Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: 4PZzjuiBTXBZQQ88xZB1AkEHd5zEPvmyXWwy1npuNLQ=
Subject key identifier: 3C:E5:80:1A:B3:FD:35:8F:04:E5:EA:AE:2F:99:BF:F7:09:20:AA:5F
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 019EC3DC396231933105C9F75E605DBB3FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 08A6
Signing time: Sun 14 Jun 2026 02:00:50 +0000
Manifest this update: Sun 14 Jun 2026 02:00:50 +0000
Manifest next update: Mon 15 Jun 2026 02:00:50 +0000
Files and hashes: 1: F5-0m80tGgQaB6VZO47ty9lw_m0.roa (hash: oQoBwhHoNc0uwJ0ShH4VE+ATyTC8Z15nDhm83FZUfmE=)
2: snDtm5EPq4bt8uwg0uwMS4ldr3M.roa (hash: Re/iBzYv9n7wH6AvwpA38RzBVI5qHPbHIdU0N2m905E=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: ZzZs66Mir4u741Hb7u8jrXWSUisGMmE2e1y6MMK2emM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:39:62:31:93:31:05:c9:f7:5e:60:5d:bb:3f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Jun 14 02:00:50 2026 GMT
Not After : Jun 15 02:00:50 2026 GMT
Subject: CN=3ce5801ab3fd358f04e5eaae2f99bff70920aa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:88:f4:1a:87:6d:87:52:3a:ea:b6:ea:b0:
13:49:5c:6e:dd:8f:ca:39:28:9b:f9:a2:81:87:65:
74:30:55:f6:fa:d4:3b:cb:cc:53:13:82:e4:7b:04:
64:d0:ee:bf:ba:0e:43:74:03:e7:ba:4a:50:3b:5d:
e6:6e:b7:22:87:bf:7a:c4:65:30:ec:77:31:3b:13:
f3:b3:84:f5:de:11:79:a4:db:8a:ff:74:28:d6:7e:
4a:3e:51:fd:5b:78:61:d9:1a:f1:ab:c9:79:6a:9a:
06:64:af:8c:8e:ed:cc:d8:48:6a:5c:d2:17:46:e9:
24:52:a5:57:ad:f8:d3:99:a2:ab:ff:4c:0c:17:bb:
e7:49:ce:28:e5:e5:33:7f:9b:69:14:0d:d5:0b:03:
52:1d:78:e7:14:bc:af:87:69:f0:f2:b7:b6:d8:8f:
54:ae:d2:e1:71:23:67:06:3f:bb:34:d3:a3:ee:83:
5e:b2:d4:12:1b:2d:ba:14:93:1a:a4:90:4e:8f:81:
d5:48:e2:7b:3f:06:45:6c:41:92:22:65:2f:d4:54:
8c:f3:59:f5:c7:46:5c:e8:fd:34:6b:9b:1e:7b:aa:
48:55:a8:45:70:24:07:4c:c9:4c:37:4a:a1:e4:72:
1b:89:13:e1:45:ec:60:a8:b5:55:b9:25:3a:cd:71:
cf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E5:80:1A:B3:FD:35:8F:04:E5:EA:AE:2F:99:BF:F7:09:20:AA:5F
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7b:a5:7c:dc:4e:69:dc:71:ee:28:0b:a1:37:ff:49:a4:dc:
fc:92:ca:ea:e6:2c:e8:60:dc:18:1f:4f:f6:54:72:ef:0e:df:
b7:05:73:81:03:1f:b7:2c:d9:4b:73:b5:b6:dc:62:e2:bf:52:
8d:1e:7e:c1:9e:29:b3:99:ce:be:ee:ba:19:44:f0:fd:90:bc:
15:0b:50:b7:f2:e9:13:5c:8c:1b:6f:ef:cf:94:ee:f5:39:a6:
60:ff:ca:18:89:40:21:4d:64:f1:2c:f1:02:7b:fe:48:fe:32:
d2:f6:50:7d:24:44:3f:bb:1d:5b:05:82:61:e9:6f:e6:b6:15:
64:64:38:ad:a1:f2:fe:d9:4f:a3:44:ac:38:db:22:c3:bb:ec:
9f:35:5c:22:37:0c:b5:fc:f5:91:bc:4e:d7:b4:b9:52:a0:7b:
f9:5a:8f:65:e6:42:22:67:5c:8d:cb:b6:d5:44:83:f2:ff:e3:
53:e9:03:e1:bd:44:6d:76:08:00:00:79:99:80:5d:3e:ef:b1:
fd:0d:9b:0a:84:00:11:35:a0:23:19:6e:6e:86:52:b6:79:59:
03:a0:aa:ce:74:32:5a:c6:dc:4a:d6:b6:5b:7b:3d:81:fc:ed:
53:ce:f0:15:7a:94:ca:c8:e5:f3:41:98:1f:0d:79:bc:5a:20:
08:6f:c7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:13:12 2026 by rpki-client