Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
File: mgGl7N4ueVkyWREG0II9DRVPcAI.mft (raw, json)
Hash identifier: McIQlludUrogPAJfZgVeKWv6qYYjWHrkqUW9ZOqhbCg=
Subject key identifier: D9:CB:85:A2:03:2F:4F:68:CA:64:01:52:19:13:B3:06:37:21:05:B6
Authority key identifier: 9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
Certificate issuer: /CN=9a01a5ecde2e795932591106d0823d0d154f7002
Certificate serial: 019D3865B5E5D3E267DDAC70F188DB8CB01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
Manifest number: 09BB
Signing time: Sun 29 Mar 2026 07:01:22 +0000
Manifest this update: Sun 29 Mar 2026 07:01:22 +0000
Manifest next update: Mon 30 Mar 2026 07:01:22 +0000
Files and hashes: 1: mgGl7N4ueVkyWREG0II9DRVPcAI.crl (hash: tU0BF8g9VeXRpdE/JWTVjT3nzb+T7DmTP9NyBK6UcD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b5:e5:d3:e2:67:dd:ac:70:f1:88:db:8c:b0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a01a5ecde2e795932591106d0823d0d154f7002
Validity
Not Before: Mar 29 07:01:22 2026 GMT
Not After : Mar 30 07:01:22 2026 GMT
Subject: CN=d9cb85a2032f4f68ca6401521913b306372105b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:41:69:e2:eb:98:18:eb:64:24:d1:b5:c7:
27:5e:13:66:6b:41:36:06:b5:16:84:91:a5:0d:1b:
41:56:70:06:7e:5e:d7:80:9e:a6:5b:ad:74:ce:41:
90:bf:28:54:5a:72:e4:ff:96:3c:45:d4:71:90:b8:
e3:7f:d1:1d:92:f4:27:28:b1:da:e7:54:be:23:9c:
6b:65:48:18:ef:95:84:fe:64:92:e3:65:4e:af:13:
2c:c9:8b:67:fd:58:7d:85:1c:bb:58:53:84:8d:3a:
ad:fc:2e:ba:6c:78:a1:87:0f:a0:66:bb:93:9b:08:
40:f9:27:86:1d:6c:1f:2b:75:cb:95:d5:bf:f6:85:
a7:84:9a:10:7a:a2:b3:3e:7b:2d:77:5f:04:1e:31:
a2:76:82:fb:56:42:a9:2f:84:9a:2b:6e:d7:0f:e8:
cf:bd:a1:54:f5:59:10:78:d3:b5:6c:ba:85:82:73:
39:9d:71:b1:f4:b0:4f:0d:52:12:65:7f:70:c7:13:
25:82:ef:04:a2:6b:b3:47:91:e3:ed:10:5e:5f:e3:
3b:6d:fc:e8:65:1f:e3:25:00:f4:62:d3:3b:9d:50:
29:d3:72:a0:9f:1d:69:a1:8d:8d:96:33:d1:7d:85:
42:07:92:8b:f0:20:ee:c7:03:db:b8:3b:8a:7b:8a:
0f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CB:85:A2:03:2F:4F:68:CA:64:01:52:19:13:B3:06:37:21:05:B6
X509v3 Authority Key Identifier:
keyid:9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:60:03:07:ec:5d:d7:fc:f4:6d:1a:1e:07:cf:24:f3:f3:43:
85:1b:18:1d:0f:5c:0c:a8:23:bd:47:6e:b9:a6:be:bd:ea:59:
03:b0:4d:09:ac:fe:10:f2:24:9b:7a:31:60:29:9c:d6:24:67:
f8:90:64:7c:0f:97:4e:e1:a9:c3:8c:20:f0:eb:30:32:28:40:
7a:2f:42:ca:18:77:16:e5:e1:21:a7:ad:47:ef:72:8a:c5:1e:
2b:9c:da:b8:72:32:c8:72:1e:c0:10:8a:08:78:64:9e:29:4b:
65:77:a5:3e:05:02:01:b9:bb:02:f3:68:b6:bd:61:94:e1:f8:
d2:66:6a:41:a1:f2:61:0a:00:ca:c3:04:bc:b8:b9:12:13:24:
75:b2:a0:2e:8c:c8:04:38:32:87:ea:2e:9d:8f:47:f3:ee:d3:
43:08:b8:6e:8c:d8:db:19:b5:ee:6f:0f:8d:08:6b:a2:40:b3:
57:50:bd:da:70:72:b0:09:71:28:1d:13:19:20:16:1e:6c:de:
a0:21:5d:eb:59:16:e2:ce:cb:85:f6:4e:fb:cd:0d:3b:5a:94:
db:72:9a:1e:cf:c0:bb:90:17:7f:12:75:a7:b4:d4:5f:b7:1c:
d8:58:d6:12:5f:46:e8:1e:d6:37:68:61:8a:fe:3b:0a:05:2e:
ed:33:6b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:00 2026 by rpki-client