Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File: MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier: nKWXu4UQpWLBegpu/V/o2akakFnDLjnwPyGb4a9vKj0=
Subject key identifier: 21:65:78:D8:5E:C4:B8:E2:00:FC:3C:49:F2:B1:63:6F:51:80:EA:51
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer: /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial: 019EB7D7E53AA214D53C276CE3AD10949C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number: 07FE
Signing time: Thu 11 Jun 2026 18:00:39 +0000
Manifest this update: Thu 11 Jun 2026 18:00:39 +0000
Manifest next update: Fri 12 Jun 2026 18:00:39 +0000
Files and hashes: 1: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: foV71gmJat/3JmEiLzhGEWJnsazdlB+1AbylVt+Un2c=)
2: j7653T51F6EUoDPqs_2ecZYygWM.roa (hash: iqkpEFsJy76DXov6xlk9ejYQADnbYUIfX+Z+h7UJP2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:e5:3a:a2:14:d5:3c:27:6c:e3:ad:10:94:9c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
Validity
Not Before: Jun 11 18:00:39 2026 GMT
Not After : Jun 12 18:00:39 2026 GMT
Subject: CN=216578d85ec4b8e200fc3c49f2b1636f5180ea51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ae:63:8e:fd:55:f6:c8:df:05:ff:8d:dd:23:
dd:af:d6:cc:49:b4:53:05:e6:4b:70:a8:12:9f:bf:
26:c8:f6:4f:08:4e:0e:d4:b5:54:3c:ca:45:2d:da:
1e:e7:d7:5f:1e:8a:4c:b9:0f:30:aa:a3:91:62:2d:
57:a7:c1:03:11:df:9e:e2:47:bd:59:6d:17:63:3c:
71:e7:72:b4:2d:12:95:3e:2d:28:4b:9e:7a:63:5f:
8b:c3:21:37:ca:ea:b0:5e:1d:e2:c3:80:4e:d0:78:
2d:10:90:43:21:e4:2c:5e:83:82:10:2c:04:56:a2:
db:5a:1f:46:fd:1f:ad:52:13:c8:86:32:36:39:2e:
05:5b:1e:95:f3:83:7d:06:fb:40:0f:21:0c:09:a5:
d7:da:99:17:0c:69:78:6a:a0:ba:8a:86:ae:03:82:
b8:f1:11:fd:da:a4:72:fe:e4:c9:1a:94:d2:17:21:
18:45:91:46:a2:ad:bf:8e:e8:a1:76:44:85:36:94:
b8:7d:5d:7a:f4:7b:9a:83:ff:46:3a:98:5f:85:32:
2b:0b:88:a6:51:0f:ad:dc:62:c2:8a:89:62:7b:67:
10:d9:77:15:04:3a:df:82:59:68:a7:ec:ed:2e:bf:
48:20:a2:0f:0e:6c:bc:30:22:13:5a:4a:a5:f2:45:
9a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:65:78:D8:5E:C4:B8:E2:00:FC:3C:49:F2:B1:63:6F:51:80:EA:51
X509v3 Authority Key Identifier:
keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c4:01:7a:28:53:75:50:52:43:cf:55:b1:78:e8:9c:10:b7:
9f:07:da:f8:70:45:ff:27:15:d2:82:ef:5f:33:c7:ae:6f:97:
6c:a0:43:19:94:7a:45:37:84:b0:76:ed:1d:18:78:79:59:6c:
df:99:0b:5c:18:d2:de:fd:ed:44:f8:66:30:8d:4d:11:7b:eb:
c3:ef:bb:de:b8:ec:90:f8:34:d8:4c:0f:98:66:b9:50:eb:01:
fa:da:9e:8b:75:fb:de:a1:ab:6e:8d:54:84:58:b8:95:d0:80:
90:9b:49:21:3f:17:47:2b:59:2c:c2:d0:1b:3b:28:b5:b6:86:
54:8a:a7:f6:2a:e1:9c:bb:c1:f5:62:da:3c:b0:f0:dd:7a:df:
4d:3c:93:14:bc:86:68:ab:6a:a7:13:bc:9c:90:a6:05:4e:52:
93:99:26:75:e6:0c:67:db:23:ef:c6:0e:d3:c6:bb:a4:13:de:
d1:81:cb:6d:f5:64:a3:4e:ab:52:14:4a:03:98:b5:f0:bf:66:
3c:ec:50:ea:75:53:a7:8b:fd:0b:4b:8a:97:31:15:6e:d5:f6:
17:0b:64:71:06:59:8d:ec:0f:5d:b9:f7:bb:ed:25:55:44:25:
34:d0:61:11:d9:6f:c8:94:c7:91:d6:ba:80:db:3f:e6:eb:6b:
db:c7:00:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:00:01 2026 by rpki-client