Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
File: Mg58DOtLoqb0uW_EuuGruFMDWro.mft (raw, json)
Hash identifier: OpHSTq/aR+fMzl0O4QKyqWQRUwlh9FSkXFhuhQAJPGk=
Subject key identifier: 5C:3A:70:70:FF:11:95:C8:13:30:0B:B4:4D:0B:C7:A5:3A:E3:99:4E
Authority key identifier: 32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA
Certificate issuer: /CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
Certificate serial: 019D394149D7B1E0BD4960AF86D7C33F9A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 11:01:13 +0000
Manifest this update: Sun 29 Mar 2026 11:01:13 +0000
Manifest next update: Mon 30 Mar 2026 11:01:13 +0000
Files and hashes: 1: 190_tT_eCzOnPGNAuqrMRlV6QzI.roa (hash: rinomgyCwitmjvV/nuPRn6UtRWhrMNkhmKnZEnFuZcI=)
2: Mg58DOtLoqb0uW_EuuGruFMDWro.crl (hash: ZCbhyXCmVToNSWitKVWCVoR/8MxU16leifldRG4uhsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:49:d7:b1:e0:bd:49:60:af:86:d7:c3:3f:9a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
Validity
Not Before: Mar 29 11:01:13 2026 GMT
Not After : Mar 30 11:01:13 2026 GMT
Subject: CN=5c3a7070ff1195c813300bb44d0bc7a53ae3994e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5a:e8:6c:68:ac:fe:29:95:f9:b2:0a:f2:13:
d9:b1:55:8d:42:b6:50:a8:b6:95:3b:1d:b0:f7:43:
8e:c2:91:c0:50:6d:21:4a:f7:a7:4f:15:90:95:ad:
ba:c2:90:dc:a1:2b:c4:3c:a8:44:3a:bb:71:9d:77:
ae:6f:0b:14:3b:79:a9:fa:a0:88:68:ec:4d:54:d9:
46:2c:e0:20:35:3f:73:ea:e3:47:d4:2c:b1:bd:b9:
c7:e7:0d:c3:64:bb:20:11:f0:8c:1b:85:ab:dd:6f:
82:24:7f:d9:db:07:6b:b3:2a:d4:4f:2a:ef:76:91:
4d:00:2e:a5:c1:32:53:bb:24:d0:4e:10:ce:06:bb:
74:c6:8c:d7:99:c4:63:a9:be:42:67:6a:0e:81:ea:
82:67:a5:c7:a5:ec:b6:9d:56:0e:de:9b:7b:00:fd:
50:02:89:b9:5a:15:37:8d:53:18:a1:14:d1:d8:16:
1a:2b:e2:2a:8d:d4:e7:e7:70:91:ab:7e:33:c4:5e:
3a:02:b5:4d:df:9c:96:81:7a:4f:80:2e:d6:54:8b:
c9:b5:59:03:fc:46:47:d7:37:db:a7:b4:b1:eb:63:
80:65:0d:5a:d8:90:54:d5:60:4a:b4:d0:08:02:97:
90:1b:72:5c:57:5c:01:57:55:0e:53:b3:dc:f5:e3:
84:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3A:70:70:FF:11:95:C8:13:30:0B:B4:4D:0B:C7:A5:3A:E3:99:4E
X509v3 Authority Key Identifier:
keyid:32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:09:2e:1f:56:28:b5:e5:bf:26:85:90:4b:2f:f7:d9:e5:6b:
d2:51:e9:86:bf:e3:7e:6d:8a:37:91:3a:ee:3c:81:01:3c:3e:
47:07:9a:6c:12:ef:de:8d:29:c3:f4:c7:63:fc:b5:df:00:19:
bb:da:14:f5:e4:18:16:8b:e7:be:f2:08:fd:5f:de:8e:cc:9b:
95:19:e3:27:a0:7c:1c:86:f5:a5:71:f9:39:e2:85:d1:d3:29:
e3:87:1c:fb:bc:08:16:8e:fd:c0:2a:fd:f2:62:71:08:77:ad:
3d:ae:fd:5f:c1:e6:5e:63:cd:e8:d0:60:3a:bb:af:35:b1:66:
73:5f:a9:bb:5a:59:e2:11:33:1c:b5:0c:b2:a1:c0:19:52:83:
83:cf:8f:8c:96:95:66:7b:db:6f:20:8d:7e:a5:1b:52:e0:8e:
a4:0d:24:1d:b7:ca:5b:a5:d6:74:f5:fc:f6:66:36:f8:e6:c5:
13:a6:57:d9:b3:56:30:e9:72:e7:dd:2b:82:11:ec:91:d0:22:
e8:ee:99:0b:54:a8:3f:ed:a1:0e:9b:82:bc:a3:ff:d3:10:27:
7d:53:ae:4b:4b:65:08:b2:38:89:bf:75:24:15:f4:5c:52:14:
44:bb:8e:7f:2b:45:b8:18:a8:a5:fe:3b:57:fc:04:1d:1e:e3:
77:11:a9:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QUnXseC9SWCvhtfDP5o7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMGU3YzBjZWI0YmEyYTZmNGI5NmZjNGJhZTFhYmI4NTMw
MzVhYmEwHhcNMjYwMzI5MTEwMTEzWhcNMjYwMzMwMTEwMTEzWjAzMTEwLwYDVQQD
Eyg1YzNhNzA3MGZmMTE5NWM4MTMzMDBiYjQ0ZDBiYzdhNTNhZTM5OTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81robGis/imV+bIK8hPZsVWNQrZQ
qLaVOx2w90OOwpHAUG0hSvenTxWQla26wpDcoSvEPKhEOrtxnXeubwsUO3mp+qCI
aOxNVNlGLOAgNT9z6uNH1CyxvbnH5w3DZLsgEfCMG4Wr3W+CJH/Z2wdrsyrUTyrv
dpFNAC6lwTJTuyTQThDOBrt0xozXmcRjqb5CZ2oOgeqCZ6XHpey2nVYO3pt7AP1Q
Aom5WhU3jVMYoRTR2BYaK+IqjdTn53CRq34zxF46ArVN35yWgXpPgC7WVIvJtVkD
/EZH1zfbp7Sx62OAZQ1a2JBU1WBKtNAIApeQG3JcV1wBV1UOU7Pc9eOEbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFw6cHD/EZXIEzALtE0Lx6U645lOMB8GA1UdIwQY
MBaAFDIOfAzrS6Km9LlvxLrhq7hTA1q6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWc1OERPdExvcWIwdVdfRXV1R3J1Rk1EV3JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jNjZiYzgtZjIwNi00M2QwLTk0YmUt
MThhYWRkNjU5NTY2LzEvTWc1OERPdExvcWIwdVdfRXV1R3J1Rk1EV3JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9jNjZiYzgtZjIwNi00M2QwLTk0YmUtMThhYWRkNjU5NTY2
LzEvTWc1OERPdExvcWIwdVdfRXV1R3J1Rk1EV3JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowkuH1Yo
teW/JoWQSy/32eVr0lHphr/jfm2KN5E67jyBATw+RweabBLv3o0pw/THY/y13wAZ
u9oU9eQYFovnvvII/V/ejsyblRnjJ6B8HIb1pXH5OeKF0dMp44cc+7wIFo79wCr9
8mJxCHetPa79X8HmXmPN6NBgOruvNbFmc1+pu1pZ4hEzHLUMsqHAGVKDg8+PjJaV
ZnvbbyCNfqUbUuCOpA0kHbfKW6XWdPX89mY2+ObFE6ZX2bNWMOly590rghHskdAi
6O6ZC1SoP+2hDpuCvKP/0xAnfVOuS0tlCLI4ib91JBX0XFIURLuOfytFuBiopf47
V/wEHR7jdxGpYQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:58:08 2026 by rpki-client