Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
File: mGzlJJY15OKWTTdEk9zDeoddBTk.mft (raw, json)
Hash identifier: TBbO0ADPqmG36yGlACod0R+dYUk6EchGYCRMpVo3mLw=
Subject key identifier: 38:AA:20:A1:49:2F:EF:EB:19:B6:36:8D:28:82:87:0F:C0:5D:54:B9
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial: 019E30E0866F816D5360524CEDFC115C8D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
Manifest number: 190F
Signing time: Sat 16 May 2026 13:01:21 +0000
Manifest this update: Sat 16 May 2026 13:01:21 +0000
Manifest next update: Sun 17 May 2026 13:01:21 +0000
Files and hashes: 1: ftwoquu3DFj4eBFEtCkmR8T9CQA.roa (hash: 4rlrRLmH28vbIC123d5cUoLsBf7n1zeaVCkiEqiDVnA=)
2: mGzlJJY15OKWTTdEk9zDeoddBTk.crl (hash: A5xTh9MW20pZdTe40M2nDU2B/612cT2+NtENSOc4sOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:86:6f:81:6d:53:60:52:4c:ed:fc:11:5c:8d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
Validity
Not Before: May 16 13:01:21 2026 GMT
Not After : May 17 13:01:21 2026 GMT
Subject: CN=38aa20a1492fefeb19b6368d2882870fc05d54b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:d3:7b:27:d2:a9:fc:dd:87:69:84:22:45:
17:c4:c3:27:06:ef:0f:a4:c5:7c:29:a9:5d:43:b7:
5a:83:22:83:7f:e3:2d:8c:21:65:a1:76:2a:f6:bf:
c2:97:e1:f1:48:53:07:2d:64:5d:57:00:01:90:4b:
98:31:3a:59:f6:9a:42:e8:0a:fc:27:57:4a:e6:e6:
45:8e:8c:b5:cb:4e:5a:8a:2b:82:0d:9e:65:e3:d4:
aa:2a:fd:7b:8b:5f:6d:16:80:56:18:90:fc:11:c2:
58:a0:db:30:80:76:09:24:b6:bc:8f:38:78:1f:55:
63:b2:50:10:08:81:50:92:b9:04:f7:4a:1b:2a:70:
a6:f6:6d:74:c8:e0:8d:ef:46:7d:71:3c:ca:2e:e1:
86:34:46:b5:6c:53:01:15:0a:0f:1c:7c:de:42:12:
38:20:5a:f6:23:7b:7e:7e:ab:91:1c:c4:23:ad:9a:
c2:36:33:c1:fa:ce:c3:2c:8e:c9:b6:c7:69:8b:57:
6a:1a:11:fb:ec:af:8f:9c:ed:a5:99:33:8b:0c:1e:
24:6f:a5:88:44:ab:24:e6:fb:bb:65:aa:1c:dd:d8:
fc:95:0f:fb:77:a8:3f:57:c8:22:51:23:c0:ad:60:
47:f6:74:f9:d1:17:1c:71:b6:44:c9:8b:08:1b:04:
02:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AA:20:A1:49:2F:EF:EB:19:B6:36:8D:28:82:87:0F:C0:5D:54:B9
X509v3 Authority Key Identifier:
keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0c:e8:43:b4:ec:e3:10:49:1b:4a:0c:67:c3:5f:58:ec:cb:
58:c6:5f:74:d3:6a:c8:74:6e:70:cd:70:8e:06:82:a6:a6:5b:
48:05:f6:bf:f2:0e:34:34:71:5c:63:6e:72:95:c0:eb:20:6d:
5a:c9:43:fc:a4:c5:2a:63:ba:31:b2:b6:b4:ea:5b:b8:f0:77:
4d:71:ec:a7:b5:39:59:f7:42:e6:84:29:a0:ef:f6:a9:04:7e:
eb:77:e0:4f:dc:f2:25:69:fe:3c:b6:d5:78:90:51:7f:2f:20:
c8:b9:45:b8:5f:4d:dc:63:c7:8b:d2:3e:c9:be:fb:f9:a3:cd:
11:c7:00:9e:b1:94:dd:55:cf:d5:55:e3:b1:58:0f:fc:b1:af:
ab:4b:32:d0:aa:67:8c:7e:17:b5:66:99:d7:5b:e3:96:e6:28:
8a:55:1e:d4:be:9e:dc:a6:34:dc:ec:ec:6a:a5:44:e6:6b:06:
31:22:68:a5:54:ce:f4:a4:a7:4d:e9:5c:8f:16:0f:fc:0e:6e:
be:86:85:e9:6d:92:bd:f2:2e:2c:73:07:38:e6:19:19:88:db:
9a:59:9a:6a:e2:50:f0:d9:c7:8b:1c:86:7a:05:9e:3a:a7:c3:
8a:ca:80:4d:4f:83:f5:05:08:60:28:c2:37:fe:da:67:f7:0e:
35:c8:f4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:19:49 2026 by rpki-client