Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: ZHSVQMzNy7aT1WLrqQo++qCRqu3EFt0ruO4VM/rGMkA=
Subject key identifier: 57:A0:76:CE:59:68:3E:48:42:94:E3:AC:87:68:DF:99:9E:85:91:84
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 019CE55B20EE97BEE81A5BF5265149289680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 04:01:20 +0000
Manifest this update: Fri 13 Mar 2026 04:01:20 +0000
Manifest next update: Sat 14 Mar 2026 04:01:20 +0000
Files and hashes: 1: J5P3_JUxrLqrnXDXiWzAe9FDnRM.roa (hash: 85ulhRZmPxsRvLMOYGzBL98RjNzzbmxq5th6uCIJYyU=)
2: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: n6gLO45DJBE+ibcqeEQDcN26LEAcrnMDZAa7eme5Rvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5b:20:ee:97:be:e8:1a:5b:f5:26:51:49:28:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: Mar 13 04:01:20 2026 GMT
Not After : Mar 14 04:01:20 2026 GMT
Subject: CN=57a076ce59683e484294e3ac8768df999e859184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:c8:a1:40:d5:94:01:77:cc:bd:16:a0:1f:
61:12:98:6c:46:6d:fe:9a:b0:6b:ed:e5:28:f5:d1:
6e:e5:f8:07:1e:95:e6:42:8b:6a:2b:d8:ee:c1:9f:
b6:cc:45:e4:4f:ec:24:85:39:97:76:24:bb:22:d2:
1c:10:79:0c:0f:e7:be:f0:21:eb:20:87:89:ea:b3:
20:94:3a:9c:19:44:66:99:45:97:68:f7:22:45:97:
ab:08:b9:cc:36:26:7d:d3:16:5a:e7:92:26:6d:8d:
55:8f:73:4f:23:22:f4:1a:0c:b5:03:e2:52:55:6d:
b6:ee:a3:73:75:79:be:6c:54:68:26:bc:57:8e:8f:
ec:6f:32:2b:ac:70:27:3f:55:0c:ed:d9:ba:be:90:
d0:c3:db:e1:ce:42:0f:8f:22:b0:23:2b:06:2b:03:
8f:86:44:35:93:14:c9:91:71:eb:18:4a:77:f3:54:
61:c6:9a:ad:ca:06:f0:53:0d:2f:2d:93:3a:c7:31:
63:1c:e9:54:c3:15:96:d4:1c:ef:7c:89:f9:5c:02:
e9:d3:97:58:06:6d:d1:07:fb:c3:82:7f:c9:8d:a3:
83:d1:df:78:a5:35:7a:c9:d0:27:54:8f:e2:6c:ff:
06:b9:7b:ce:00:1d:56:3b:9c:a6:a1:9a:90:ab:4e:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A0:76:CE:59:68:3E:48:42:94:E3:AC:87:68:DF:99:9E:85:91:84
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:de:5e:f5:dc:8d:fd:e2:ff:57:5e:24:ad:01:b3:2d:eb:23:
53:c5:18:20:b1:0b:59:84:2e:47:b2:9d:57:69:09:ab:a2:17:
6b:28:cd:eb:5e:d7:51:ff:54:71:6d:86:92:ed:9d:d2:f0:b4:
fb:c9:61:b6:8c:24:92:fd:53:c2:9c:00:94:e5:b5:db:91:37:
78:13:41:c5:98:a5:45:92:5f:57:25:78:d1:ff:14:42:42:d6:
c0:28:8a:71:ac:c6:71:25:06:89:a6:64:52:a5:f2:98:36:b6:
61:29:ad:60:3a:1e:4a:08:2b:8c:75:05:ee:dd:c7:87:f9:71:
59:e0:4e:90:1e:a3:b1:ce:98:7a:f2:fc:01:1b:4f:85:2b:04:
74:4f:87:2e:83:e6:a5:00:51:13:67:f3:94:1a:f3:ff:b0:60:
7b:68:2e:dd:7b:79:34:a0:f6:46:0b:2b:fd:9b:ed:cf:7a:16:
5f:dc:d4:15:8f:e2:0d:ff:b3:be:a9:d1:ae:cd:22:1a:70:71:
c8:ff:02:3c:81:1e:6f:01:ea:ec:35:05:4c:38:66:7a:83:a8:
6a:ad:5b:1a:4e:f7:fa:13:d6:97:55:cf:56:86:10:92:ec:89:
5e:a0:ac:d9:0e:ed:a1:6a:6c:b9:cb:91:2d:ed:df:86:69:ad:
f1:28:89:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:27:12 2026 by rpki-client