Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: TLsZNlD0y0k5t1KA6Ckgpuhty7PJ0Z2Gy1rlnRXHWKc=
Subject key identifier: 22:E7:37:22:54:0C:B1:92:AD:86:C0:E7:19:AB:43:49:83:E0:5E:E0
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 019CB392868EECB8BF142DB22CF4838B9616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 0869
Signing time: Tue 03 Mar 2026 12:00:50 +0000
Manifest this update: Tue 03 Mar 2026 12:00:50 +0000
Manifest next update: Wed 04 Mar 2026 12:00:50 +0000
Files and hashes: 1: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: fze2810CBwx6Q2bRZdxbN/MjL8L+nzSxEVI/+9WZL1Q=)
2: RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa (hash: rLSLw6+T+Et0d1Efgq167+zRkvB4aSf6ep1NRZLeTMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:92:86:8e:ec:b8:bf:14:2d:b2:2c:f4:83:8b:96:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Mar 3 12:00:50 2026 GMT
Not After : Mar 4 12:00:50 2026 GMT
Subject: CN=22e73722540cb192ad86c0e719ab434983e05ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:a1:c1:20:4c:13:ee:96:c2:ff:26:ca:1d:
84:94:ad:72:b4:44:f6:bb:ad:dd:2c:ea:73:ec:34:
f7:eb:9a:99:34:dc:92:03:c1:11:c9:b2:0c:23:3e:
fd:cc:5d:7c:da:4c:4d:e5:cb:df:05:40:0f:b4:4f:
28:9b:02:62:00:6c:40:f6:9d:47:50:e5:58:87:60:
a7:08:9f:f5:8c:95:ce:b2:81:ca:0c:73:1a:37:e0:
0c:5e:02:b4:bd:1e:b4:96:1e:eb:b7:40:df:c6:eb:
59:56:4b:79:26:08:05:17:fc:9f:17:6b:fc:b2:6a:
88:7e:e4:3f:b7:d4:ad:d2:a8:37:58:a2:66:38:a3:
81:67:a8:35:72:fa:6a:59:b0:05:7b:2a:74:a7:f9:
2f:03:ee:d6:d6:65:36:7f:22:20:fb:ff:3e:05:b9:
96:20:f2:c7:63:4d:99:0f:5e:81:da:3d:af:00:87:
2c:ac:c8:53:28:d5:70:fe:d8:7f:eb:9d:d0:9c:1c:
7b:d6:ab:48:30:3c:58:38:e8:8f:18:1e:e8:2e:1f:
d7:d4:e7:d3:dc:c6:82:de:5f:e4:01:d9:b7:d5:ea:
72:b8:12:bf:cd:c3:f3:87:ae:ba:c7:18:6a:97:ff:
ab:57:ff:c9:f4:a7:4d:fb:1b:5f:ad:82:91:73:0e:
f2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E7:37:22:54:0C:B1:92:AD:86:C0:E7:19:AB:43:49:83:E0:5E:E0
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:56:8d:3e:77:e6:c4:3f:20:64:98:64:6c:fb:08:11:c9:39:
c3:26:67:ed:14:82:dd:c2:3f:82:1d:a9:5b:d5:09:91:2f:cc:
55:3e:a6:ad:df:77:97:da:d1:f0:0a:ed:57:41:10:e1:b2:a2:
be:e3:8e:c6:3a:43:30:52:4f:57:ea:ee:a4:35:2a:26:f5:5a:
45:db:cf:75:c1:63:c7:ea:62:74:7e:65:b2:ea:48:85:b7:86:
f0:e5:dd:9a:92:4f:f3:9c:1b:5e:af:7d:85:41:70:77:0c:f9:
1c:22:a4:aa:ed:29:e9:ed:46:12:e6:28:36:a2:fe:3f:80:09:
04:d7:3e:14:00:7f:f4:3f:a3:55:cc:13:2f:e7:66:23:1b:46:
7f:1e:ed:60:1b:9e:ae:b6:5b:1f:42:1b:b6:8c:cd:a5:44:e2:
59:b1:bc:8f:f4:eb:81:ee:9c:7e:f7:cf:ce:ac:e5:f3:b0:1c:
9b:7f:02:07:54:1a:bb:2c:b2:42:03:74:5d:1b:7d:46:b8:a1:
2e:57:7b:26:16:e8:bf:0a:d7:86:ff:1c:6d:55:60:d5:3b:ad:
da:db:7f:7d:fb:b3:18:6c:e9:81:4f:3e:be:ef:7e:9b:93:44:
51:7f:55:b7:1b:83:69:6c:64:49:d4:ef:3d:32:5a:50:b3:4f:
be:fb:fd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 17:02:51 2026 by rpki-client