Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
File: mgNSX2jrayNfHeIrYLG67S_H_4M.mft (raw, json)
Hash identifier: Vm8FKNoJOm2nWouYAe2nkD2htEApkAmMCiAHVW0kEgo=
Subject key identifier: 1F:D0:65:19:CD:5F:03:D9:81:10:6F:CC:DB:6B:B2:1F:A4:6A:43:0C
Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
Certificate issuer: /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Certificate serial: 019D382E1354C8EED15F5FAB81B3A6277614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 06:00:36 +0000
Manifest this update: Sun 29 Mar 2026 06:00:36 +0000
Manifest next update: Mon 30 Mar 2026 06:00:36 +0000
Files and hashes: 1: MFu4iIS8ULhZnY4FxnMd7rTjHBE.roa (hash: TCJSYgPCBj82L62nMaeEdJ0VmNDiGeeuJdnCuR6MdlA=)
2: mgNSX2jrayNfHeIrYLG67S_H_4M.crl (hash: sXwMHrmEPu3g110sA6TpzPF5jFuD66CzukHbjk18oTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:13:54:c8:ee:d1:5f:5f:ab:81:b3:a6:27:76:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Validity
Not Before: Mar 29 06:00:36 2026 GMT
Not After : Mar 30 06:00:36 2026 GMT
Subject: CN=1fd06519cd5f03d981106fccdb6bb21fa46a430c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:a8:ec:fc:ac:2b:40:68:42:7c:50:14:ba:
29:11:16:58:8f:e5:ee:35:30:dc:88:be:fc:e9:1e:
e3:72:77:e6:13:5f:88:22:22:86:1d:19:7d:f9:83:
be:1e:30:46:fe:86:9e:58:d6:52:26:7e:fb:16:d7:
bb:24:ee:d7:dd:fd:90:ef:95:1a:ef:b4:8c:8e:14:
4e:df:6e:e0:5c:db:21:1e:b2:94:e5:4c:cf:71:0f:
8a:4d:0b:bf:e3:90:73:27:e9:d0:97:e9:6a:ed:b9:
5b:33:32:f9:f2:ce:c6:a0:81:96:1e:b8:18:75:96:
b4:9c:90:a3:4f:df:a9:67:da:dd:33:44:69:fe:bf:
02:8a:2e:93:70:57:c4:91:19:fd:00:b6:5d:56:26:
ec:b6:54:6c:ae:0e:47:fe:08:99:5c:c4:e1:de:3a:
8d:63:75:de:71:f4:e7:12:c0:7e:ed:e1:50:13:1b:
c8:9c:33:cb:59:1f:3f:b7:5c:90:ef:a4:d0:39:cc:
c0:cc:e7:d5:1b:4b:00:7f:5a:0b:be:0a:c7:27:b8:
35:ec:32:fa:68:24:88:02:24:7d:5b:9e:b8:32:fb:
a7:48:ca:0d:c1:ce:64:50:e2:b4:2d:d1:22:b5:1f:
5e:19:ab:d7:2a:de:00:53:06:37:54:81:d7:95:39:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D0:65:19:CD:5F:03:D9:81:10:6F:CC:DB:6B:B2:1F:A4:6A:43:0C
X509v3 Authority Key Identifier:
keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0a:6b:c6:8c:f8:cb:84:b9:09:b3:9b:fd:83:40:63:9d:92:
e4:b3:f5:e9:88:6e:eb:13:5c:fb:3c:6e:dd:33:c6:c1:04:fb:
7c:af:e4:09:5c:76:e8:d5:9e:c0:24:c4:de:e7:f8:72:84:b9:
68:73:b1:89:63:4a:bc:7e:a5:51:ed:52:22:e9:d8:3e:71:6a:
4e:21:51:9b:aa:c1:4e:4e:42:7d:08:1b:1d:b0:e9:df:b1:e9:
55:0d:fb:57:e7:86:93:57:4a:5b:a7:0f:25:ac:ad:16:41:54:
88:1a:d7:03:69:c9:64:b4:92:18:79:36:ac:e8:01:48:82:ee:
84:aa:f0:0a:6d:3f:65:9d:f5:d7:61:be:b0:a9:b7:b3:51:c5:
3c:b3:db:31:eb:c7:1c:f5:40:ea:1b:c1:80:38:bf:88:bd:dd:
66:79:09:f5:df:94:45:17:cb:60:8f:26:28:6c:62:2b:52:1f:
2e:a7:35:50:ef:67:68:11:ea:a0:b7:a3:7c:5c:a0:8a:92:eb:
99:74:2e:ec:38:9b:11:86:e3:d1:c5:01:a9:b1:84:03:58:21:
fc:b6:04:dc:73:40:18:ec:5c:ee:ed:d9:d3:c6:c7:55:cb:93:
62:f9:84:16:ec:77:d9:de:97:35:e2:fb:38:b5:f8:f1:d9:d1:
41:c9:5d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:55 2026 by rpki-client