Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File: mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier: NumgGMvj8C1fsthCn1+sZnnIg9YcG/GOi8ssx2oFDyk=
Subject key identifier: 57:3E:0E:5B:04:8D:6B:CD:EC:EF:40:05:BD:CC:E0:34:E8:BF:36:C7
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial: 019F189E68B62595F70B94AEF2790DED1584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number: 1066
Signing time: Tue 30 Jun 2026 13:01:02 +0000
Manifest this update: Tue 30 Jun 2026 13:01:02 +0000
Manifest next update: Wed 01 Jul 2026 13:01:02 +0000
Files and hashes: 1: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: E5wdLfi/8HN7PcWZqtT/TAcoIhwtp3u0K3M+sqnFpLU=)
2: pgk6nsI3cK4BMyAq4yo3QkbL4pU.roa (hash: FD9gDw7QMQ6LHr1l8voFmg+wOG9WJ0q/3TSPnokXHZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:68:b6:25:95:f7:0b:94:ae:f2:79:0d:ed:15:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Validity
Not Before: Jun 30 13:01:02 2026 GMT
Not After : Jul 1 13:01:02 2026 GMT
Subject: CN=573e0e5b048d6bcdecef4005bdcce034e8bf36c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:d9:b2:2b:25:a1:20:37:01:1b:1a:a8:77:
07:c2:09:87:25:07:6e:e8:a5:ba:4a:91:da:ae:ff:
68:28:2c:e2:50:dc:72:1a:2f:7e:54:48:40:ad:38:
e7:4b:86:0e:36:9a:2d:77:11:43:11:8e:42:e8:41:
c6:94:cb:31:c8:55:26:f4:3d:e7:91:50:55:1a:a5:
bf:86:57:83:30:34:88:94:74:63:23:85:4d:66:8b:
c1:18:d9:4a:1b:a2:d5:08:39:f6:f3:db:69:ad:f9:
56:43:c8:e4:1a:b8:54:29:a6:e4:df:b4:31:b9:38:
47:73:2a:5a:5e:ba:68:7d:f9:8b:62:0f:db:4d:55:
81:c4:13:0d:90:85:9e:ca:ff:43:67:2e:27:28:45:
b6:55:80:14:bc:85:9f:26:87:3e:68:d1:a4:d0:c7:
13:30:95:b5:71:99:31:bd:13:ac:06:52:73:02:49:
7f:05:91:fd:64:e9:55:cd:e5:26:c4:ff:52:12:cf:
43:b0:5b:92:2f:2f:19:a9:76:0e:1c:74:f2:0a:e3:
76:c9:da:b2:a9:a6:1d:42:62:fa:8f:f3:d4:bb:64:
81:6e:d1:c0:58:3d:cd:58:72:4b:72:99:f6:4c:e8:
ab:0f:36:c0:fa:26:44:ec:5a:0f:18:15:af:71:cc:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3E:0E:5B:04:8D:6B:CD:EC:EF:40:05:BD:CC:E0:34:E8:BF:36:C7
X509v3 Authority Key Identifier:
keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:55:44:33:29:79:0e:33:70:4c:49:bf:d9:72:fa:a2:ec:3f:
b4:27:c1:5d:29:7d:d8:ad:a4:5f:d8:28:66:7e:b9:60:e5:73:
ea:79:e6:d0:2e:de:98:48:22:72:5f:9e:be:e8:e1:96:d3:11:
a4:ef:51:e8:d8:23:e0:44:42:7e:4f:b9:74:b9:63:bd:64:99:
db:36:a1:82:f5:76:e1:bc:8f:c8:c1:58:e9:bb:7a:f2:d1:c3:
cc:e1:52:f7:02:a1:e6:57:43:1e:21:5f:e6:5d:dd:6f:19:1e:
2a:eb:bf:93:3d:6c:51:6f:33:32:a7:ae:f5:4a:fa:a7:3f:be:
8c:e9:41:5d:bd:15:d2:d3:82:48:78:1c:5f:9d:14:6a:44:76:
a0:6d:17:21:31:22:a2:7a:a3:d3:63:e1:bf:44:6e:ad:bf:df:
ed:20:ca:e9:cd:b8:e9:88:23:6c:22:13:1e:a2:6b:7e:05:8e:
1a:ca:20:59:dc:ac:d9:0a:04:7d:d1:b1:3d:47:35:95:47:f7:
e4:80:f5:db:d5:22:de:6d:c2:68:5d:3c:6c:62:af:c2:1c:a1:
81:dc:01:5f:73:ac:c2:45:9f:bd:b6:1e:3c:26:ea:4e:ab:c4:
da:b5:53:73:12:fb:d4:52:1d:b8:3e:c2:d9:e8:e8:5c:f3:40:
e4:f7:77:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:20 2026 by rpki-client