Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: +XCq5h9kEuoAmwFJfRewvF+vYbNrRDJh+0Fpel6Pr3M=
Subject key identifier: 89:3A:65:17:5B:69:6F:7A:11:D1:65:1C:4D:DF:79:A7:32:83:14:92
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 019CAED9B3FF9232E4586FB7EBAC41792863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 0792
Signing time: Mon 02 Mar 2026 14:00:28 +0000
Manifest this update: Mon 02 Mar 2026 14:00:28 +0000
Manifest next update: Tue 03 Mar 2026 14:00:28 +0000
Files and hashes: 1: F5-0m80tGgQaB6VZO47ty9lw_m0.roa (hash: oQoBwhHoNc0uwJ0ShH4VE+ATyTC8Z15nDhm83FZUfmE=)
2: snDtm5EPq4bt8uwg0uwMS4ldr3M.roa (hash: Re/iBzYv9n7wH6AvwpA38RzBVI5qHPbHIdU0N2m905E=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: 4h4N3JtrZ1kx4nh82CSl1eIgOsI2KdGBR48xrg0veD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:b3:ff:92:32:e4:58:6f:b7:eb:ac:41:79:28:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Mar 2 14:00:28 2026 GMT
Not After : Mar 3 14:00:28 2026 GMT
Subject: CN=893a65175b696f7a11d1651c4ddf79a732831492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:2a:fb:2a:c5:62:f0:6b:a3:1a:c7:ab:6c:
24:01:02:f5:29:95:ed:06:9e:11:67:2e:23:05:71:
7a:c7:6f:9b:db:f4:ef:0d:c6:59:8e:fb:62:ab:34:
cf:5c:56:a6:a7:22:7e:dc:15:77:99:6f:c4:24:dc:
59:3b:04:0d:cd:a0:8e:61:55:47:25:42:76:c9:db:
9b:47:87:87:7d:aa:4d:c6:dd:d1:9f:bb:db:98:ed:
6b:f7:ce:4c:59:88:cb:16:cd:1a:ab:40:4d:00:43:
e9:39:db:12:65:39:ad:bb:36:7d:97:e2:5b:c3:8f:
ac:e8:c1:97:26:82:33:5c:46:47:a8:da:7b:ad:b0:
dd:ab:72:46:94:b3:34:21:fc:f6:50:88:fc:be:ca:
a6:23:50:7b:f1:b3:5a:4c:4b:d9:3b:92:ff:3c:6c:
8a:9e:3b:0b:5f:3d:9c:d4:3f:f4:6b:a6:73:dd:5b:
d6:19:e5:c6:98:aa:59:9d:7f:fa:aa:ba:b0:47:0c:
67:29:13:b2:7c:ba:68:24:d5:c6:90:e9:40:fd:92:
09:2b:ec:b7:66:a9:7c:e6:2d:d2:ad:0f:08:1c:2b:
05:49:d4:1d:5e:c5:bb:6e:99:4b:97:5f:ef:9a:c2:
56:e5:36:47:32:80:b6:15:b9:b2:53:ef:39:09:bd:
1d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3A:65:17:5B:69:6F:7A:11:D1:65:1C:4D:DF:79:A7:32:83:14:92
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:82:2b:d6:0a:ed:63:85:36:5a:79:94:fa:0e:55:8e:2a:75:
d7:40:6e:c2:8a:af:45:54:f0:51:c0:47:31:5b:17:41:98:f8:
49:70:e8:61:9c:00:92:92:a1:5c:d0:b3:8c:99:ea:a8:52:54:
78:18:71:9a:de:95:cb:58:e2:63:ea:af:5b:82:79:13:dc:c0:
b3:4e:ca:1d:1f:5d:11:27:f8:f3:a9:d8:fa:30:b1:2b:14:44:
c3:78:47:1f:70:9b:57:4f:de:94:d2:13:82:67:e9:78:64:66:
34:33:84:0f:78:25:21:bf:2e:f6:79:a7:b5:74:d1:30:02:02:
95:e2:8f:e9:3b:c6:34:90:67:b1:95:aa:b2:f9:9e:c8:d0:bf:
5f:d5:83:54:4c:76:9e:26:8b:e4:64:34:07:fa:ef:00:53:cb:
2f:51:01:70:45:e9:98:90:85:4b:b0:19:5e:4c:dc:5d:ad:06:
c9:34:63:c4:65:f4:5a:88:ea:3b:7d:1a:77:ec:ad:e2:20:e2:
95:65:f1:5d:51:a2:83:aa:c7:58:37:52:fd:67:48:66:8b:fa:
9e:61:2e:a8:d1:6f:c0:ea:7a:c4:70:d0:cc:7c:9e:70:f9:6b:
68:e7:d3:5e:9b:57:5a:b4:69:0d:4f:24:63:6c:65:b2:d2:0d:
78:85:8c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:59:53 2026 by rpki-client