Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File: MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier: 3R44UiqQbHYP2F41WMCn9vQDzGl/tADYJyxtg09tRz4=
Subject key identifier: 1D:E9:E9:F5:E7:FF:A7:38:3A:9E:D4:30:1C:A0:C2:CD:DB:EB:DA:51
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial: 01A17C97E43399FAECD44E216E0DD391B71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number: 096D
Signing time: Tue 27 Oct 2026 09:01:31 +0000
Manifest this update: Tue 27 Oct 2026 09:01:31 +0000
Manifest next update: Wed 28 Oct 2026 09:01:31 +0000
Files and hashes: 1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: F1zC8AXs5hvL+SKdGH3zaKNnL4MhpgfkB2F6tKBGPIo=)
2: j7653T51F6EUoDPqs_2ecZYygWM.roa (hash: iqkpEFsJy76DXov6xlk9ejYQADnbYUIfX+Z+h7UJP2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:e4:33:99:fa:ec:d4:4e:21:6e:0d:d3:91:b7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
Validity
Not Before: Oct 27 09:01:31 2026 GMT
Not After : Oct 28 09:01:31 2026 GMT
Subject: CN=1de9e9f5e7ffa7383a9ed4301ca0c2cddbebda51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1a:10:2d:73:7e:ad:4c:0f:25:bd:d5:ef:94:
36:8b:b9:56:15:b4:34:c7:3f:be:a0:99:08:cb:48:
59:49:46:0d:69:9f:6d:cf:03:9b:1d:4e:fd:c8:0e:
77:b8:e5:77:1d:2b:5a:f2:59:54:3e:81:7f:d2:be:
02:8d:ab:d3:67:67:bd:df:74:19:3f:48:e7:76:07:
08:4b:a0:9c:b0:72:da:06:01:11:b0:87:d7:9c:3c:
67:8f:66:33:57:57:1f:47:5e:33:56:cf:f7:36:f8:
50:69:7b:99:ae:1f:34:53:ea:a8:64:29:f2:93:87:
fb:24:4b:c0:83:55:5f:3d:f1:8c:7c:94:0e:59:35:
46:5f:d1:40:e9:dc:0b:6d:ee:e4:ed:dc:9b:13:78:
ac:88:b7:f0:29:a4:b4:05:a3:a2:4d:6f:9e:a3:93:
85:35:96:e8:ab:1a:15:05:9b:27:67:7c:fd:15:c3:
92:73:34:85:0b:a3:1b:aa:6b:54:56:95:54:7d:4e:
95:e2:97:e2:0b:f9:ff:cd:fd:88:65:80:b3:da:f2:
87:d4:dd:21:d3:e2:13:64:d7:77:75:14:c3:1c:e1:
ff:0f:19:f6:ca:a5:ed:fd:51:74:7f:25:f3:f3:3b:
2c:55:f4:d4:4a:4a:b5:ac:b4:a3:a0:91:fb:57:e4:
45:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E9:E9:F5:E7:FF:A7:38:3A:9E:D4:30:1C:A0:C2:CD:DB:EB:DA:51
X509v3 Authority Key Identifier:
keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8a:d4:c0:38:e3:16:7b:2a:0e:7e:ea:fa:42:63:ea:57:74:
8c:7e:6e:a0:56:5e:49:71:58:1f:e3:5a:bf:b2:df:a3:a2:8a:
6d:63:99:5b:4f:43:a2:b7:d2:97:0b:f1:6a:2f:d5:57:e1:6d:
4a:46:c9:e9:76:c2:d5:85:34:f7:42:0c:da:2a:64:7e:ff:f9:
2f:4b:e6:6a:ae:2e:f6:fd:16:bd:e2:93:8b:89:0c:74:69:8c:
cd:f1:81:b4:5c:d9:b1:a9:a9:70:3e:ba:86:3b:29:28:21:fd:
83:da:4d:42:ed:60:c9:36:33:e4:ab:fe:64:de:55:34:e2:c5:
b8:82:2e:24:70:0a:74:18:9a:ab:25:e3:3f:22:f5:40:f5:cb:
f6:ff:1a:7e:7e:7d:52:73:3a:2b:1d:a0:ec:4c:68:ec:68:f9:
8f:2b:dc:ed:e9:1b:d7:d5:84:f2:52:5a:9d:10:ce:d2:95:31:
31:55:44:23:7a:71:44:31:ae:9d:4d:51:5e:e4:61:32:5b:ed:
11:24:36:8e:10:3b:59:65:72:ff:35:2e:37:c6:a2:79:67:cf:
aa:c6:95:f6:e9:33:a0:44:2f:66:14:11:7a:5f:f6:a3:60:52:
61:34:5a:b1:70:4e:2a:b5:85:82:ad:a6:5c:eb:9d:b9:39:5c:
d3:02:54:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:07:08 2026 by rpki-client