Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
File: mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json)
Hash identifier: RZse7x3OyPfyr6mOX1kxK+LvK0coMUpu839wu+GWJYM=
Subject key identifier: 27:EA:A2:F2:E4:15:36:77:63:93:4F:3D:3D:B6:06:8B:C2:8A:E8:0F
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 019FAA507BF0F5CB686D7700F45F7D6BE6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
Manifest number: 0ACB
Signing time: Tue 28 Jul 2026 20:00:29 +0000
Manifest this update: Tue 28 Jul 2026 20:00:29 +0000
Manifest next update: Wed 29 Jul 2026 20:00:29 +0000
Files and hashes: 1: 3lc1Iu7hC-zHLMQkZNtii7oqg5M.roa (hash: AzZG+4D5GxDUpzfM6ZHMgxfiWGvCIzXIyJrcYsz9Als=)
2: _WqApLTSHnn-QALIm4js6GY_w-E.roa (hash: vRro0DgNa75sk/Unt/zDQwG9CVSw25Sr8T6Yt4LIK54=)
3: e7Z2PR7xiMg2qO87UOgZBfNHWVA.roa (hash: 2MJbHB4+HtGJ4wxkgZ0Dl95e/tJehFc1YChaP86nwFM=)
4: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: trsb5Q0IHiqnq2TMSUKMEsYyRxpRMMpvRFbj6c1TLic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:7b:f0:f5:cb:68:6d:77:00:f4:5f:7d:6b:e6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Jul 28 20:00:29 2026 GMT
Not After : Jul 29 20:00:29 2026 GMT
Subject: CN=27eaa2f2e415367763934f3d3db6068bc28ae80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1f:17:4f:e1:47:a6:1c:db:8d:76:51:56:10:
90:55:c7:5a:99:1e:02:46:30:47:3a:ed:3c:50:d8:
6c:b8:8e:71:5e:19:71:57:7f:ac:a9:a2:f3:bf:80:
c0:3b:75:81:4f:33:39:c2:64:09:47:e6:aa:f5:77:
ba:ac:12:0a:0d:64:6f:c1:42:cc:87:f5:52:d0:ba:
ce:82:8d:21:cd:17:2b:3b:61:18:8f:47:81:0d:d3:
39:73:41:7d:8a:db:29:2e:da:de:06:24:72:b6:84:
1e:9b:43:1e:f3:0b:65:62:19:ce:df:80:f8:1c:78:
26:36:9f:34:9f:fd:fa:4a:c9:b5:80:53:85:8c:aa:
f1:f1:52:61:c6:a1:26:80:32:ae:a4:9d:0a:ef:c6:
41:3c:96:e8:de:f2:f3:b7:72:90:3c:06:56:ce:87:
41:38:2d:c0:ea:64:23:0a:b4:15:ff:56:85:6d:a7:
80:71:d9:00:94:ee:0b:78:2f:e0:da:bc:d1:ae:f2:
39:7d:34:54:06:1a:93:3a:02:3d:a0:91:ff:e4:85:
b1:1b:93:3d:a5:8e:e6:08:ab:4c:7f:89:3e:74:7f:
95:20:ee:7f:2e:d7:27:16:d7:ed:48:b8:49:00:dd:
43:fa:15:10:dc:d4:89:68:2f:91:45:64:bf:1b:09:
d0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EA:A2:F2:E4:15:36:77:63:93:4F:3D:3D:B6:06:8B:C2:8A:E8:0F
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b1:f8:6f:dc:b5:89:3b:68:22:da:8a:58:aa:b5:2f:1f:95:
5f:66:d2:29:f2:f4:52:30:3a:fa:2a:54:75:2b:a9:fa:ac:81:
9a:4b:e3:18:5f:5b:c6:85:83:f0:4e:71:df:d3:c9:ad:c5:a3:
dd:50:ea:f4:5a:09:8f:16:3b:1a:ce:67:ab:85:58:7f:5d:df:
32:4e:e6:a6:f9:1d:35:1b:89:46:9e:ba:fd:68:0d:b3:60:a1:
bb:4a:35:6c:fd:62:b4:79:dc:c6:f3:1d:dd:33:0b:75:02:44:
bf:5b:5b:af:ca:20:4b:b4:dc:6c:e8:2c:a3:08:fa:c3:17:68:
3a:6d:37:3d:cf:34:4f:59:05:fd:a1:12:5d:fd:aa:55:4d:de:
2a:5c:b6:3c:24:f8:1e:24:06:9c:db:fd:e0:9f:b9:b1:94:ec:
03:0f:0d:84:ee:33:89:ac:44:fb:77:86:60:c6:58:36:77:e8:
93:f5:75:91:b6:17:d8:aa:f8:58:49:0a:ed:86:8d:14:71:0c:
f3:a4:f5:cc:8f:a2:73:4f:c5:01:79:39:c6:22:a1:b3:13:fc:
9a:07:a3:70:29:78:ca:37:4d:19:74:fb:b3:d7:59:5e:de:17:
14:37:40:0c:71:29:ee:a9:eb:d3:4b:58:03:8a:7b:bf:95:1a:
5c:7e:63:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:50 2026 by rpki-client