Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
File: mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft (raw, json)
Hash identifier: 2VFku2xGC3ftcUkE8j6PPTudUObM8hponBgY0TCnzGo=
Subject key identifier: 97:4F:FE:C2:BF:AA:A3:0E:02:CF:B1:D7:20:E0:1D:49:39:90:50:14
Authority key identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
Certificate issuer: /CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Certificate serial: 019D371BDE22B625C085F36B65478976C336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 01:01:06 +0000
Manifest this update: Sun 29 Mar 2026 01:01:06 +0000
Manifest next update: Mon 30 Mar 2026 01:01:06 +0000
Files and hashes: 1: 3uI2T4FscmS1g4BxDBywDIRN1EM.roa (hash: GmArLm5Y723dPyhpNiMZSbQoSTY/TP5XBjOwFVSZTfc=)
2: mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl (hash: sAh+tNclCDVw5uzmz4d98F47oSIYNCDU5RviDz+ycKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:de:22:b6:25:c0:85:f3:6b:65:47:89:76:c3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Validity
Not Before: Mar 29 01:01:06 2026 GMT
Not After : Mar 30 01:01:06 2026 GMT
Subject: CN=974ffec2bfaaa30e02cfb1d720e01d4939905014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:06:c2:14:ee:f1:c5:fd:a8:25:1f:fa:97:
6a:d4:fc:6f:cf:c7:52:40:78:c3:72:6e:f8:86:23:
6c:65:61:4a:59:6b:33:d4:fe:de:d4:b1:a3:6e:a6:
f7:0b:99:5d:4a:ec:ce:c5:07:dc:6d:fe:4c:c1:59:
10:d0:0d:11:39:76:e9:f4:96:45:19:ce:a7:31:d0:
ba:92:3f:67:43:75:a4:74:14:ca:54:1d:20:ba:ea:
85:1a:ac:1f:ca:95:5d:d9:72:6f:87:81:e4:ee:a3:
d3:be:53:0d:d9:90:b2:bb:aa:f4:55:30:bc:36:7d:
65:e7:28:2f:3c:fb:04:e2:fe:62:8c:01:51:94:fc:
10:31:73:6f:37:d7:17:38:cc:8e:58:54:65:f8:b1:
82:f2:e4:04:42:6e:59:ed:a5:5d:43:0a:ff:81:49:
a4:66:3e:a3:ae:a8:47:0f:8c:92:37:29:4c:2a:90:
f5:8f:49:fd:bb:df:d9:d4:1d:f5:2e:92:ca:4f:0e:
07:4b:f6:90:fd:69:5e:df:0f:20:25:52:63:78:1b:
9b:ad:49:b6:ec:d0:17:ce:01:b8:c6:d5:1b:2a:f8:
bc:04:aa:90:57:c3:47:99:4c:e4:f7:fa:a4:ce:43:
33:5d:39:f7:d9:fb:19:5d:29:45:be:d5:68:0f:80:
5a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4F:FE:C2:BF:AA:A3:0E:02:CF:B1:D7:20:E0:1D:49:39:90:50:14
X509v3 Authority Key Identifier:
keyid:98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b6:0c:a0:0f:67:f0:bf:b0:86:84:9c:ca:86:45:90:f9:9c:
29:b5:dd:d8:0d:a6:58:59:fe:67:3f:d9:52:45:8c:f1:32:e9:
2e:bd:88:3c:3e:bc:87:ff:d1:59:96:1e:a7:80:93:0a:23:00:
bb:87:c0:3a:ad:92:51:21:98:62:e2:a9:07:39:9f:2d:67:15:
91:1e:6b:10:ae:f4:62:6f:04:46:a0:49:1d:5b:71:e5:12:70:
b1:93:c0:a9:30:2a:09:c9:c4:4a:3c:15:b3:62:d2:b5:8e:19:
3a:28:42:1b:a1:f5:39:be:e7:92:6b:ba:25:4c:37:1b:a5:d8:
05:b4:3a:9c:2c:7e:b4:e3:44:13:1c:3d:63:26:f5:61:2b:dc:
41:4b:4c:0f:10:8a:d3:b2:24:dd:5e:4b:cc:5c:7b:84:7e:04:
4d:97:c3:64:20:37:6a:28:9b:49:bb:b7:bc:d8:d8:f4:5e:55:
84:2d:fb:9c:9b:8d:73:81:18:44:e8:c7:e9:10:3e:3e:60:b5:
c2:5a:99:d4:cf:01:99:b3:77:bd:15:45:6d:21:0b:6a:d3:44:
b0:48:eb:fd:df:28:91:49:d0:6e:9a:cf:60:e7:e7:bb:2e:16:
4f:61:6a:98:6c:a9:46:13:86:78:5a:d3:15:eb:fb:c4:c4:67:
ed:29:73:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:39 2026 by rpki-client