Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json)
Hash identifier: +1g/aXr9w7lp9/de+kkTeWGtN+S8AGhtEMDCocZp8Vw=
Subject key identifier: AF:9D:39:E8:89:A7:CA:86:8B:76:02:6C:DA:F1:FE:3A:D2:63:9A:AD
Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Certificate serial: 019D39AF10F0E8C18FFD92447D6BA6314483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:01:07 +0000
Manifest this update: Sun 29 Mar 2026 13:01:07 +0000
Manifest next update: Mon 30 Mar 2026 13:01:07 +0000
Files and hashes: 1: AJubno4ZrqTS0RpcQUJX01d0Kkw.roa (hash: p6tmt7fq6LNsnRh4ZNDQsOuCuF6aJ3pZ0TDsZFJJx24=)
2: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: ZJDdQ6Bx4OiGn8OSihvhx4K5eklQ4Yi/R7zZJWsbpUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:10:f0:e8:c1:8f:fd:92:44:7d:6b:a6:31:44:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Validity
Not Before: Mar 29 13:01:07 2026 GMT
Not After : Mar 30 13:01:07 2026 GMT
Subject: CN=af9d39e889a7ca868b76026cdaf1fe3ad2639aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:40:fe:5e:0e:18:c4:b9:12:57:69:4a:83:
51:f1:c7:27:eb:37:fc:de:f9:d5:8a:19:68:25:f6:
1f:b0:4c:cc:72:bf:c7:f2:6f:ea:6c:cf:ea:fc:8c:
9f:39:30:10:11:40:79:cd:2a:74:f1:4c:33:7b:8c:
49:fa:3a:85:b4:e6:89:45:6e:db:b4:aa:75:fc:a8:
ad:e6:6a:40:2c:a7:bc:64:e1:70:06:15:77:62:99:
6e:df:e5:96:23:bc:8f:b2:ce:49:e2:98:6d:82:8f:
1f:4d:9d:95:7e:c5:87:5c:eb:72:2b:ed:09:6c:f0:
63:e5:7b:eb:1e:43:08:c8:20:98:ce:d8:f5:0f:1f:
7e:a2:40:da:dc:20:d7:bf:ca:b2:e7:b6:ce:a1:d5:
0c:1d:9d:34:70:8c:c8:2b:7e:87:36:26:61:c3:fe:
4d:04:0d:3a:1d:b2:7e:b0:4f:c6:12:68:23:5e:c0:
a4:01:7a:0f:da:25:46:29:32:64:4f:ab:8b:45:5b:
3a:45:af:3d:15:20:4d:86:07:9e:d5:cd:84:d7:f8:
c3:5d:83:1d:67:e3:57:b4:f1:e7:6e:74:24:61:d8:
2a:c9:da:2c:3a:29:34:ad:61:8a:21:87:39:a1:af:
3f:23:10:e2:2d:61:89:a8:50:c9:39:4e:c0:a0:01:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9D:39:E8:89:A7:CA:86:8B:76:02:6C:DA:F1:FE:3A:D2:63:9A:AD
X509v3 Authority Key Identifier:
keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9f:5c:f6:6e:c7:07:5f:3e:f4:6c:d8:06:81:c9:e4:b6:1d:
80:21:eb:19:56:1d:6d:66:0d:48:73:33:94:ad:63:88:38:6a:
2a:75:eb:41:f8:83:49:c5:52:23:72:3c:34:99:90:58:f7:81:
41:14:d7:bf:b8:81:f7:5a:00:9a:44:44:23:5e:99:bb:91:48:
ed:8e:a7:0f:b6:83:5e:20:c9:53:23:b6:c0:1c:f3:fc:4d:e1:
39:9d:15:ba:cb:2f:b8:37:8a:b3:bc:04:e0:8a:9d:3a:6f:92:
de:7d:56:8f:92:ce:ae:12:ce:a2:f7:5d:b0:e7:d0:f1:1e:75:
ae:c2:2d:4f:83:52:b8:41:d9:74:b0:66:31:2c:a3:38:44:93:
f4:b4:f5:52:3c:cd:b9:e8:bd:45:68:1a:13:0c:b6:73:58:ba:
e7:b0:6e:96:7d:7f:cd:c0:a9:b8:7f:e2:40:b0:fe:54:1d:64:
f3:8b:6a:17:6e:2c:88:ec:5e:61:90:5e:ee:b2:b0:92:82:f0:
ab:c9:a6:23:ae:83:55:42:55:17:43:96:84:38:6e:95:9d:92:
ce:c9:67:b2:c8:1f:d0:64:4e:44:33:28:25:84:4e:11:44:ec:
aa:a4:22:b6:18:28:79:8f:6c:05:95:e6:ac:38:92:07:5d:42:
39:d0:c6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:53 2026 by rpki-client