Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
File: MGavc-_zrCH_F6CVL_Nw5gykS10.mft (raw, json)
Hash identifier: CKTtR4qZlUiG5RgwA5+CL1gMhIttzDCgxP706ai9KVY=
Subject key identifier: 2B:62:10:F8:6C:25:10:A8:D8:CC:77:2A:47:BD:9C:7D:20:03:4F:48
Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
Certificate issuer: /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Certificate serial: 019D382E4CB5F2A44C229914964B20E3F92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:00:51 +0000
Manifest this update: Sun 29 Mar 2026 06:00:51 +0000
Manifest next update: Mon 30 Mar 2026 06:00:51 +0000
Files and hashes: 1: C1RBBN_ZVpEXr_O5XicmF9RRbqw.roa (hash: VWcYJnFNZXnjTlhzeEFW69/RT95ec57ErxUIeBg+zwo=)
2: MGavc-_zrCH_F6CVL_Nw5gykS10.crl (hash: dmo3iMValy4pB6yS32YdHtulBWMaQQ+nmgQHUEKQEHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:4c:b5:f2:a4:4c:22:99:14:96:4b:20:e3:f9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Validity
Not Before: Mar 29 06:00:51 2026 GMT
Not After : Mar 30 06:00:51 2026 GMT
Subject: CN=2b6210f86c2510a8d8cc772a47bd9c7d20034f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:d3:1c:9a:1e:62:13:55:88:c2:b6:9a:78:
98:59:66:70:99:65:7b:e8:8c:6f:29:2c:ed:71:5c:
7c:95:97:86:ee:cf:17:67:13:d5:ca:a1:5c:e4:3d:
07:11:9b:30:0d:86:5d:33:b3:ee:3c:d9:9a:96:db:
c1:a8:a4:be:f7:05:e5:5d:92:11:26:a0:d5:52:80:
c7:73:49:7c:71:00:d9:fb:2e:0d:cc:f9:9b:6e:0b:
cc:6a:50:67:2b:d0:64:55:36:1f:9a:98:01:c3:80:
31:35:cf:97:d7:56:fd:0e:52:61:6a:2a:cf:e6:f6:
64:c2:26:df:9f:e8:3f:df:f7:25:a6:6d:4d:1a:d3:
8d:26:f0:23:0b:51:c2:02:94:5d:e5:62:ba:fa:4d:
07:9f:1d:4d:dc:03:33:f7:b4:d3:3a:d9:2f:32:ca:
c5:b4:c9:41:42:e0:c4:25:b3:48:ab:77:a4:3d:9a:
97:64:33:09:52:4e:83:ed:b2:8b:dd:6b:81:2b:9b:
58:9d:17:a7:1f:d6:6a:ea:22:78:8f:52:e9:ce:f5:
bf:92:90:5d:1a:41:66:a3:8c:f9:ff:a8:ae:4a:c5:
75:a8:b6:ef:0c:3d:02:1f:97:81:92:59:94:76:61:
46:2d:8a:d7:eb:2f:d4:ca:49:19:4b:c0:19:5d:e1:
9a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:62:10:F8:6C:25:10:A8:D8:CC:77:2A:47:BD:9C:7D:20:03:4F:48
X509v3 Authority Key Identifier:
keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:05:87:e6:4a:af:c2:c3:bb:92:23:2d:28:ab:d1:f5:b6:72:
67:02:41:18:5a:72:59:38:e4:ee:38:b9:41:33:81:20:33:d8:
81:45:02:db:4a:20:7a:52:08:64:d3:80:73:a8:7d:f7:12:73:
42:e3:c8:5b:3d:04:39:37:29:de:b3:ce:2c:22:2a:58:82:69:
5f:2b:c1:76:03:83:8b:ce:98:c8:b9:c4:d3:a8:c0:9e:35:9b:
81:2e:e8:dc:8a:59:47:77:f4:b9:b7:f1:0e:da:29:17:5a:f0:
cb:95:a6:2d:c3:b8:5d:91:f1:90:64:83:a3:5e:f7:49:da:68:
d7:60:75:56:57:45:41:f0:d2:03:69:27:ed:10:84:7a:6a:a4:
3f:3d:63:29:a4:7d:8b:25:7c:c1:61:fa:e2:42:f0:68:ba:63:
da:58:87:16:05:ce:4d:a1:23:90:e2:65:55:e2:c7:ce:a7:90:
8f:b7:2a:f4:e4:e5:8a:2e:84:11:cc:f6:29:07:b3:da:09:2c:
d8:0f:e6:20:f5:53:50:b4:63:74:ef:bc:e1:34:ba:b7:22:08:
f7:b8:cd:80:f8:bb:f6:5a:00:1b:59:e3:1a:de:3a:84:33:4d:
d3:a1:70:d7:22:0c:93:e2:fd:bb:ba:83:5d:d7:dd:04:d4:08:
15:30:3b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:04 2026 by rpki-client