Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
File: MGE0vPWfWB1rdmMM-oeGeHaikhU.mft (raw, json)
Hash identifier: ntlpY51tFWfGylhoq72KeTqjZYNd5wK+nkxmK8qa+cg=
Subject key identifier: 1B:0A:FC:1C:2A:32:CA:15:8C:D0:56:FB:C8:A3:4F:11:F1:76:FB:AA
Authority key identifier: 30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
Certificate issuer: /CN=306134bcf59f581d6b76630cfa87867876a29215
Certificate serial: 019D37522D25FD1F6BFC94AA4DD56333DA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
Manifest number: 142E
Signing time: Sun 29 Mar 2026 02:00:25 +0000
Manifest this update: Sun 29 Mar 2026 02:00:25 +0000
Manifest next update: Mon 30 Mar 2026 02:00:25 +0000
Files and hashes: 1: MGE0vPWfWB1rdmMM-oeGeHaikhU.crl (hash: XN9YI/awqZim+ZTLD7kzhfYvUpg6FAdhdtCkkZRfPII=)
2: _J-j7B7EBVpS6iWSIcOV728Uk0g.roa (hash: +Uy6WqqggKFrmTGgRkmBqe1HnPUwyMjAxaGGze9f2+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:2d:25:fd:1f:6b:fc:94:aa:4d:d5:63:33:da:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306134bcf59f581d6b76630cfa87867876a29215
Validity
Not Before: Mar 29 02:00:25 2026 GMT
Not After : Mar 30 02:00:25 2026 GMT
Subject: CN=1b0afc1c2a32ca158cd056fbc8a34f11f176fbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:de:61:6e:ac:97:84:af:f2:8a:36:b8:6e:
e2:3b:97:56:46:99:f5:1b:23:48:94:fd:78:d6:d9:
8f:80:8f:30:d7:12:9f:e2:7d:78:32:a7:60:87:70:
52:1a:e9:fa:1a:ad:6b:24:c9:a8:93:5f:12:b3:33:
a7:06:cf:6c:e5:d6:c6:51:41:0e:09:88:10:66:ec:
a4:3b:33:6a:63:2c:07:02:78:42:3b:8c:e8:63:d2:
d8:54:5f:0f:b1:97:dc:b9:98:69:91:8e:81:3b:76:
df:d5:46:b2:a2:bd:d7:2c:56:30:e2:39:90:81:43:
71:c4:9b:9e:af:8b:ad:b7:66:90:f4:43:c0:b7:7b:
97:59:8b:2d:cf:e1:13:fa:4e:3c:7d:b3:63:8f:a4:
e7:15:ce:90:af:19:b5:16:98:9f:f8:9e:88:7b:8e:
54:64:c0:41:a9:1c:25:ca:b3:5f:43:94:56:6a:6e:
b2:a4:f8:52:44:f0:87:6c:d7:c8:d3:02:18:bd:ec:
9a:4f:6c:f8:d9:39:8b:16:78:95:00:2f:fe:32:1e:
e6:58:58:59:40:0e:02:04:2d:a5:40:4b:f0:5a:8d:
2e:8a:92:f9:68:ee:4f:eb:d5:63:a8:ef:59:ea:8e:
27:2b:2b:c7:be:17:53:17:06:2e:c6:ce:d0:62:cc:
94:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0A:FC:1C:2A:32:CA:15:8C:D0:56:FB:C8:A3:4F:11:F1:76:FB:AA
X509v3 Authority Key Identifier:
keyid:30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:32:61:6b:e2:59:b2:22:46:b2:e7:5d:e9:43:da:37:ce:32:
22:71:12:27:b3:f8:df:1f:7e:2f:24:03:47:46:d5:a8:70:d8:
ad:e2:2c:e0:45:7a:4c:5a:0c:aa:87:e6:89:d9:0b:ef:db:a0:
3d:83:ec:c2:e4:b7:4d:fe:0d:39:89:6c:5f:70:d5:a5:0d:b0:
c8:1d:a9:be:d2:8a:a5:f6:08:02:c8:84:cc:b9:70:1f:7d:51:
e7:90:09:e2:ef:16:0d:a5:de:46:53:2d:07:8d:7c:a9:0a:92:
a5:86:76:53:c8:d3:59:c6:7a:b4:0f:7d:cf:65:f3:da:96:ed:
4c:4d:d8:50:02:97:39:87:95:8c:02:21:d2:7f:13:db:b2:46:
f3:5b:1d:fe:f7:7a:b0:9a:15:d7:5a:08:00:02:0d:3f:8c:3b:
8c:71:72:02:ff:3b:ad:88:7f:57:7d:fa:58:91:81:ef:59:0b:
d3:16:66:4b:20:99:41:5d:57:61:20:f1:7b:fc:4b:5b:ee:77:
fe:73:a5:3e:e4:95:66:db:4b:ac:6d:88:eb:13:6f:96:37:78:
e4:ae:56:c3:fb:e1:68:23:ea:47:69:75:00:9d:f3:b6:90:5d:
0f:bf:02:55:6f:72:99:ca:39:b8:34:6b:8c:81:0f:f7:cf:db:
44:11:26:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:37 2026 by rpki-client