Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
File: MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft (raw, json)
Hash identifier: EN/tDIFK7uJyzeIEfEkInA4wZHdLJmBu7pbr1uAralM=
Subject key identifier: 85:F3:58:27:1F:A3:DB:8A:25:72:61:70:00:98:33:39:3F:0F:D6:42
Authority key identifier: 32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43
Certificate issuer: /CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
Certificate serial: 019D37F79176BC45B3199FF2E2F311B20398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
Manifest number: 0872
Signing time: Sun 29 Mar 2026 05:01:04 +0000
Manifest this update: Sun 29 Mar 2026 05:01:04 +0000
Manifest next update: Mon 30 Mar 2026 05:01:04 +0000
Files and hashes: 1: MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl (hash: v9fA/KbgeP5CDe/05IySf+Cs3/JsTsgZElxa1Pv4xqI=)
2: T-lMXkCMAUn1cSmP84QNKdTnqzE.roa (hash: u0b6RMkrcz22t0V1+AakCj/CnEAS32OtK5Ml5FCc9x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:91:76:bc:45:b3:19:9f:f2:e2:f3:11:b2:03:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
Validity
Not Before: Mar 29 05:01:04 2026 GMT
Not After : Mar 30 05:01:04 2026 GMT
Subject: CN=85f358271fa3db8a25726170009833393f0fd642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f1:44:2f:1a:04:97:7a:7d:df:77:cc:2e:cf:
82:de:fe:a8:64:b2:ed:a4:55:a6:fe:7c:b0:0b:05:
b6:f8:f0:68:2c:e5:15:ad:52:c6:94:c4:9f:59:4d:
84:67:52:12:74:9c:df:25:49:8d:85:2b:4c:6a:07:
05:fc:4a:c6:15:0b:55:81:e9:04:06:61:d3:27:e1:
d5:31:93:76:be:e5:11:81:87:68:3d:34:9a:00:cb:
b7:ef:7a:2c:28:96:32:31:88:79:09:4d:dd:73:6c:
e3:94:0a:63:f1:19:91:f3:09:62:d3:40:56:bb:54:
a7:ac:4b:4e:72:26:ce:fd:71:d5:ab:d6:5b:96:9b:
c1:64:1b:c9:7b:30:f2:e1:c7:60:ae:f3:54:72:57:
81:3e:6b:26:8b:30:eb:a4:55:6a:87:e7:d1:08:64:
1c:6f:53:a1:54:c1:00:63:76:32:22:fc:8e:72:e3:
24:cf:b8:08:9b:94:b6:90:08:93:b0:e6:8c:d8:d0:
97:e0:ae:3c:d6:45:da:70:eb:1e:8b:df:d8:72:53:
62:7d:c7:04:87:dd:09:92:5a:1f:f2:71:a9:69:6d:
91:01:3d:10:08:ed:62:b0:ce:79:08:0d:a8:84:44:
dc:9f:57:16:f6:af:75:65:ed:28:b0:1a:38:61:82:
23:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F3:58:27:1F:A3:DB:8A:25:72:61:70:00:98:33:39:3F:0F:D6:42
X509v3 Authority Key Identifier:
keyid:32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3e:85:7d:bb:23:57:b3:28:46:ea:12:39:cf:89:f7:5e:71:
7d:8c:fa:07:b4:1c:c8:4b:bd:fb:68:fb:54:44:c6:a7:cf:4b:
e2:90:b8:63:1f:5d:b6:80:8f:ee:a5:d4:ac:2a:ab:74:8d:e6:
16:87:23:d7:29:ec:46:00:d9:04:c4:c6:c7:f7:6b:52:a9:b3:
aa:1b:70:ca:b3:e1:a3:1b:23:75:15:68:8d:fd:29:52:62:5a:
67:8c:46:7c:05:47:06:98:76:5c:bb:83:31:01:68:fb:5e:23:
86:ff:17:5f:29:0c:85:1b:59:94:6e:0f:f9:af:68:10:58:70:
27:ec:66:3d:7f:ef:14:a1:9d:54:1e:97:da:e1:c3:f6:74:bb:
40:b0:e3:66:d1:45:69:a2:cb:4a:f5:18:be:d9:39:14:c6:83:
66:58:bf:ad:d9:24:04:09:7c:dc:4a:e7:1f:7c:be:37:e9:26:
81:df:4e:0b:e5:bf:17:19:4c:12:e9:d4:8c:e0:b0:54:51:ae:
7f:b5:75:84:e7:e8:9c:c2:a3:c7:04:61:5f:e8:9d:f5:7c:2f:
df:6f:ac:66:94:94:ba:89:78:ad:2b:52:d0:67:f0:bf:73:da:
88:23:a4:28:ef:71:80:49:aa:aa:34:03:83:70:67:c2:ef:8f:
94:7e:5d:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0395F2vEWzGZ/y4vMRsgOYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDRjMDNjMzZjODA2ZDY4N2U4M2VhOGQyNzIwY2VlYmJi
ZGMzNDMwHhcNMjYwMzI5MDUwMTA0WhcNMjYwMzMwMDUwMTA0WjAzMTEwLwYDVQQD
Eyg4NWYzNTgyNzFmYTNkYjhhMjU3MjYxNzAwMDk4MzMzOTNmMGZkNjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fFELxoEl3p933fMLs+C3v6oZLLt
pFWm/nywCwW2+PBoLOUVrVLGlMSfWU2EZ1ISdJzfJUmNhStMagcF/ErGFQtVgekE
BmHTJ+HVMZN2vuURgYdoPTSaAMu373osKJYyMYh5CU3dc2zjlApj8RmR8wli00BW
u1SnrEtOcibO/XHVq9ZblpvBZBvJezDy4cdgrvNUcleBPmsmizDrpFVqh+fRCGQc
b1OhVMEAY3YyIvyOcuMkz7gIm5S2kAiTsOaM2NCX4K481kXacOsei9/YclNifccE
h90Jklof8nGpaW2RAT0QCO1isM55CA2ohETcn1cW9q91Ze0osBo4YYIjowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXzWCcfo9uKJXJhcACYMzk/D9ZCMB8GA1UdIwQY
MBaAFDIEwDw2yAbWh+g+qNJyDO67vcNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81YmY3OTctYmM1NS00OGMxLTllOTIt
OTkyODI1Y2QzMjE0LzEvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81YmY3OTctYmM1NS00OGMxLTllOTItOTkyODI1Y2QzMjE0
LzEvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfT6Ffbsj
V7MoRuoSOc+J915xfYz6B7QcyEu9+2j7VETGp89L4pC4Yx9dtoCP7qXUrCqrdI3m
Focj1ynsRgDZBMTGx/drUqmzqhtwyrPhoxsjdRVojf0pUmJaZ4xGfAVHBph2XLuD
MQFo+14jhv8XXykMhRtZlG4P+a9oEFhwJ+xmPX/vFKGdVB6X2uHD9nS7QLDjZtFF
aaLLSvUYvtk5FMaDZli/rdkkBAl83ErnH3y+N+kmgd9OC+W/FxlMEunUjOCwVFGu
f7V1hOfonMKjxwRhX+id9Xwv32+sZpSUuol4rStS0Gfwv3PaiCOkKO9xgEmqqjQD
g3Bnwu+PlH5dUg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:03 2026 by rpki-client