
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.mft
File: mGpc6Mx8vBzhNJbJgaibw0cufgs.mft (raw, json)
Hash identifier: 74lC+g8SCq4HVqmg2nyLgW5ES31aIQ9efb6QH9Pd8rY=
Subject key identifier: 35:D1:CB:13:F5:BF:59:7A:0E:E3:46:81:C5:C7:F7:20:C9:D5:DE:59
Authority key identifier: 98:6A:5C:E8:CC:7C:BC:1C:E1:34:96:C9:81:A8:9B:C3:47:2E:7E:0B
Certificate issuer: /CN=986a5ce8cc7cbc1ce13496c981a89bc3472e7e0b
Certificate serial: 019D3789333CEBD5A2E5098DAB0CA4B51544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGpc6Mx8vBzhNJbJgaibw0cufgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.mft
Manifest number: 9D
Signing time: Sun 29 Mar 2026 03:00:31 +0000
Manifest this update: Sun 29 Mar 2026 03:00:31 +0000
Manifest next update: Mon 30 Mar 2026 03:00:31 +0000
Files and hashes: 1: mGpc6Mx8vBzhNJbJgaibw0cufgs.crl (hash: YTYJsyd1NoHEFsuXPRrINWuBSRBHxFpUbsDOmznH87Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGpc6Mx8vBzhNJbJgaibw0cufgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:33:3c:eb:d5:a2:e5:09:8d:ab:0c:a4:b5:15:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986a5ce8cc7cbc1ce13496c981a89bc3472e7e0b
Validity
Not Before: Mar 29 03:00:31 2026 GMT
Not After : Mar 30 03:00:31 2026 GMT
Subject: CN=35d1cb13f5bf597a0ee34681c5c7f720c9d5de59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c1:30:11:29:a7:bd:26:ae:2b:67:d3:2e:a5:
2c:4e:18:fd:d0:45:b2:15:32:79:53:cc:29:79:f3:
68:a2:05:ac:4b:1e:f2:3b:f6:2a:f2:0c:9c:df:f0:
c3:28:3d:dd:f2:9e:fd:7e:12:3b:56:20:e7:48:ef:
3f:7b:ef:4f:3a:65:35:af:5e:73:b3:9e:29:68:cd:
9b:db:2c:42:45:cb:ba:76:11:32:de:5d:b0:2c:e1:
d2:ef:62:a9:7f:22:57:02:5d:35:75:4b:0d:0e:ff:
d2:bc:44:7e:b5:79:78:a7:51:20:99:78:2b:1f:d9:
61:b5:6b:a4:6d:11:7a:1b:40:db:22:99:8d:3e:c3:
bf:b9:c7:63:9a:93:72:cd:c7:07:5e:cd:0a:a7:df:
38:39:68:87:8d:7a:bc:83:66:70:08:a0:ed:35:f8:
5a:5f:12:ed:ea:3f:e4:e4:3a:7e:d7:63:78:9e:86:
62:8a:43:74:6f:30:19:36:66:d7:ce:79:ac:7f:28:
ef:5f:89:22:83:49:fe:5b:74:f3:1d:64:79:92:02:
fc:62:d6:96:d0:75:70:81:a6:ce:69:6d:3a:00:cc:
69:b6:b7:6a:0f:77:54:d2:5f:92:03:11:11:a2:3e:
46:a5:a8:09:41:15:97:e3:61:65:8c:68:6b:bd:2d:
ef:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D1:CB:13:F5:BF:59:7A:0E:E3:46:81:C5:C7:F7:20:C9:D5:DE:59
X509v3 Authority Key Identifier:
keyid:98:6A:5C:E8:CC:7C:BC:1C:E1:34:96:C9:81:A8:9B:C3:47:2E:7E:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGpc6Mx8vBzhNJbJgaibw0cufgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1e:ae:17:e9:d3:d5:3d:b3:de:0f:32:ee:96:77:08:9e:68:
c2:18:7d:75:b7:9d:93:7a:18:5b:46:e0:9b:f7:69:01:c4:52:
28:3f:aa:18:10:98:27:58:9b:61:6f:70:e4:97:49:fa:fe:ef:
2b:79:ec:fd:8f:13:8c:a1:88:69:42:d0:49:8a:2e:98:44:1d:
70:3b:a7:ae:ac:f2:65:73:25:c5:1c:be:ba:90:43:10:ca:53:
4a:83:f2:a1:c3:c9:9c:45:29:39:35:eb:b1:1a:dc:7a:5a:0c:
fe:29:aa:a1:09:89:03:6e:22:16:cd:32:aa:dd:5c:82:ca:c4:
2e:ff:e5:de:2d:fe:dd:45:7b:a0:5c:3f:06:48:c2:7e:3d:08:
ab:e8:2b:04:5a:99:b7:ad:3e:b5:56:2a:56:1c:40:18:9f:18:
cc:7f:8c:69:5c:72:5c:55:d9:78:83:5f:66:dd:26:4f:bc:3e:
68:13:61:55:8d:00:ac:70:1d:21:b8:5e:6d:83:98:55:38:bb:
e1:37:38:50:ff:54:70:f8:97:6a:a1:80:b4:e7:92:76:ed:ee:
55:6a:8d:df:e4:ff:38:5b:97:0d:06:f5:72:07:81:39:08:7f:
22:19:4c:80:7e:1f:d1:de:94:ec:e8:98:4b:56:fc:0a:b2:73:
c6:95:e3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:41 2026 by rpki-client