70:e5:3a:
f2:5b:9c:30:1f:f2:d3:9c:7f:aa:ca:ba:90:de:81:
9c:a0:e5:81:09:f3:79:a3:1c:fa:fe:0c:74:1c:1d:
f0:c9:0e:34:da:1a:c6:fd:76:76:40:47:fe:6f:27:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:07:22:B3:76:E0:86:8E:B2:E7:86:74:6F:AC:66:C2:14:50:8C:8F
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7d:53:01:6b:c7:ad:3e:7e:1c:a5:32:08:fd:ae:cb:99:60:
72:ef:18:c5:b8:c6:b4:a3:2b:5d:f8:4d:4a:52:12:f4:ce:3d:
46:e4:1f:3e:60:79:1d:f3:d4:e5:39:68:3a:6c:e4:19:35:26:
3e:be:32:1d:cc:11:bf:1c:52:c5:10:ca:f1:45:9e:42:ff:f0:
56:e2:ce:f3:69:da:d1:99:ca:c9:88:a0:2a:bc:2d:0a:7d:96:
e1:e7:c5:d3:4a:91:a1:68:9a:39:d8:99:f5:be:fc:e3:f4:27:
0a:e8:3d:89:e2:89:54:fd:32:ce:03:75:de:3b:a0:fe:d8:18:
b3:b8:73:05:9b:45:6c:d8:48:52:f2:b3:19:41:4c:49:07:bf:
b6:1b:ce:23:79:b0:3d:e6:66:6d:3a:fd:76:ab:80:db:ae:2b:
5d:d8:5d:38:25:e3:ec:69:b4:25:bb:7c:19:e9:8b:0e:84:0c:
c6:c1:b3:1c:41:42:43:fa:78:ac:17:7b:77:7e:bf:c9:db:41:
54:cb:da:c2:c4:32:51:e2:d9:02:4c:48:20:eb:0f:59:22:e7:
44:d1:49:b0:e3:4c:2c:4a:da:a7:70:e1:0b:ef:66:c8:6e:e2:
55:c2:37:52:91:d2:14:78:ba:3d:77:5c:47:67:b1:a7:0d:ef:
c4:5d:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:21:17 2026 by rpki-client