Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: phC1tVGJumjJ4Oo7/nf3tFEO5IH7ziQLA+772NCLY0I=
Subject key identifier: FD:3F:A3:EE:F2:92:B3:1E:81:C5:BF:1D:62:20:61:60:68:DB:59:FB
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 01A0566825E6859AAE84BACB78685ABBEA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 0A4B
Signing time: Mon 31 Aug 2026 06:01:01 +0000
Manifest this update: Mon 31 Aug 2026 06:01:01 +0000
Manifest next update: Tue 01 Sep 2026 06:01:01 +0000
Files and hashes: 1: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: TmTcLnoLOOeUJb1q2p9UIGbdf8t9aRq6ImUkh3ig/fk=)
2: RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa (hash: rLSLw6+T+Et0d1Efgq167+zRkvB4aSf6ep1NRZLeTMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:68:25:e6:85:9a:ae:84:ba:cb:78:68:5a:bb:ea:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Aug 31 06:01:01 2026 GMT
Not After : Sep 1 06:01:01 2026 GMT
Subject: CN=fd3fa3eef292b31e81c5bf1d6220616068db59fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:9c:b7:13:c7:db:27:dc:45:77:53:6e:f3:
0c:76:66:df:1b:ad:7e:a8:63:3a:ea:8b:1f:27:06:
a4:5b:a1:4f:89:e8:ee:75:bf:1e:2c:83:6f:1a:54:
6f:a8:5b:00:d7:7f:2e:c6:85:57:fc:a4:50:cc:7c:
3c:05:eb:4b:3f:8e:d1:65:a3:c3:e2:3a:e4:c5:dd:
84:cb:83:76:60:82:31:98:19:c7:b8:83:c6:1c:95:
df:93:26:3e:d9:c4:13:20:0b:54:79:1c:37:24:73:
ef:93:41:02:cc:27:bc:46:bb:aa:52:e9:1a:cf:3f:
47:93:0a:34:03:5f:59:ba:e1:7d:2b:8f:c5:15:54:
48:d9:51:0f:ff:95:36:a9:19:36:90:07:2a:22:13:
74:0d:24:6b:85:ab:4e:c0:29:c7:a8:3e:a1:6d:54:
04:28:b7:48:c7:68:9e:88:16:e7:6f:99:6e:42:74:
3a:ed:e6:97:42:f9:4b:e6:fe:94:27:f2:8d:a7:1b:
b9:b3:0a:dd:d6:12:d0:98:88:bf:ad:ee:af:df:5c:
c4:54:c7:54:41:c7:33:90:30:6e:7b:51:7e:c6:02:
db:d8:cd:1c:b3:d6:63:ce:c9:33:35:90:cb:11:db:
04:67:92:eb:48:9a:e9:73:62:f8:a6:f0:21:0a:0d:
f3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:A3:EE:F2:92:B3:1E:81:C5:BF:1D:62:20:61:60:68:DB:59:FB
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fb:e8:91:5e:9c:ec:ec:1e:e6:48:84:14:02:c5:3e:2d:6e:
cd:60:e8:e8:19:1f:9f:86:78:01:ef:86:96:53:31:4e:bf:3a:
3b:ff:18:c9:54:26:01:ab:d1:bd:51:e9:2c:17:7d:c4:13:97:
ff:1a:6e:76:e7:66:07:5c:b7:7e:cc:c0:39:2b:23:75:79:02:
99:d6:81:d6:e2:15:ea:6c:9c:f6:36:f1:af:ed:30:f0:e0:de:
e7:96:b5:61:a4:9e:73:28:3c:10:42:ac:27:5e:08:62:a5:aa:
2c:89:fa:14:a8:76:ab:9d:b4:1d:ee:90:64:0e:0e:d5:cc:d8:
1b:b1:47:73:e4:c2:aa:ac:78:22:e1:53:68:ca:f6:7c:83:d1:
2e:65:1f:4f:bd:43:fb:21:b9:01:86:ec:d1:d8:f5:89:d0:9e:
ff:12:b7:18:37:ba:01:2a:72:a0:84:22:00:7a:b5:a3:7d:7f:
8a:48:ac:f2:93:31:0a:9e:ee:ec:65:67:15:5e:7f:ea:90:e9:
83:99:e4:d0:f9:d0:d3:42:96:97:c3:70:31:f6:70:8b:01:9f:
fb:cd:72:b2:28:99:7e:3f:e9:f3:55:a3:a8:47:cc:43:6b:1d:
0d:1a:0f:e3:d2:ae:0a:3e:40:4d:b8:79:a1:b6:e3:09:53:e3:
6a:5a:b3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:09:54 2026 by rpki-client