Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: GPw1RAGi6hJegA7ubNflIKRhdnXp0sHfnCaAAmzFLn8=
Subject key identifier: 60:0B:6C:38:FB:12:FA:E5:2A:A8:5B:25:D3:BD:5C:83:FB:3D:65:40
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 01A14F885CF699805912F12452397B01CBEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 0ACC
Signing time: Sun 18 Oct 2026 15:01:38 +0000
Manifest this update: Sun 18 Oct 2026 15:01:38 +0000
Manifest next update: Mon 19 Oct 2026 15:01:38 +0000
Files and hashes: 1: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: m0VbrQMfvdhiqTq3F4MzuEXZtamUC0gTCMdr/tjKmWc=)
2: RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa (hash: rLSLw6+T+Et0d1Efgq167+zRkvB4aSf6ep1NRZLeTMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 14:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:88:5c:f6:99:80:59:12:f1:24:52:39:7b:01:cb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Oct 18 15:01:38 2026 GMT
Not After : Oct 19 15:01:38 2026 GMT
Subject: CN=600b6c38fb12fae52aa85b25d3bd5c83fb3d6540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:99:c0:0e:9c:0d:d1:78:80:e8:19:71:45:36:
03:55:94:4d:fd:91:8e:fd:17:99:d6:b5:ab:e6:f7:
6f:a8:af:47:9b:fb:37:85:3c:f0:0e:d3:de:83:b8:
0e:78:95:b0:61:c6:43:d5:d6:ff:60:eb:53:c9:72:
9c:75:14:09:c0:ed:58:e1:e8:84:ba:85:c0:af:6d:
8f:ed:15:5c:f8:3b:9d:76:a3:97:97:8c:1d:19:eb:
6a:65:14:eb:24:ac:3f:26:9a:57:95:94:5a:25:6a:
69:4e:0f:29:2e:e4:3b:32:a6:ff:41:c3:d2:49:e8:
ce:d1:57:8a:7d:5a:8c:10:2b:8f:87:a5:9c:a9:33:
d2:09:76:71:37:bc:4c:05:bf:36:b8:4a:38:5e:bc:
33:5f:e8:59:99:f4:51:c5:e2:ed:57:a9:7e:e9:66:
4e:1c:91:5e:9e:97:13:01:1e:ef:61:18:e0:2c:e2:
30:2d:09:55:25:99:30:c1:2b:63:fd:d8:58:4b:ac:
6b:e6:45:9e:69:30:48:15:5b:cd:ec:f7:bc:ee:78:
c6:21:3b:ee:d2:22:5b:8b:1a:e4:e3:9c:29:79:4d:
d1:8d:12:8c:f4:62:14:16:5a:dd:27:ec:33:d7:71:
ca:8e:0b:58:dd:75:44:c3:bd:7a:ab:d9:43:5c:25:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0B:6C:38:FB:12:FA:E5:2A:A8:5B:25:D3:BD:5C:83:FB:3D:65:40
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:33:83:0e:fa:c5:2e:54:2f:1f:0e:43:15:76:17:48:c3:63:
2d:b0:1c:d0:96:b3:0e:c5:7b:35:b7:01:71:38:1b:0c:1b:a3:
61:36:0c:b3:84:93:c7:f2:a2:ed:f0:98:4b:89:40:5c:10:d7:
a8:16:13:5b:25:32:48:d8:4d:ef:be:a9:19:0c:03:d1:57:9b:
1b:3b:2e:c1:a7:35:f2:e3:34:c5:93:ae:ae:bf:c2:ac:58:45:
68:34:e0:4e:92:45:90:75:fb:e8:60:41:99:ef:03:1a:2b:cc:
90:b9:07:79:e8:6f:53:a6:f4:f0:74:42:47:52:c4:f9:a6:18:
dc:32:0e:c9:3c:f4:83:56:5e:45:42:b3:e4:06:cc:36:a8:c8:
75:3a:43:67:b4:9a:4f:9c:10:1d:83:c6:18:f4:4f:29:66:dc:
58:5f:d2:5f:ce:c1:17:59:e7:45:56:89:cb:3d:5e:4f:43:98:
c9:42:23:59:09:56:28:4c:fc:40:d6:3b:5d:fb:d5:e2:97:8a:
34:12:93:ef:e3:68:53:b1:01:3f:b5:5d:a4:46:57:f7:8d:ea:
dc:0e:31:68:c5:6c:f1:4e:37:77:22:07:4b:5f:6e:49:97:1b:
5a:5b:a4:94:98:5c:b4:78:9b:ec:d9:d8:30:12:87:8e:c4:96:
5a:d8:5b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 21:00:05 2026 by rpki-client