
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: jyEaDvQ6C/dPH3MQqXwiuIc0F3cNcmRkLp3NxEqsGi4=
Subject key identifier: DD:89:8C:6D:2E:11:65:BB:4A:74:F3:15:82:8A:51:01:13:86:87:F0
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 019F32CD38485646953B91359C7864D9A66B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 09B4
Signing time: Sun 05 Jul 2026 15:02:17 +0000
Manifest this update: Sun 05 Jul 2026 15:02:17 +0000
Manifest next update: Mon 06 Jul 2026 15:02:17 +0000
Files and hashes: 1: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: L7RfsiIV2wGlm8wqvAoVeL2YrG0Y1kBum4t3zedEzhI=)
2: RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa (hash: rLSLw6+T+Et0d1Efgq167+zRkvB4aSf6ep1NRZLeTMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 15:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:32:cd:38:48:56:46:95:3b:91:35:9c:78:64:d9:a6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Jul 5 15:02:17 2026 GMT
Not After : Jul 6 15:02:17 2026 GMT
Subject: CN=dd898c6d2e1165bb4a74f315828a5101138687f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:e9:e5:23:55:56:07:c7:16:94:4a:42:0f:
97:45:23:2e:46:31:6a:fa:6d:59:7b:7b:52:b0:bb:
27:f7:89:ef:f3:ac:0d:3d:0b:d7:eb:50:aa:a1:0e:
7c:a5:27:5e:24:67:db:75:38:78:5e:5c:c0:49:8d:
5e:9c:80:fc:2d:75:7f:af:52:d0:25:5a:20:9d:a0:
77:37:00:ea:9a:a4:55:ef:a0:92:4f:47:bb:28:7e:
27:fd:ad:64:e0:cf:ea:b2:2a:b7:2c:bb:7d:fc:ca:
71:63:94:ac:53:bb:c3:34:d1:37:52:e0:a0:2f:d3:
a2:ad:1e:de:da:70:7b:3e:c4:9f:07:07:bb:6a:83:
e2:b9:04:af:11:7e:4b:d1:ab:8b:e2:44:1e:5b:75:
37:1b:e0:12:c5:36:b5:5f:55:da:4a:16:b4:a9:ee:
78:e3:d7:d7:ec:c7:1d:91:5b:4d:ad:d1:0c:9b:00:
cb:8f:65:e7:f9:b3:3b:c8:4e:28:53:95:1b:d7:7d:
7b:11:ce:e9:8b:b6:af:6b:d4:24:a3:2a:e8:ae:16:
30:4a:3b:e3:45:2f:4c:90:fd:c5:93:22:b5:23:5e:
76:8c:53:c5:0a:91:98:bc:1c:cb:d9:19:ef:a7:dc:
f1:91:60:7a:c3:08:2a:ff:b7:d9:0d:75:d6:b2:27:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:89:8C:6D:2E:11:65:BB:4A:74:F3:15:82:8A:51:01:13:86:87:F0
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c2:1c:a7:1b:52:2b:31:67:49:22:a9:97:99:84:2a:26:8b:
e4:4e:ad:16:cd:de:47:92:be:29:f9:89:5a:10:25:e4:3f:bb:
88:7d:8c:94:8f:41:35:79:26:68:55:1b:1b:61:10:1d:33:38:
d1:a3:e5:f7:35:7e:a7:4c:5a:4c:28:c4:72:be:52:c3:21:3e:
22:31:8c:4d:97:c4:44:cc:b5:f5:b8:ee:c2:c1:27:92:89:35:
10:cb:66:cd:5e:66:22:a7:bc:ed:92:3f:cd:6e:0d:ed:f5:40:
89:c8:2c:6c:4f:5d:80:6a:ea:44:f1:55:ed:f4:f1:78:04:f9:
25:2c:69:ed:e6:dc:32:5a:b8:f6:05:aa:47:44:71:e3:1f:b1:
06:a3:86:75:88:f4:97:36:4b:b6:eb:54:7c:ba:81:e8:f7:38:
ea:cf:76:89:ca:6f:97:b6:53:8e:1f:31:77:1b:b2:90:19:e3:
db:9d:99:24:b7:56:06:89:18:b6:77:cd:0c:aa:eb:9c:d1:86:
83:07:e5:a5:2c:15:12:67:fe:6d:9e:52:05:15:a5:02:bb:06:
ae:4a:18:81:d8:ae:cd:aa:1a:7b:1d:75:24:78:58:c4:6e:a4:
0d:5a:c5:b4:26:25:bf:e3:a0:94:9c:41:99:a7:8a:8e:9c:92:
87:b0:2b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 19:58:17 2026 by rpki-client