Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
File: mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json)
Hash identifier: Y9RDS64ewORv8IIGmbrFtVHvALb0KFbDJKkISWpvqig=
Subject key identifier: 97:B5:F6:4B:5F:B9:FC:F2:66:61:4E:AE:E1:53:56:7F:F2:2D:79:48
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Certificate issuer: /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial: 019D3A1C6C300479D3B36230FF2CDC1B0316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
Manifest number: 128B
Signing time: Sun 29 Mar 2026 15:00:34 +0000
Manifest this update: Sun 29 Mar 2026 15:00:34 +0000
Manifest next update: Mon 30 Mar 2026 15:00:34 +0000
Files and hashes: 1: jlRHoOU7VBuZG0NtlGgpYUcQg1w.roa (hash: a/dGRje2qaYpZSj1y2Z3z/E4zsUb68R588aViHKfTm8=)
2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: Gt9ajpzbqVfb5U5E/BwVRUxrRkUEs3OoKC4iRLFjNUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:6c:30:04:79:d3:b3:62:30:ff:2c:dc:1b:03:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Validity
Not Before: Mar 29 15:00:34 2026 GMT
Not After : Mar 30 15:00:34 2026 GMT
Subject: CN=97b5f64b5fb9fcf266614eaee153567ff22d7948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a5:76:14:61:4d:3e:32:48:8b:cf:1c:41:1e:
94:65:a6:12:be:04:1e:e1:7e:8a:21:3c:d1:1f:78:
71:fe:f9:9b:b3:c4:1d:30:c1:53:cf:2b:72:d6:ab:
fe:36:a4:c8:05:ef:e0:ff:87:ab:61:c7:97:82:64:
f7:6a:80:bd:58:da:a1:05:89:7f:e4:4e:25:83:24:
4d:df:81:0a:a5:67:34:d3:8d:ea:9a:16:28:b9:fd:
fa:33:41:2d:b1:53:23:27:2c:4f:2c:cc:df:8d:dc:
cd:cb:e1:43:e8:b2:4b:58:fa:24:80:95:3d:6c:70:
69:c3:0c:52:58:05:4c:f9:3d:6f:1e:5c:6f:91:54:
33:8b:1c:0b:d7:db:16:8c:06:56:8f:18:84:37:20:
24:b6:75:e0:57:c1:f2:00:62:e7:70:04:b8:d9:be:
b3:98:40:c9:aa:e0:87:44:75:08:ef:58:e2:bf:d3:
c3:f9:5b:64:89:73:1e:f3:14:6f:53:a9:4e:f0:90:
6e:53:a1:b8:4b:e3:a1:47:b2:98:f0:67:7f:2c:ab:
06:cd:c9:fc:42:7c:96:2f:85:d9:04:a8:0d:cb:b8:
a0:a1:79:64:09:49:3b:86:05:47:ef:ee:d5:cc:86:
7b:cf:77:8e:e5:34:84:79:c0:51:b1:de:b0:e2:cb:
37:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B5:F6:4B:5F:B9:FC:F2:66:61:4E:AE:E1:53:56:7F:F2:2D:79:48
X509v3 Authority Key Identifier:
keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:59:58:5a:6d:ca:b2:5a:6f:71:a1:37:26:f4:02:55:17:c3:
c2:05:5a:b1:d5:e6:76:4a:e0:8c:ee:81:80:90:e5:bc:13:b9:
bc:75:27:ff:5f:d3:6c:ce:dc:ee:1e:e7:b1:5b:9b:4b:a8:1f:
56:45:bf:61:f7:13:45:da:7f:4a:56:fe:58:64:87:f2:14:3e:
aa:99:a6:be:14:89:7c:5b:ea:40:a1:cb:87:e1:0a:dd:ec:58:
ae:8d:0b:af:09:1d:09:07:5a:6b:67:71:08:af:f9:0a:6d:c9:
3d:5b:8b:2e:fa:5b:30:f2:b3:e8:2c:ed:89:bf:ec:db:0d:cb:
d3:b8:64:29:8a:30:00:78:5a:f0:71:cd:49:fc:49:96:cc:fd:
f0:c0:aa:43:45:a3:9d:dd:69:06:2b:bd:78:0e:d5:d7:56:b2:
d8:e8:fd:1e:42:7b:52:ef:db:1f:1e:7f:d2:b2:5a:2e:7a:d0:
b5:2d:3f:f4:5f:3b:4d:a0:2f:31:c6:36:e2:11:6e:51:dc:8c:
15:48:06:0c:70:60:5f:0a:e2:11:77:81:11:48:83:8d:18:f4:
bb:e2:5f:37:b9:7f:50:94:ec:d5:57:6e:49:8b:5d:4d:e8:d5:
99:0b:8c:04:d4:fe:e8:ad:83:be:33:a0:b6:fb:60:44:ab:11:
90:4c:35:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:19 2026 by rpki-client