Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: ygmfgha8IYHDN569S9wvYUJWWeftVfy+LFC6aAonkkQ=
Subject key identifier: AE:A5:AA:AF:F6:E9:07:5C:43:ED:18:D2:E3:5F:15:F9:E7:F2:F9:7A
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 01A17996606A8C00BBC58C34DDD0BC34C3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 1AC5
Signing time: Mon 26 Oct 2026 19:01:00 +0000
Manifest this update: Mon 26 Oct 2026 19:01:00 +0000
Manifest next update: Tue 27 Oct 2026 19:01:00 +0000
Files and hashes: 1: J5P3_JUxrLqrnXDXiWzAe9FDnRM.roa (hash: 85ulhRZmPxsRvLMOYGzBL98RjNzzbmxq5th6uCIJYyU=)
2: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: U3FsGduOrBNLFoQVHASY2AmwF2ZSaRdieXP6uRwlYQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:96:60:6a:8c:00:bb:c5:8c:34:dd:d0:bc:34:c3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: Oct 26 19:01:00 2026 GMT
Not After : Oct 27 19:01:00 2026 GMT
Subject: CN=aea5aaaff6e9075c43ed18d2e35f15f9e7f2f97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:92:48:f7:fd:46:f6:5b:13:0c:e7:fc:55:52:
f2:ba:7f:e1:bd:3f:a5:1c:08:df:76:75:5c:97:4c:
6e:f0:28:b5:8f:72:ed:fa:12:8f:31:17:6c:42:97:
7e:16:3a:c1:2e:98:ae:4a:0d:05:c4:9d:ee:40:4a:
61:80:a4:b3:7d:70:f4:2f:b0:8a:82:9a:34:81:4c:
d3:87:db:dd:72:18:53:63:dd:5f:7e:95:45:6b:f9:
62:90:99:88:ce:10:e2:f6:4b:45:6c:68:71:36:dd:
c6:4b:6b:23:85:45:26:27:c3:17:5e:33:9a:0c:ee:
7f:0e:c5:1b:eb:ab:85:db:dc:9f:fe:54:e4:aa:a8:
68:93:25:bd:f9:25:53:07:c0:09:fa:fc:65:ed:2b:
1f:6f:ed:bb:73:a7:ea:f6:0f:fd:57:e3:88:72:0a:
1d:33:6a:e6:2b:46:2a:f3:03:5d:6a:0c:04:fd:17:
f3:58:01:42:67:db:2c:88:7b:45:a9:ed:8e:57:55:
80:ec:3d:e8:9c:1e:d5:2b:d6:ed:a7:41:34:22:b1:
2a:69:13:7a:ef:40:98:dc:77:16:d9:07:48:5d:d3:
c7:2d:8c:fa:8c:03:65:f1:d6:fb:5d:ed:e6:83:db:
46:cb:2a:ec:8c:b0:c3:7d:c8:29:c8:6f:f8:67:b4:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A5:AA:AF:F6:E9:07:5C:43:ED:18:D2:E3:5F:15:F9:E7:F2:F9:7A
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8a:2b:68:be:5b:b5:8b:5d:a5:e9:00:59:ad:a7:85:25:d2:
bd:8b:00:bf:e2:fa:48:d4:be:1e:7a:cd:61:d0:09:4e:71:14:
20:af:70:01:ab:a7:72:2c:4f:ca:00:56:7a:da:56:f6:a5:71:
7d:76:5c:0c:a9:01:a7:df:2d:94:2b:29:4b:c5:cd:f1:40:b8:
db:02:04:60:f6:ee:2e:df:92:0d:99:5c:57:81:40:f0:12:c0:
7a:ea:96:ab:73:d8:be:a9:ab:ac:cd:f5:1c:02:f4:08:37:8c:
09:3a:76:1a:84:c3:56:b8:82:0a:90:df:07:2d:26:1d:07:6f:
56:49:7b:29:d0:f0:66:ad:a9:1b:da:c0:ce:69:40:18:f0:0d:
dd:f8:1e:04:8f:2c:b1:ba:d7:c4:c0:61:09:07:9d:d9:84:98:
b1:63:7b:25:cd:c6:57:e5:29:c2:42:d9:bf:0b:be:4b:4c:7d:
8f:e1:92:33:0b:bf:8a:4d:aa:69:0b:9e:61:60:6e:6a:97:19:
ff:34:11:bb:db:82:62:e9:e0:6c:5f:56:f7:43:6c:f5:11:a5:
7f:e5:06:eb:29:06:49:9d:39:b4:98:dc:22:c1:f1:dc:8f:92:
ce:32:30:25:91:5f:e0:60:45:32:aa:ff:ab:a8:bc:c8:07:10:
fc:92:ad:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5lmBqjAC7xYw03dC8NMPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjZhZDYxYzE2MmRmMDY1MGVlMGFiNjBjNjgwNzViMjlh
MjExYzgwHhcNMjYxMDI2MTkwMTAwWhcNMjYxMDI3MTkwMTAwWjAzMTEwLwYDVQQD
EyhhZWE1YWFhZmY2ZTkwNzVjNDNlZDE4ZDJlMzVmMTVmOWU3ZjJmOTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpJI9/1G9lsTDOf8VVLyun/hvT+l
HAjfdnVcl0xu8Ci1j3Lt+hKPMRdsQpd+FjrBLpiuSg0FxJ3uQEphgKSzfXD0L7CK
gpo0gUzTh9vdchhTY91ffpVFa/likJmIzhDi9ktFbGhxNt3GS2sjhUUmJ8MXXjOa
DO5/DsUb66uF29yf/lTkqqhokyW9+SVTB8AJ+vxl7Ssfb+27c6fq9g/9V+OIcgod
M2rmK0Yq8wNdagwE/RfzWAFCZ9ssiHtFqe2OV1WA7D3onB7VK9btp0E0IrEqaRN6
70CY3HcW2QdIXdPHLYz6jANl8db7Xe3mg9tGyyrsjLDDfcgpyG/4Z7TTDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6lqq/26QdcQ+0Y0uNfFfnn8vl6MB8GA1UdIwQY
MBaAFDBmrWHBYt8GUO4KtgxoB1spohHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YjM0YjAtMzAxYS00MWEyLWI0YzUt
YTg4NjZhYTk1YzcxLzEvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YjM0YjAtMzAxYS00MWEyLWI0YzUtYTg4NjZhYTk1Yzcx
LzEvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYoraL5b
tYtdpekAWa2nhSXSvYsAv+L6SNS+HnrNYdAJTnEUIK9wAauncixPygBWetpW9qVx
fXZcDKkBp98tlCspS8XN8UC42wIEYPbuLt+SDZlcV4FA8BLAeuqWq3PYvqmrrM31
HAL0CDeMCTp2GoTDVriCCpDfBy0mHQdvVkl7KdDwZq2pG9rAzmlAGPAN3fgeBI8s
sbrXxMBhCQed2YSYsWN7Jc3GV+UpwkLZvwu+S0x9j+GSMwu/ik2qaQueYWBuapcZ
/zQRu9uCYungbF9W90Ns9RGlf+UG6ykGSZ05tJjcIsHx3I+SzjIwJZFf4GBFMqr/
q6i8yAcQ/JKtDg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 03:46:58 2026 by rpki-client