Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: TBqEil65UV9RD1nxb5S6vUl7mAgsGpnWNYObRhGMxHs=
Subject key identifier: 23:55:C4:B0:16:14:BA:34:AB:82:A6:3F:58:34:FA:7A:46:0F:A4:69
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 019EB6C5A0F6B81484FB795421DDD0901F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 13:01:05 +0000
Manifest this update: Thu 11 Jun 2026 13:01:05 +0000
Manifest next update: Fri 12 Jun 2026 13:01:05 +0000
Files and hashes: 1: J5P3_JUxrLqrnXDXiWzAe9FDnRM.roa (hash: 85ulhRZmPxsRvLMOYGzBL98RjNzzbmxq5th6uCIJYyU=)
2: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: w980dGN1y15ZT4xvAdAz8BK7SOkMVbvYc1iLA6VBz2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:a0:f6:b8:14:84:fb:79:54:21:dd:d0:90:1f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: Jun 11 13:01:05 2026 GMT
Not After : Jun 12 13:01:05 2026 GMT
Subject: CN=2355c4b01614ba34ab82a63f5834fa7a460fa469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:93:a7:58:99:e5:55:44:20:2b:ef:2c:3f:
4f:82:fa:a8:6f:2b:de:62:5b:76:9e:48:ae:22:ce:
d8:58:2b:dc:fa:13:c9:66:64:05:55:20:02:b5:97:
44:e5:02:bf:31:fe:f2:c2:24:9e:34:a2:0d:d4:f5:
5a:00:9a:ed:13:b5:2f:44:07:b5:ac:be:f0:d7:a6:
84:b5:83:73:ec:94:a8:b0:ae:11:34:82:48:42:43:
0c:34:22:08:27:c3:42:20:4f:0a:31:b2:4d:83:4b:
fa:b9:20:f0:82:a5:e2:11:c7:8c:ef:44:8b:08:9f:
b5:ca:97:74:b4:e2:9c:cb:b1:f0:20:06:99:ad:04:
29:3c:ba:da:1c:d3:f1:32:ae:6f:1a:6a:cc:97:f7:
3d:4e:b3:18:ed:2e:23:03:b7:12:28:96:be:08:24:
bf:8e:06:61:00:65:6f:e8:be:78:87:fe:7a:61:a8:
82:55:98:6c:84:67:6a:10:75:46:d4:70:15:17:52:
4c:05:93:cd:4b:c4:09:6d:d9:88:e4:f9:87:da:7c:
66:f5:a9:1b:6b:64:67:5e:c4:bf:3f:ec:79:4c:0e:
5e:cc:b0:b9:f7:92:d8:f0:09:7d:9d:81:b9:89:ac:
53:77:4f:3b:fc:76:50:e5:6d:b9:d1:af:a3:2f:89:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:55:C4:B0:16:14:BA:34:AB:82:A6:3F:58:34:FA:7A:46:0F:A4:69
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:83:6a:c8:3d:c5:7d:cd:23:b0:33:3a:14:6c:0c:48:0c:e2:
e9:7d:ca:f9:b7:ad:c0:56:8b:65:54:39:d9:af:06:92:86:b0:
92:d7:19:a7:e4:95:0b:58:df:84:84:09:be:61:fa:7c:7b:0b:
18:3a:07:e8:02:9f:db:ff:e5:c5:c0:48:0e:00:b2:16:8e:ba:
82:18:56:1f:9e:4f:78:b9:03:52:4e:2d:34:f0:4b:60:64:29:
b8:1b:00:8c:15:88:9f:bb:c5:be:fd:70:de:3e:89:1f:d0:52:
e0:38:44:06:c6:d6:90:3b:0c:e9:8a:0b:d2:b5:43:ee:b1:4d:
b3:29:72:71:c6:4f:fc:57:ce:87:01:09:96:a4:ff:df:cc:0a:
33:31:91:ad:cf:52:c0:98:18:60:2b:e5:00:a8:52:39:84:fe:
cf:a1:76:e8:02:9f:f2:7b:e9:a3:47:15:a6:c2:e5:d0:50:6c:
8e:ab:3d:d5:dd:08:6a:93:c6:ac:71:4f:21:07:ac:2c:9c:fa:
73:f4:9a:6d:b1:a0:94:6d:24:90:8f:fe:bf:33:47:b6:e6:6e:
c9:2d:7d:36:15:7b:c1:7a:bd:b7:2a:b9:08:50:cb:5e:1e:08:
2f:47:4f:91:cc:6f:0f:b3:b9:33:af:da:df:98:81:b2:d8:06:
5e:3f:cf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:03:03 2026 by rpki-client