Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
File: MAGbyB3kqk6yn5tHmBwX8aCyunI.mft (raw, json)
Hash identifier: ohP/DUqzhQk2qmpwu8BgvjPv4Lvfe1569/B7/4Qe7NE=
Subject key identifier: 35:29:E8:91:56:FA:01:32:12:BF:A8:0E:DA:44:50:4B:7B:46:15:A5
Authority key identifier: 30:01:9B:C8:1D:E4:AA:4E:B2:9F:9B:47:98:1C:17:F1:A0:B2:BA:72
Certificate issuer: /CN=30019bc81de4aa4eb29f9b47981c17f1a0b2ba72
Certificate serial: 01A1833E75E8353B2456FB6825D766D8BBA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
Manifest number: DB
Signing time: Wed 28 Oct 2026 16:01:10 +0000
Manifest this update: Wed 28 Oct 2026 16:01:10 +0000
Manifest next update: Thu 29 Oct 2026 16:01:10 +0000
Files and hashes: 1: MAGbyB3kqk6yn5tHmBwX8aCyunI.crl (hash: rVeolH56V5nijA22wZNWB+lLk11A+7MUqiV6HWw3FPM=)
2: pNQEQwwSVbDCMLAveVXd1mwHJeQ.roa (hash: dBVLbfqlR4GtBzx1f02M/qqFPs/aMyQuLiXl/XvXTiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:75:e8:35:3b:24:56:fb:68:25:d7:66:d8:bb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30019bc81de4aa4eb29f9b47981c17f1a0b2ba72
Validity
Not Before: Oct 28 16:01:10 2026 GMT
Not After : Oct 29 16:01:10 2026 GMT
Subject: CN=3529e89156fa013212bfa80eda44504b7b4615a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:1d:cf:86:dc:b4:2f:e4:53:ff:78:75:28:
d9:35:61:7a:03:88:7c:e6:b0:37:84:d8:09:ba:3b:
2b:cf:e1:f3:d6:18:44:71:18:6c:30:4e:f0:0d:ef:
e8:2d:83:e2:ae:65:b0:ec:4d:01:4e:d9:82:d1:9a:
bf:19:a1:64:0e:d4:f2:ce:7b:11:85:3d:9a:56:85:
4f:70:73:bb:40:35:cc:ce:da:8a:1b:b0:36:ab:75:
3d:02:50:29:ab:3c:5c:1c:07:c4:dc:05:46:20:be:
2b:17:60:e7:71:1e:da:a7:93:3b:32:f0:fa:1a:89:
32:38:20:3d:f7:a0:f0:be:50:81:47:07:eb:c5:4c:
8d:78:be:7e:ae:37:9a:63:b0:30:5c:35:3b:b2:1d:
9e:9f:63:54:5a:e6:68:16:9d:34:a2:75:e9:dd:f8:
81:bf:df:ba:03:0e:ff:b1:00:bb:cc:a7:58:25:49:
65:64:26:fc:3f:dd:63:74:6a:33:27:46:87:e3:40:
10:b4:c0:74:e5:55:48:91:16:f1:d3:3b:ad:f0:e5:
92:f8:b1:0d:ba:0e:83:01:47:47:68:5c:54:69:ca:
03:02:e1:46:7b:cb:11:4a:bd:5f:76:59:5e:db:76:
7f:04:e9:ee:e1:26:92:bf:6a:44:da:9d:21:e3:86:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:29:E8:91:56:FA:01:32:12:BF:A8:0E:DA:44:50:4B:7B:46:15:A5
X509v3 Authority Key Identifier:
keyid:30:01:9B:C8:1D:E4:AA:4E:B2:9F:9B:47:98:1C:17:F1:A0:B2:BA:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:70:bb:d6:12:e0:b1:a2:97:83:19:ed:74:86:70:f0:b9:44:
5c:e8:b7:b0:23:e9:0b:58:70:c0:a7:30:94:b0:0b:de:e5:25:
5c:6b:8e:5e:d9:36:8f:91:de:99:65:e9:2a:4d:17:9a:9b:a0:
28:13:e6:7c:a4:3b:48:60:94:fb:f6:4b:d1:9f:01:e1:98:86:
f4:19:88:68:cc:32:3a:19:12:98:2e:8a:f9:22:95:f3:09:08:
55:4b:bc:65:5c:b4:1d:ec:0b:61:3b:64:96:55:76:4c:ff:2c:
14:6d:f8:e5:52:43:36:67:c3:9b:07:c0:3f:be:06:bb:36:c2:
82:a7:3c:9e:96:66:d0:ce:0e:af:74:df:50:d8:30:75:1a:0e:
48:48:2b:79:41:ce:d7:dd:b6:9b:0b:46:db:76:af:4c:c9:46:
57:97:2d:97:ef:fa:98:bd:6a:91:b6:0f:b0:c5:63:76:24:da:
c0:a7:19:27:cf:da:d9:98:17:7b:0f:b4:3a:81:ad:60:0f:86:
aa:07:9e:02:69:8b:f5:3a:85:fc:15:28:e5:89:aa:cf:ad:ce:
0b:7c:f1:5e:9c:2f:fb:5e:5c:e3:9e:db:ef:1a:91:14:58:18:
17:82:74:b7:ee:77:eb:21:bc:97:cd:0b:2e:59:37:4f:68:f5:
6d:20:21:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDPnXoNTskVvtoJddm2LuhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMDE5YmM4MWRlNGFhNGViMjlmOWI0Nzk4MWMxN2YxYTBi
MmJhNzIwHhcNMjYxMDI4MTYwMTEwWhcNMjYxMDI5MTYwMTEwWjAzMTEwLwYDVQQD
EygzNTI5ZTg5MTU2ZmEwMTMyMTJiZmE4MGVkYTQ0NTA0YjdiNDYxNWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R8dz4bctC/kU/94dSjZNWF6A4h8
5rA3hNgJujsrz+Hz1hhEcRhsME7wDe/oLYPirmWw7E0BTtmC0Zq/GaFkDtTyznsR
hT2aVoVPcHO7QDXMztqKG7A2q3U9AlApqzxcHAfE3AVGIL4rF2DncR7ap5M7MvD6
GokyOCA996DwvlCBRwfrxUyNeL5+rjeaY7AwXDU7sh2en2NUWuZoFp00onXp3fiB
v9+6Aw7/sQC7zKdYJUllZCb8P91jdGozJ0aH40AQtMB05VVIkRbx0zut8OWS+LEN
ug6DAUdHaFxUacoDAuFGe8sRSr1fdlle23Z/BOnu4SaSv2pE2p0h44arKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUp6JFW+gEyEr+oDtpEUEt7RhWlMB8GA1UdIwQY
MBaAFDABm8gd5KpOsp+bR5gcF/GgsrpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUFHYnlCM2txazZ5bjV0SG1Cd1g4YUN5dW5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yMGFhYjMtMGUxNy00YmUyLTk4NzAt
ZTI5MmQ3YTdhNGIxLzEvTUFHYnlCM2txazZ5bjV0SG1Cd1g4YUN5dW5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yMGFhYjMtMGUxNy00YmUyLTk4NzAtZTI5MmQ3YTdhNGIx
LzEvTUFHYnlCM2txazZ5bjV0SG1Cd1g4YUN5dW5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXC71hLg
saKXgxntdIZw8LlEXOi3sCPpC1hwwKcwlLAL3uUlXGuOXtk2j5HemWXpKk0Xmpug
KBPmfKQ7SGCU+/ZL0Z8B4ZiG9BmIaMwyOhkSmC6K+SKV8wkIVUu8ZVy0HewLYTtk
llV2TP8sFG345VJDNmfDmwfAP74GuzbCgqc8npZm0M4Or3TfUNgwdRoOSEgreUHO
1922mwtG23avTMlGV5ctl+/6mL1qkbYPsMVjdiTawKcZJ8/a2ZgXew+0OoGtYA+G
qgeeAmmL9TqF/BUo5Ymqz63OC3zxXpwv+15c457b7xqRFFgYF4J0t+536yG8l80L
Llk3T2j1bSAhhQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 02:16:35 2026 by rpki-client