Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft
File: mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft (raw, json)
Hash identifier: kOZjlI5SvjZC2pIpRkOK3jRYWaxVY65eWivbAUgcCE8=
Subject key identifier: 0B:B0:78:12:F3:1B:86:51:9A:71:09:E2:AD:87:DF:8E:2D:D0:81:00
Authority key identifier: 9A:0B:BB:9F:85:0B:45:8C:62:46:7F:02:B7:D6:90:85:42:A5:05:93
Certificate issuer: /CN=9a0bbb9f850b458c62467f02b7d6908542a50593
Certificate serial: 01A08BD5C4C7158BCD24E68FA68B7AB4DA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft
Manifest number: 28
Signing time: Thu 10 Sep 2026 15:00:37 +0000
Manifest this update: Thu 10 Sep 2026 15:00:37 +0000
Manifest next update: Fri 11 Sep 2026 15:00:37 +0000
Files and hashes: 1: hoPDPLNiWu-9zpQhgukPEyLhtuM.roa (hash: XsLZob1RA7jolFvgyscIzhZR6yadd8m7VJ1KCp4ecOA=)
2: mgu7n4ULRYxiRn8Ct9aQhUKlBZM.crl (hash: pWmFIZO34I1aOQ+LD1AAw23e3znmb+OJRG6TWG5cJ/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:c4:c7:15:8b:cd:24:e6:8f:a6:8b:7a:b4:da:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a0bbb9f850b458c62467f02b7d6908542a50593
Validity
Not Before: Sep 10 15:00:37 2026 GMT
Not After : Sep 11 15:00:37 2026 GMT
Subject: CN=0bb07812f31b86519a7109e2ad87df8e2dd08100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:49:1b:a3:e8:a9:c4:94:81:9e:5a:0d:a6:0f:
9d:2d:de:04:88:60:34:37:33:c6:86:f3:ad:26:fc:
df:96:43:15:c0:bc:4d:92:f4:94:e4:67:37:7d:70:
f7:a8:96:a9:bc:3d:32:dd:dd:3a:04:d7:e8:da:67:
8a:db:25:b9:50:51:ba:18:0c:51:0d:92:24:3c:14:
fe:e9:1d:f9:59:66:72:01:09:04:6d:f7:35:b1:78:
9a:ac:33:73:4b:de:88:a8:86:cb:07:30:d7:ce:a5:
3d:37:3c:64:21:22:ba:43:97:30:81:9b:85:4f:85:
de:cc:34:64:0c:bb:1d:10:3a:31:56:77:8e:1e:dd:
b8:69:6d:a4:c2:ef:82:b2:69:c3:b6:ad:5a:c0:99:
72:ed:08:27:09:f2:9a:7d:67:6e:03:49:1e:ee:53:
3c:19:ce:27:d7:eb:8d:a5:f7:3d:56:b6:40:06:b9:
84:59:44:ba:5b:e6:86:84:7d:f7:82:6b:39:1c:2e:
e5:44:fb:f5:2c:bc:a0:57:e5:38:f8:1a:b8:3e:7c:
48:c3:85:07:f8:1e:c4:75:e6:d2:67:fa:bb:47:0b:
c9:de:99:e6:18:e7:6e:3e:81:c1:61:17:ef:2a:2a:
5c:d0:73:be:48:d3:38:26:b2:fe:d8:50:27:d4:fd:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B0:78:12:F3:1B:86:51:9A:71:09:E2:AD:87:DF:8E:2D:D0:81:00
X509v3 Authority Key Identifier:
keyid:9A:0B:BB:9F:85:0B:45:8C:62:46:7F:02:B7:D6:90:85:42:A5:05:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c8415a-32f1-4c8e-ae99-2c742d626e97/1/mgu7n4ULRYxiRn8Ct9aQhUKlBZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b5:60:64:06:09:30:a3:62:79:da:ce:a5:92:6e:93:2c:ea:
f8:61:72:27:73:7e:75:c0:33:36:6d:29:6c:a5:e9:76:f0:f3:
60:16:6e:6e:c2:98:83:6c:15:0b:dd:f2:fc:ff:81:1e:79:63:
48:0a:52:69:1c:88:87:fa:3e:d9:0c:e2:73:88:b8:e9:73:9c:
1f:b3:5f:bc:c1:ab:c5:2b:9b:24:7e:d3:91:96:94:4e:33:06:
79:ee:16:20:fa:b1:68:68:a0:30:2b:8d:f6:72:29:0b:04:f1:
e6:c2:43:a5:a6:b0:98:93:16:9c:4d:1a:c9:d0:68:87:56:cd:
e3:52:83:84:02:27:e6:7d:1c:34:08:be:d2:ec:23:0a:d0:eb:
df:30:f0:b1:f5:4e:ba:fa:5b:60:28:79:c8:ce:9d:67:32:9b:
07:85:34:8c:7b:23:dd:01:9c:b6:c6:6b:e9:ae:e3:4b:ec:ce:
e0:bc:37:ad:01:66:3c:72:2a:8e:1b:9a:57:d2:8e:85:63:95:
d4:53:29:18:3c:a4:5e:e1:e0:2c:9a:42:43:94:55:91:fa:3a:
34:8f:5f:34:1c:e5:66:1b:18:b3:bd:6a:2a:d5:06:fb:73:8f:
7f:8f:b8:e0:c0:49:bc:b4:3c:8c:97:17:26:22:6d:0e:05:fa:
f5:d7:19:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:39:01 2026 by rpki-client