Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
File: mGzlJJY15OKWTTdEk9zDeoddBTk.mft (raw, json)
Hash identifier: PleFt/uv5kZDPAScti48UzUJf/HKUphVXC8wQSvqO/s=
Subject key identifier: A1:EB:4E:DA:B8:D3:FE:0D:1F:6F:A1:28:8D:2C:F9:3F:9E:A4:BC:07
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial: 019CE4B5A4724B1D0FBC26A37817FC697409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
Manifest number: 1863
Signing time: Fri 13 Mar 2026 01:00:35 +0000
Manifest this update: Fri 13 Mar 2026 01:00:35 +0000
Manifest next update: Sat 14 Mar 2026 01:00:35 +0000
Files and hashes: 1: ftwoquu3DFj4eBFEtCkmR8T9CQA.roa (hash: 4rlrRLmH28vbIC123d5cUoLsBf7n1zeaVCkiEqiDVnA=)
2: mGzlJJY15OKWTTdEk9zDeoddBTk.crl (hash: xupoJGitvTCbtHflfhb4qLh4J8XKfv77/Q10qjcWtfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:a4:72:4b:1d:0f:bc:26:a3:78:17:fc:69:74:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
Validity
Not Before: Mar 13 01:00:35 2026 GMT
Not After : Mar 14 01:00:35 2026 GMT
Subject: CN=a1eb4edab8d3fe0d1f6fa1288d2cf93f9ea4bc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f6:50:cd:40:69:12:a7:f5:53:5e:34:1f:e2:
b5:80:e6:f5:76:eb:05:d4:34:cc:f7:92:4f:cb:eb:
c9:f8:d8:dc:0d:8b:de:79:e7:ce:f3:09:df:40:4b:
3b:da:83:92:7c:3b:81:40:a8:e6:9a:77:e0:e7:8b:
f1:96:79:22:3c:81:5f:e3:5c:c2:f8:4d:83:91:40:
1c:8f:7d:b7:18:33:42:90:c1:85:27:1b:d5:eb:23:
47:a4:ee:93:4b:ce:b9:9b:8f:c8:0a:3d:a8:17:b1:
d1:86:8a:5b:1a:da:0b:ed:90:75:59:5b:c6:6a:27:
06:79:91:c5:7a:63:20:ec:dc:00:42:a0:ca:50:27:
3a:92:51:31:bc:b5:08:cb:89:44:e4:68:07:38:64:
87:9d:91:be:05:99:bf:b2:af:b0:82:95:91:00:49:
73:96:5c:37:74:fc:76:69:c8:f8:d4:69:d6:2f:dd:
52:6a:bb:0f:92:fb:f4:84:2e:4c:52:72:ad:20:53:
45:e2:ca:79:30:46:99:e4:89:a0:d7:c4:50:7b:c2:
3f:eb:fa:20:d0:e8:8b:70:10:59:45:9c:48:6d:15:
2b:b2:e5:92:28:9d:0d:ac:c5:a7:90:3d:3a:cc:65:
e2:6a:fd:0b:aa:22:08:98:3e:25:b1:6d:a6:30:a3:
75:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EB:4E:DA:B8:D3:FE:0D:1F:6F:A1:28:8D:2C:F9:3F:9E:A4:BC:07
X509v3 Authority Key Identifier:
keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ee:02:6c:9a:50:57:1b:aa:d7:16:46:5d:bb:92:57:57:d0:
28:a9:2e:9d:5b:3c:67:b9:61:fb:ae:14:45:d8:1c:15:3e:b2:
c6:cd:ed:76:f3:8a:3a:3f:03:0f:41:2b:c6:ca:f6:2a:7a:4d:
b9:01:80:08:a4:6d:a6:cd:56:29:65:96:78:1c:22:5e:fb:ad:
b4:7a:58:2b:30:36:e9:11:ae:47:d3:25:cd:7d:a1:0a:30:5f:
63:86:9f:2d:c3:e7:6b:f9:28:73:97:60:43:0a:55:9c:e1:14:
46:84:43:ac:21:d8:7f:38:62:f6:5e:0e:cf:88:1d:a9:49:78:
55:8c:76:2d:5f:73:62:c7:77:04:d2:9e:4f:cb:db:92:17:c5:
11:3d:62:ab:9a:1f:af:4e:75:34:45:6c:d8:81:b5:24:5e:c6:
36:28:04:1f:9e:b3:6e:fe:db:e4:33:ba:cd:9c:4e:51:f8:5d:
3c:93:56:01:51:01:69:42:45:7f:db:52:6f:07:bd:fc:3c:05:
fb:04:2c:82:84:91:31:01:b9:56:a9:83:c8:66:fc:fc:4c:1c:
55:f4:9a:e1:69:04:f0:1b:f6:45:07:ea:ba:29:8f:bb:44:bc:
fd:2f:36:d2:0b:49:07:c3:2d:aa:d9:86:c9:9a:f1:7f:5c:77:
24:95:47:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzktaRySx0PvCajeBf8aXQJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NmNlNTI0OTYzNWU0ZTI5NjRkMzc0NDkzZGNjMzdhODc1
ZDA1MzkwHhcNMjYwMzEzMDEwMDM1WhcNMjYwMzE0MDEwMDM1WjAzMTEwLwYDVQQD
EyhhMWViNGVkYWI4ZDNmZTBkMWY2ZmExMjg4ZDJjZjkzZjllYTRiYzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivZQzUBpEqf1U140H+K1gOb1dusF
1DTM95JPy+vJ+NjcDYveeefO8wnfQEs72oOSfDuBQKjmmnfg54vxlnkiPIFf41zC
+E2DkUAcj323GDNCkMGFJxvV6yNHpO6TS865m4/ICj2oF7HRhopbGtoL7ZB1WVvG
aicGeZHFemMg7NwAQqDKUCc6klExvLUIy4lE5GgHOGSHnZG+BZm/sq+wgpWRAElz
llw3dPx2acj41GnWL91SarsPkvv0hC5MUnKtIFNF4sp5MEaZ5Img18RQe8I/6/og
0OiLcBBZRZxIbRUrsuWSKJ0NrMWnkD06zGXiav0LqiIImD4lsW2mMKN1PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHrTtq40/4NH2+hKI0s+T+epLwHMB8GA1UdIwQY
MBaAFJhs5SSWNeTilk03RJPcw3qHXQU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2Mzct
YTI0M2NiZmFhZWYzLzEvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2MzctYTI0M2NiZmFhZWYz
LzEvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAau4CbJpQ
Vxuq1xZGXbuSV1fQKKkunVs8Z7lh+64URdgcFT6yxs3tdvOKOj8DD0Erxsr2KnpN
uQGACKRtps1WKWWWeBwiXvuttHpYKzA26RGuR9MlzX2hCjBfY4afLcPna/koc5dg
QwpVnOEURoRDrCHYfzhi9l4Oz4gdqUl4VYx2LV9zYsd3BNKeT8vbkhfFET1iq5of
r051NEVs2IG1JF7GNigEH56zbv7b5DO6zZxOUfhdPJNWAVEBaUJFf9tSbwe9/DwF
+wQsgoSRMQG5VqmDyGb8/EwcVfSa4WkE8Bv2RQfquimPu0S8/S820gtJB8MtqtmG
yZrxf1x3JJVH3Q==
-----END CERTIFICATE-----
Generated at Fri Mar 13 10:38:53 2026 by rpki-client