
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
File: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft (raw, json)
Hash identifier: sLoREjGrAZMn28j2Tf/ifzafFCHArQtC81wpBfuUxtY=
Subject key identifier: C7:76:94:FC:47:68:AD:49:5D:5F:E1:0C:64:B6:42:CB:1A:AD:FF:3B
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial: 01A0EC2F2D3A3860AAE34438DCAD1E89343E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
Manifest number: 1A7E
Signing time: Tue 29 Sep 2026 08:01:49 +0000
Manifest this update: Tue 29 Sep 2026 08:01:49 +0000
Manifest next update: Wed 30 Sep 2026 08:01:49 +0000
Files and hashes: 1: 2UPTAgiJvUFj9KxwMHk_neJV1Ts.roa (hash: chaCLnBUf8VW3Cyy0U4Y2DmReJ/YoQuLRxfoEk9G/Zs=)
2: 5r35RdY0vy4lh3WOV010F9-QFXw.roa (hash: G+I8XeYNJKZwLdV9Hm/0m91ziGrBNMHkmj6EJpZj11c=)
3: CIsoBMnJ1HH2_kjCOniPyHt_zdo.roa (hash: rIsVKuNDzl7s31Uqv2wlQw7E8fHntXl7uQadNq2LiGk=)
4: LU_rRpVG0rNU5sbORgmoor-WG8E.roa (hash: v6SXttNOyzn7P8hwnB7Tofa/4Bnu7wdokfdtafR2ixc=)
5: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl (hash: iC25a4Yf7iSNSexgN83Ny/Ktqw90CYt3O8lpCWzVs44=)
6: SP8ZFm--93L34rMKDZHfL8Eh_ro.roa (hash: cp6DWhPPeKxvKEzaDsnvDh3dMYI9vYEIXkFKulFhNyA=)
7: aZAulIKVvXbN8omq0JhX_jGTQpQ.roa (hash: a1Ep0d4JmHuZC92VG94ayoNuXL+o7ITThTyrhPBbaU4=)
8: exjfT9uAFU7f_gIJUid1TXJtR8A.roa (hash: 4rc5j3Of5lWDlFZbenegwws4HWNu69CTDYEmMKe9DAY=)
9: o6k4KBPjdil3WuB7HudYZFQVuio.roa (hash: 5XEGVtaoTy/OrakXg9NARGFxY6y76Ds7hBFFlDQicdE=)
10: rcsE8T3loa9paQtOZYTdGqYZZdQ.roa (hash: aTqIKXOe4lJEG0nzJ4iYV8aOwdLjU0r2z02TUxqz12s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:2d:3a:38:60:aa:e3:44:38:dc:ad:1e:89:34:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Validity
Not Before: Sep 29 08:01:49 2026 GMT
Not After : Sep 30 08:01:49 2026 GMT
Subject: CN=c77694fc4768ad495d5fe10c64b642cb1aadff3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:e8:a1:4d:06:12:81:e1:0e:6e:69:09:45:
be:1b:cc:5a:48:cd:ff:e8:61:7e:2d:a3:c6:66:d6:
d7:d1:1f:5d:4d:42:e1:41:07:fb:e1:bf:b8:42:be:
ce:09:b3:3d:c0:a6:00:df:1c:d4:72:e8:44:48:ea:
86:e1:4a:62:33:f3:03:39:cd:d1:aa:f3:9f:70:2d:
1c:82:59:af:57:14:89:98:d4:bc:7e:8f:13:29:2f:
bc:c3:60:92:b3:cc:fa:59:c0:2b:4b:e3:97:53:64:
42:a5:f2:b8:72:60:cc:ab:09:e9:98:f8:ea:26:b8:
e2:28:73:fe:91:f4:21:c0:68:be:82:d2:3a:f9:19:
54:fd:58:b2:d9:b7:7a:a4:12:3c:bd:8c:b9:f2:59:
ee:d3:67:ac:5b:fe:ff:78:be:1c:dd:26:94:39:89:
b9:b7:15:4a:3f:60:a5:e3:67:2c:ca:76:fd:da:bd:
73:b7:9b:6b:b3:93:18:e9:c1:a9:57:46:6a:3d:17:
0e:72:6e:69:fc:47:cf:e1:58:9e:65:26:b0:c6:b8:
40:37:80:28:d5:fa:ac:4b:15:09:89:72:2b:a5:53:
96:5d:d7:30:9d:37:50:7c:7c:28:72:db:0a:a5:a6:
7f:63:f1:bc:c3:5f:6c:1d:16:af:79:84:35:8d:04:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:76:94:FC:47:68:AD:49:5D:5F:E1:0C:64:B6:42:CB:1A:AD:FF:3B
X509v3 Authority Key Identifier:
keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9c:5e:7a:98:6d:00:34:97:3c:d4:43:42:d0:a5:c1:05:5b:
1a:46:23:78:92:a0:1b:6c:4d:69:5f:6e:33:a3:12:f1:74:f4:
9d:a5:da:66:49:8f:54:e1:56:64:b2:fd:59:4e:a8:2a:18:aa:
f6:7e:1a:be:8d:7b:80:b2:18:fe:5a:f9:9d:b5:03:4c:44:0f:
3a:43:51:23:ff:82:2a:8e:bc:2d:78:81:de:3c:fc:f0:b6:4d:
64:55:fb:b7:7d:42:b0:a0:ea:d0:f6:d3:2a:73:14:fa:97:36:
9c:cf:cb:8b:2b:3f:fd:0d:16:f3:36:48:49:4e:c0:cb:62:49:
82:ef:a5:56:6d:ca:4e:20:b5:77:a4:ac:c1:51:4e:b4:61:f9:
5f:25:a1:a3:70:48:cc:24:95:28:67:fe:7c:a6:e3:4f:ad:ba:
64:af:2e:23:93:48:54:2d:c5:ac:bf:a3:2c:05:6b:7a:b4:85:
f7:25:13:5e:9f:86:06:29:5f:d7:0e:bc:d5:5e:3f:8c:7a:90:
1d:6f:a3:c2:08:91:f7:64:33:aa:7d:cb:a1:07:df:79:62:81:
ce:d9:83:dd:e4:7e:4d:0e:54:7b:ba:bc:90:8e:25:fc:91:f3:
82:0b:95:95:69:22:f1:d2:31:48:74:09:a1:92:6e:25:b4:37:
1a:a0:0c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:29:50 2026 by rpki-client