Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
File: MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json)
Hash identifier: FzmfxPTaGsxFA7qaYjEneWzPzkjfCdaHMTcg87CuTfI=
Subject key identifier: 0A:16:1B:3D:84:53:CB:FF:93:C2:E4:16:5D:06:A7:A9:34:A4:A0:50
Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
Certificate issuer: /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Certificate serial: 019E8FB758A906CB1C7E25C8BBE1773364AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
Manifest number: 05AF
Signing time: Wed 03 Jun 2026 23:00:17 +0000
Manifest this update: Wed 03 Jun 2026 23:00:17 +0000
Manifest next update: Thu 04 Jun 2026 23:00:17 +0000
Files and hashes: 1: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: 504o0i28PyQyExwQ44ZZhAf0G1nHTP41sOs2D1DO6rI=)
2: n8zARsIOBpHO-_C7tzB3YGju7H4.roa (hash: em6ynddbBEnzvLtotX/PQZUnXz7ZD/kDDU89M7ttH+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8f:b7:58:a9:06:cb:1c:7e:25:c8:bb:e1:77:33:64:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Validity
Not Before: Jun 3 23:00:17 2026 GMT
Not After : Jun 4 23:00:17 2026 GMT
Subject: CN=0a161b3d8453cbff93c2e4165d06a7a934a4a050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:57:7a:fd:b4:5b:8d:4b:ea:9b:b8:62:62:
70:5d:c8:83:6e:62:fc:8d:4f:fa:da:ee:75:97:b5:
07:cb:f1:0d:54:8d:4d:44:71:60:a1:ac:aa:8d:12:
94:3c:00:1b:14:ff:b2:2e:73:a9:6e:75:a4:3b:53:
9b:0f:66:14:23:7d:1d:3e:85:76:96:09:02:73:b2:
dc:9d:4b:24:3f:25:56:27:b1:2d:56:23:fb:b5:00:
00:de:03:87:09:1b:0d:72:d8:94:99:cf:39:99:1d:
52:36:1c:78:f7:2e:33:19:5e:1b:4d:22:44:d8:64:
a6:0a:5a:f4:68:ac:2e:d5:b4:85:19:b4:de:66:26:
51:db:31:5a:5c:af:4e:6e:94:5b:a1:6f:cd:fc:db:
05:08:90:20:fc:73:5d:aa:c5:50:89:e1:e6:84:6a:
36:2e:bd:3b:31:e1:26:b8:be:f7:e1:13:25:31:f1:
46:b3:b0:b0:9f:cb:c6:cc:35:b3:a8:b3:09:23:56:
a9:da:55:4a:76:b1:68:da:c9:ac:b1:9f:57:2c:b8:
41:68:60:76:81:24:df:30:6d:e6:61:ba:56:a4:b3:
70:b3:65:ec:55:2d:22:7c:b0:35:c5:ee:6b:fe:b7:
b2:b7:e6:3e:bc:35:fb:ad:fa:ad:d2:66:f8:bb:66:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:16:1B:3D:84:53:CB:FF:93:C2:E4:16:5D:06:A7:A9:34:A4:A0:50
X509v3 Authority Key Identifier:
keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e8:2f:98:27:02:d9:75:df:44:4e:1f:94:2e:7b:f9:a5:0a:
5d:65:dd:a9:81:0a:8e:5a:c7:3e:5c:4b:18:12:ee:92:66:0d:
a2:45:1e:03:3f:2d:67:5b:ae:cd:ac:19:a3:a6:c2:2c:2e:6a:
aa:23:23:71:0e:31:04:7b:54:38:fd:9b:17:fc:48:6c:2b:3e:
cf:13:66:37:d9:98:6a:0e:8f:c7:bc:4e:31:68:be:f7:cc:f4:
14:bc:1d:d4:3e:36:3c:b0:55:5b:de:c0:0c:dc:33:88:fa:92:
8a:9d:b8:29:ca:3c:54:98:73:64:de:3c:51:22:66:c0:bf:df:
4c:df:28:eb:24:37:85:b2:93:eb:da:1f:18:98:0d:3a:7e:e1:
5b:01:bd:e7:bf:6c:1f:7d:43:b2:75:0e:dc:ca:5d:7e:75:f7:
a8:ef:de:e7:fb:78:4f:c8:5b:2f:f0:9e:09:e3:59:47:55:1b:
56:16:55:15:e1:7c:79:d8:47:09:44:7e:19:ad:5a:7e:5b:b2:
4b:b8:82:a7:f8:24:3a:36:df:9b:85:cc:7d:d3:52:d8:03:0a:
ac:cb:96:80:72:56:a0:eb:50:a2:20:f3:1c:fd:a6:3e:f4:c1:
78:fa:48:3b:e0:62:05:a2:94:dd:d9:f6:d5:c0:1f:20:9a:85:
6e:3c:74:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:02:14 2026 by rpki-client