Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
File: MAGbyB3kqk6yn5tHmBwX8aCyunI.mft (raw, json)
Hash identifier: ruDQI/5Pizkl4g56hRmd44rPrS9SUIsrTmJhpYnFLhw=
Subject key identifier: FA:A5:4C:1E:6C:D7:29:D0:3D:20:96:44:B4:FF:58:36:7C:65:12:EF
Authority key identifier: 30:01:9B:C8:1D:E4:AA:4E:B2:9F:9B:47:98:1C:17:F1:A0:B2:BA:72
Certificate issuer: /CN=30019bc81de4aa4eb29f9b47981c17f1a0b2ba72
Certificate serial: 01A091D84463A609EC143D274F707410CA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
Manifest number: 5E
Signing time: Fri 11 Sep 2026 19:01:04 +0000
Manifest this update: Fri 11 Sep 2026 19:01:04 +0000
Manifest next update: Sat 12 Sep 2026 19:01:04 +0000
Files and hashes: 1: MAGbyB3kqk6yn5tHmBwX8aCyunI.crl (hash: XsVPz20lxwjJZMegkQ6kpnIYbswyfo7X13o58d82UaU=)
2: pNQEQwwSVbDCMLAveVXd1mwHJeQ.roa (hash: dBVLbfqlR4GtBzx1f02M/qqFPs/aMyQuLiXl/XvXTiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:d8:44:63:a6:09:ec:14:3d:27:4f:70:74:10:ca:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30019bc81de4aa4eb29f9b47981c17f1a0b2ba72
Validity
Not Before: Sep 11 19:01:04 2026 GMT
Not After : Sep 12 19:01:04 2026 GMT
Subject: CN=faa54c1e6cd729d03d209644b4ff58367c6512ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9c:a0:c8:79:0a:24:0b:fb:c5:32:e2:ab:97:
6d:02:b1:80:6f:c9:e6:05:21:3c:e3:cb:ea:c3:c4:
93:5e:ec:97:e1:61:96:84:a8:46:38:54:38:2c:65:
1d:25:e7:a4:73:bc:50:2b:71:1d:57:e5:92:30:95:
93:96:eb:09:6b:81:9f:8a:36:75:3d:af:9b:a2:d2:
88:28:f2:18:b5:c8:56:43:dc:78:76:e7:cd:00:d8:
e4:7b:ed:00:7d:17:d8:9d:7b:9d:b5:eb:cf:5a:ca:
61:7f:94:3f:c9:28:8e:49:23:de:c0:0c:37:0f:78:
95:d4:a2:a5:34:e5:96:fa:d8:ce:68:ee:9d:69:8e:
c9:08:54:7b:f1:42:44:30:44:a8:3c:24:68:8b:e7:
46:d9:5f:ef:92:95:0d:6f:0f:5c:3e:f5:17:2b:0d:
84:08:0e:2b:33:ad:b9:5c:e0:1d:21:50:5c:f6:2e:
f1:a4:1b:95:f9:45:66:c1:5a:b0:4c:75:10:ef:da:
ed:53:ed:98:68:79:f7:66:09:66:0d:be:be:58:e5:
3a:83:3a:0d:c3:d9:50:7f:4d:0c:b0:80:b8:3b:e2:
4d:49:2c:ec:c1:74:f8:21:b5:2a:cf:86:1b:fc:61:
48:46:dd:74:fd:2d:7c:33:47:7c:dd:85:03:88:c1:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A5:4C:1E:6C:D7:29:D0:3D:20:96:44:B4:FF:58:36:7C:65:12:EF
X509v3 Authority Key Identifier:
keyid:30:01:9B:C8:1D:E4:AA:4E:B2:9F:9B:47:98:1C:17:F1:A0:B2:BA:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e0:77:39:77:4a:aa:33:d6:68:30:c8:5b:31:3b:21:4a:92:
22:4d:ed:67:9f:3a:03:db:75:03:63:4b:d9:04:02:c4:51:02:
d3:43:e4:ca:09:87:02:17:f8:62:6a:9e:d1:de:19:40:d0:64:
95:04:db:ba:a1:7a:ac:42:79:da:f6:f1:df:bd:1b:b4:01:d1:
e4:2e:02:ed:e7:2c:1c:5f:8b:f6:a7:ac:4b:ec:95:1a:10:dc:
e0:55:9a:bd:d1:b8:d7:8b:2d:dd:d7:b9:cb:50:d6:50:a6:0e:
4a:49:a7:0e:bf:39:a2:12:7e:88:69:7e:ad:8d:7b:07:70:a1:
39:79:d7:ab:6f:7b:fe:9e:37:e6:f7:e2:6b:5b:84:32:3a:66:
96:5b:15:57:66:45:8b:e8:0c:d7:da:c3:75:10:a9:a3:17:86:
12:39:b7:72:b6:46:2f:b0:9b:3e:66:b1:86:d7:fe:50:87:63:
60:75:6c:bf:1b:2d:05:56:b6:00:bc:9c:76:ee:08:62:49:23:
17:6e:9b:2e:f5:42:08:45:9d:e6:3f:aa:21:13:b1:8e:53:84:
ca:ea:4e:41:c5:8b:28:2e:34:c2:44:8b:55:29:3f:01:ae:3c:
ed:97:12:39:63:19:fc:3b:f1:0b:e7:3b:87:83:8d:9c:53:b7:
81:bd:cd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 04:29:25 2026 by rpki-client