Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: +8BXqy4x2fZ5icxBLXapI8unsDbnPEn1It3k0vyw+Jg=
Subject key identifier: 1F:31:B7:14:E2:FE:1D:68:DA:56:46:5F:B7:DA:31:31:90:40:6A:5B
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 019DCF0703202AD4C242FDEA2D0300CF1841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 13:00:36 +0000
Manifest this update: Mon 27 Apr 2026 13:00:36 +0000
Manifest next update: Tue 28 Apr 2026 13:00:36 +0000
Files and hashes: 1: J5P3_JUxrLqrnXDXiWzAe9FDnRM.roa (hash: 85ulhRZmPxsRvLMOYGzBL98RjNzzbmxq5th6uCIJYyU=)
2: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: qqja6aPmk2Ig4r2kz4MCYgtcjMs5LCg13RRYi4HO+F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:03:20:2a:d4:c2:42:fd:ea:2d:03:00:cf:18:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: Apr 27 13:00:36 2026 GMT
Not After : Apr 28 13:00:36 2026 GMT
Subject: CN=1f31b714e2fe1d68da56465fb7da313190406a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:df:51:e0:a0:37:c0:b3:ab:a0:e6:a2:89:
fb:63:f1:8d:b6:1f:f3:a6:72:d6:62:5e:64:fc:8b:
cd:92:04:b0:73:a8:e4:be:7f:0f:24:47:7d:7c:39:
44:17:86:39:ad:22:ac:46:d5:af:ba:67:3d:fc:3f:
fd:9a:28:46:44:7e:b8:5b:74:a8:4c:30:6d:93:c7:
81:21:f9:63:97:bf:d6:77:f3:e5:02:bb:d7:b4:a5:
57:8b:fd:7f:99:27:e5:79:59:00:08:51:25:d6:b0:
be:32:99:32:8d:0a:77:4a:87:ce:18:aa:51:23:14:
98:75:ff:5c:8a:e5:5e:3f:69:61:69:19:24:82:15:
fe:4c:00:d6:7c:ee:25:86:cb:41:bb:e1:a2:9b:a4:
d7:0f:aa:e7:9b:be:71:9c:7c:e2:18:b5:fd:da:e0:
cd:88:cd:ee:6e:fe:83:7d:dc:dc:b6:3e:4d:32:e0:
ab:00:d3:39:94:34:55:a8:fe:2e:b8:32:64:a8:8f:
e9:b0:57:7b:97:fa:75:e1:cf:f7:38:5e:ed:eb:5d:
d6:4f:45:d0:ee:ae:89:51:6f:15:16:9e:c2:eb:1c:
dc:1e:8e:b3:b2:f0:7a:5c:53:fa:56:a3:14:9a:78:
96:e6:44:46:02:4f:9c:e1:ba:7c:08:a6:db:19:b3:
36:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:31:B7:14:E2:FE:1D:68:DA:56:46:5F:B7:DA:31:31:90:40:6A:5B
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d4:f2:fb:f6:12:c2:2a:50:15:21:3d:d1:d6:a8:ed:de:a0:
54:64:d8:9a:25:5a:6b:f8:9a:7a:28:83:fc:37:7d:91:67:12:
63:cd:2b:6a:b3:04:0d:cc:5f:b3:6f:c5:f4:0f:a7:f5:af:71:
76:20:6c:97:09:54:42:e1:b3:4d:e0:62:cc:12:76:e0:de:6a:
28:c9:87:d1:a1:f8:ac:3a:5e:c8:45:76:5d:7e:53:92:4d:7b:
21:12:9a:b2:44:76:d7:9c:4f:b7:30:38:9d:4d:d3:55:24:9e:
ce:95:5a:4f:1f:40:b5:9c:80:1a:4e:d2:0a:16:ff:f1:d4:ce:
bd:89:29:a6:b4:57:4c:22:dd:de:70:1d:88:81:b8:bd:ee:4f:
f6:0d:28:d6:cf:d2:e3:39:92:dc:67:34:9c:8b:9e:f2:3b:dc:
62:a7:89:ad:81:7b:74:3b:3f:36:a6:f0:7f:0e:83:cc:2b:47:
cf:99:58:8d:63:fc:bb:4d:73:f3:8a:a2:af:08:5d:16:83:f7:
21:64:ff:4a:3d:4d:7a:e5:f8:02:5e:bb:5c:3c:84:e3:c8:d1:
fd:39:b2:ef:53:07:08:d9:11:eb:52:fb:fd:3a:47:26:cc:e7:
28:ce:af:58:7e:6e:6b:5a:60:ae:37:90:f9:69:6f:c7:f6:61:
cd:48:f9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:14:36 2026 by rpki-client