Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
File: mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json)
Hash identifier: yw1SQp9ddRFTp8oS+d558nGLoEPCC+8F0GC/XuZBG+8=
Subject key identifier: CD:BA:36:87:F0:3C:24:0C:35:C0:47:B9:3C:76:72:2C:83:50:AE:8D
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial: 019D37C09187813C3C26CD910BEC0A79ACA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
Manifest number: 0F6D
Signing time: Sun 29 Mar 2026 04:01:00 +0000
Manifest this update: Sun 29 Mar 2026 04:01:00 +0000
Manifest next update: Mon 30 Mar 2026 04:01:00 +0000
Files and hashes: 1: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: ThWQVexVAdE69XDhC5plJFmdUHRRl5HGjhGxTU4+hAI=)
2: pgk6nsI3cK4BMyAq4yo3QkbL4pU.roa (hash: FD9gDw7QMQ6LHr1l8voFmg+wOG9WJ0q/3TSPnokXHZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:91:87:81:3c:3c:26:cd:91:0b:ec:0a:79:ac:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Validity
Not Before: Mar 29 04:01:00 2026 GMT
Not After : Mar 30 04:01:00 2026 GMT
Subject: CN=cdba3687f03c240c35c047b93c76722c8350ae8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:37:32:c6:6b:37:83:4b:ef:d2:35:eb:f1:
0c:60:5e:f3:6c:e1:d6:c3:30:0d:03:34:31:8b:c8:
b7:cd:17:fe:e2:8e:3a:b5:4c:63:53:11:3b:36:eb:
20:3e:18:dd:2a:f5:98:a8:07:d3:d8:18:1e:c2:33:
9f:51:0d:f3:4c:92:45:8e:47:dd:04:ca:5c:67:e5:
72:ab:51:ea:fd:e0:38:a8:ec:09:2f:1e:7c:4a:00:
94:0a:c1:c4:7a:ec:61:db:93:51:87:5d:84:ba:2a:
43:7b:1a:39:94:cb:ee:0d:a2:8f:97:64:ec:e9:71:
8e:1e:e2:b9:53:93:00:17:fc:7c:c7:66:a0:06:d1:
41:d0:e2:c2:7b:c8:05:2b:ce:ca:af:ec:8d:78:40:
de:31:a6:21:96:83:c6:c0:5a:b5:c7:7a:e2:57:e3:
1b:66:a9:c4:3d:03:c2:60:df:7b:5d:c1:c8:01:57:
9f:01:ee:ef:d5:4e:80:93:91:31:db:de:4a:90:5e:
f4:e8:16:3d:3a:c2:3c:f0:33:f2:71:a4:89:a4:b9:
1b:1a:c0:95:19:6d:07:4b:97:13:66:34:82:ec:66:
35:f6:cb:d0:a0:88:17:cf:0c:36:c8:f0:d5:b3:18:
f3:6b:40:88:03:62:14:f8:8e:ad:c1:1b:24:84:7b:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BA:36:87:F0:3C:24:0C:35:C0:47:B9:3C:76:72:2C:83:50:AE:8D
X509v3 Authority Key Identifier:
keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c3:a3:5b:29:a0:0e:df:ad:80:86:96:6c:17:54:e1:ad:09:
d3:58:20:0f:8c:0d:3f:63:cd:a5:a1:a2:11:e1:b4:54:81:f5:
62:fb:4c:fb:69:ca:f4:76:f4:90:73:cf:8f:cc:42:8e:44:91:
1c:fb:09:7c:b1:41:a8:2f:cd:04:d4:6e:1f:9a:f2:79:9e:2d:
d8:e4:a9:2e:89:c6:a7:93:12:27:30:2f:ff:ac:64:a9:eb:0b:
fc:e1:17:d2:46:06:fd:39:65:98:ce:c8:0a:e3:fe:22:00:6b:
5a:94:62:56:d1:5c:14:f5:27:93:1a:f9:6e:33:06:c7:2b:0a:
47:dc:52:ec:74:94:e1:80:cc:65:c9:bc:0b:ce:b2:19:ba:69:
22:19:58:3e:bb:9a:0c:be:4a:a1:a7:0c:00:35:8d:2a:e2:50:
c3:14:8d:84:a4:30:f0:85:aa:c8:19:99:ae:77:3a:c3:69:c4:
4e:0c:91:50:58:f4:46:26:38:f1:0a:42:ee:d9:35:81:88:7f:
c9:f6:12:e0:1b:c0:6f:a7:a8:ac:fa:38:cd:81:8f:ec:50:3f:
af:2b:e5:39:29:98:2b:c8:bf:86:b4:06:f2:e5:c8:90:40:04:
a6:b8:b5:d5:76:cc:8b:c7:2b:60:c2:76:ee:c6:0c:f8:06:45:
98:fb:d6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:33 2026 by rpki-client