Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft
File: MGHmFV4_NfiOa0TNNV5uk26SGmw.mft (raw, json)
Hash identifier: pI/D1VJtUVnPHytRIVL46DOsqNXmtpW3RiCpi0s7LX0=
Subject key identifier: 62:C0:E1:E5:62:0C:82:C4:81:FC:D7:4D:09:D4:5F:39:B9:BC:CD:7A
Authority key identifier: 30:61:E6:15:5E:3F:35:F8:8E:6B:44:CD:35:5E:6E:93:6E:92:1A:6C
Certificate issuer: /CN=3061e6155e3f35f88e6b44cd355e6e936e921a6c
Certificate serial: 019CE5C98157C7D6284C57C305CA97696CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft
Manifest number: 0135
Signing time: Fri 13 Mar 2026 06:01:54 +0000
Manifest this update: Fri 13 Mar 2026 06:01:54 +0000
Manifest next update: Sat 14 Mar 2026 06:01:54 +0000
Files and hashes: 1: MGHmFV4_NfiOa0TNNV5uk26SGmw.crl (hash: MlnCKTHn2pZVh/Fe57vYdHFNbqZMC0JAP6Dujwj8MH8=)
2: O654y5p4Qf5vqt0PN2xJcmyF0Og.roa (hash: KRIvPR/2+jDrBziPo6SVSyDtCM7Okqo4BaF0x5mxhnE=)
3: ro1Jcp2lxC4NOVFabgqftamKm9c.roa (hash: pPjbit7yUoBryRtekoI8dZ+LsQVJcINu/p0DoPay2ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:81:57:c7:d6:28:4c:57:c3:05:ca:97:69:6c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3061e6155e3f35f88e6b44cd355e6e936e921a6c
Validity
Not Before: Mar 13 06:01:54 2026 GMT
Not After : Mar 14 06:01:54 2026 GMT
Subject: CN=62c0e1e5620c82c481fcd74d09d45f39b9bccd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:cc:dd:d8:6b:7a:8b:ae:ad:78:d6:cb:e4:
34:f2:a7:9b:98:3d:35:b7:20:8a:fd:bd:d3:9a:af:
2f:76:33:4e:04:5f:a2:2f:f1:97:64:1a:74:31:62:
41:50:8f:43:d6:92:c9:99:ab:7d:cb:82:d4:28:d1:
fe:a6:f5:e6:5d:0c:8c:3a:04:53:f7:47:01:03:1b:
c0:b7:a1:75:a2:99:1c:6a:b0:ed:66:43:60:03:f9:
89:2b:ef:e0:10:4c:20:6c:fc:6c:90:60:30:17:84:
a8:15:65:16:3b:f9:1f:b4:5a:39:80:13:f8:b3:ec:
69:fa:ac:5c:6b:99:8d:57:55:7c:1f:9a:d9:23:4a:
d8:38:c9:2b:08:dd:fa:49:d0:e2:3e:70:dc:74:3e:
98:c6:14:8c:76:45:e3:ef:0d:32:e2:23:34:37:69:
45:5c:91:7c:f7:a2:a0:0d:16:ea:39:75:8a:a6:ba:
9d:fc:eb:39:3c:19:5b:71:ba:db:12:b8:e5:4c:2c:
b0:28:22:92:33:67:eb:cc:36:0f:2f:78:b9:84:78:
77:0d:aa:1d:45:15:27:6b:56:b8:fd:d1:bf:e0:49:
e0:51:c4:b4:94:a0:31:5c:39:a0:f4:63:7c:80:83:
e6:f1:92:69:e9:cf:94:bb:d1:d1:4d:67:e0:af:7e:
ff:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C0:E1:E5:62:0C:82:C4:81:FC:D7:4D:09:D4:5F:39:B9:BC:CD:7A
X509v3 Authority Key Identifier:
keyid:30:61:E6:15:5E:3F:35:F8:8E:6B:44:CD:35:5E:6E:93:6E:92:1A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:36:dc:3b:cf:15:cf:c0:18:e1:36:8c:58:50:d8:26:4e:a0:
8d:06:a9:12:50:72:3d:b5:e1:75:37:55:4b:74:71:0c:74:0b:
a2:65:53:b6:86:8d:c8:20:ea:7a:f8:d8:6b:22:17:ff:d5:fb:
b3:cc:3f:23:06:8e:79:a7:5c:97:c1:f4:49:56:b9:7c:3a:2e:
3d:af:94:2f:e8:23:34:ad:30:ec:5a:f7:b6:43:dc:c7:3f:25:
ce:e5:ba:22:80:68:6a:f5:73:ee:91:7a:fe:6e:cb:08:b0:dc:
55:ec:ac:fd:d8:a4:67:8c:2c:ba:e2:9c:ac:aa:df:51:5f:f1:
5a:cb:f7:1e:00:1f:57:7c:0d:ec:a7:46:c0:c0:76:c1:33:91:
3e:0b:a0:42:76:a2:b3:cf:43:19:ae:f6:fb:d2:8e:a4:68:b1:
76:cc:89:80:1c:15:d1:98:16:f8:a1:80:43:48:fc:7c:24:ad:
e3:78:04:9c:e5:9d:ad:ff:25:cc:2a:9e:31:28:b1:c0:4b:cb:
1e:c3:1f:1e:fb:f9:a9:70:f5:4b:3b:1a:21:82:f8:4f:3f:b4:
05:ef:35:5f:ee:52:88:56:27:40:9d:53:a3:84:34:6d:f1:55:
69:33:d9:a0:cb:ef:05:91:f8:6f:4b:f1:9e:85:b0:b7:8f:0b:
da:85:53:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:37:27 2026 by rpki-client