Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: 4b4TQQ3jJPNVGQVm2yow9EEIRjkxqiVKjGSBi/totAU=
Subject key identifier: C3:9E:C4:AE:BF:EC:9F:CC:D2:83:F5:63:F7:82:CC:01:54:67:DC:C2
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 019FAB99FFD136899D6B3EE7911D5B210999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 091E
Signing time: Wed 29 Jul 2026 02:00:24 +0000
Manifest this update: Wed 29 Jul 2026 02:00:24 +0000
Manifest next update: Thu 30 Jul 2026 02:00:24 +0000
Files and hashes: 1: F5-0m80tGgQaB6VZO47ty9lw_m0.roa (hash: oQoBwhHoNc0uwJ0ShH4VE+ATyTC8Z15nDhm83FZUfmE=)
2: snDtm5EPq4bt8uwg0uwMS4ldr3M.roa (hash: Re/iBzYv9n7wH6AvwpA38RzBVI5qHPbHIdU0N2m905E=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: 1uBEOnxOPvJgC8G0bVU8wReYLqMYUU4lRpDGOJ6HQuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:ff:d1:36:89:9d:6b:3e:e7:91:1d:5b:21:09:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Jul 29 02:00:24 2026 GMT
Not After : Jul 30 02:00:24 2026 GMT
Subject: CN=c39ec4aebfec9fccd283f563f782cc015467dcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:05:2f:43:99:b7:90:86:aa:3c:71:bc:1d:
70:a7:64:0f:76:84:de:bc:f9:ee:86:c6:f8:51:22:
09:52:cb:29:67:d4:70:c4:da:f0:96:51:1f:7a:12:
4e:38:79:45:2a:fd:d9:b6:aa:1e:51:ed:b2:f0:0e:
7b:2f:9e:b3:b1:44:42:01:08:9b:ae:ee:71:44:9f:
fe:5f:4d:8f:12:c6:ff:0e:c3:ed:dc:e0:56:b3:60:
d4:37:12:f3:fa:c5:ff:9e:86:75:0c:43:ef:a4:1c:
3a:eb:03:26:61:a3:cd:50:50:98:93:12:31:ca:95:
e8:ef:b5:14:4f:81:ba:06:70:77:8a:96:13:87:df:
e1:b2:fa:30:d5:0d:a4:2a:1a:f2:6d:30:06:86:d7:
15:0d:07:12:0c:68:71:d5:fa:86:5d:9c:1f:63:41:
d9:33:e9:27:8b:d5:b3:b4:06:e7:01:66:b0:51:07:
d3:c6:d5:d1:01:cd:2d:94:bf:53:ab:c0:6d:2e:9e:
98:29:3a:58:4d:36:16:44:bc:db:83:d3:bf:8f:7d:
26:80:1e:56:ac:51:08:b6:e8:78:67:42:c6:81:4d:
65:73:17:56:9a:76:08:23:85:ab:35:f3:2e:28:6f:
ca:b9:f7:d0:5e:a1:9e:b7:ef:e9:1e:a9:f2:12:7a:
d3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9E:C4:AE:BF:EC:9F:CC:D2:83:F5:63:F7:82:CC:01:54:67:DC:C2
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:53:95:91:b9:a1:08:87:a7:35:10:f5:3b:ae:59:95:95:a1:
b2:07:c2:bb:f8:e9:ee:79:6e:5a:b5:e7:30:7d:f8:27:1f:59:
ad:ff:15:b3:e1:10:61:be:74:da:28:96:de:08:a0:8f:a9:f1:
14:47:ed:cc:04:bc:71:3c:cf:8f:29:70:59:57:4a:87:e2:f3:
fd:aa:00:32:95:80:ab:84:19:7e:b9:aa:45:ab:3c:b3:1e:29:
b6:09:e1:21:e0:9c:ff:4f:66:bb:cd:8b:57:f7:12:f3:01:77:
38:af:dd:d9:5a:9d:e9:00:e2:be:24:47:ba:a4:e9:9c:ad:25:
31:b3:56:3d:1d:a0:e5:d6:91:c1:08:a1:62:e3:62:6c:08:b0:
4a:6a:4b:6a:8b:c5:b6:7f:43:c6:5a:ba:98:31:bf:04:02:d9:
22:bb:f5:24:af:30:e7:cc:7f:69:61:3a:0a:77:55:70:67:72:
83:3d:2c:2c:a9:18:c1:46:a5:e1:0e:6b:a2:56:f2:8b:98:dc:
c9:48:69:db:99:2d:ce:e0:0f:61:ab:d3:e7:f1:ef:31:ba:f6:
5d:a6:3c:a9:77:e0:8b:c4:15:a5:82:8f:46:86:7b:26:d5:b7:
ae:b2:86:cb:6d:d9:0d:46:fd:ea:78:c5:fa:d7:6a:00:d6:ad:
a2:ed:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:55:33 2026 by rpki-client