Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: Zr9YFRTSvy1+gdWrg0Nb3yjIKUBr/UqDFrkrZ0l7x4o=
Subject key identifier: EA:3A:C3:7D:65:22:5C:55:62:E1:C1:E4:28:8F:4A:98:22:60:8E:FB
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 019D9962AC87836D54538EC3C3F9BF2B84B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:01:13 +0000
Manifest this update: Fri 17 Apr 2026 03:01:13 +0000
Manifest next update: Sat 18 Apr 2026 03:01:13 +0000
Files and hashes: 1: pCYaE1miR-GUQiTETVWdX8bOgRE.roa (hash: oUes+claOJXex9WS4ZOvL+WR5ipZZwtqoFIaT61iF3Y=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: IJ6QaxXAGUs3IuWiAqSvCfmQvcFJIx6eJERAbMFPBM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ac:87:83:6d:54:53:8e:c3:c3:f9:bf:2b:84:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Apr 17 03:01:13 2026 GMT
Not After : Apr 18 03:01:13 2026 GMT
Subject: CN=ea3ac37d65225c5562e1c1e4288f4a9822608efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:64:e3:3a:71:da:51:34:9b:d9:c8:0c:31:
6f:6b:06:df:ba:20:22:8d:2a:a1:84:b3:9d:4c:8e:
e8:97:7c:e0:dc:d2:8f:95:16:ac:eb:29:85:1e:30:
0b:0e:5e:98:db:09:7a:22:24:d0:d9:a7:5c:bf:99:
f1:1d:4d:63:9f:58:bb:84:fd:ca:f9:89:0f:e9:26:
aa:6b:cf:26:79:e2:eb:ab:a2:22:f6:f2:75:f6:85:
2a:f4:b7:0f:a4:84:e8:51:66:28:8a:6b:dd:56:8b:
9b:fa:f8:14:7e:c6:c3:84:3d:c9:a5:60:e5:7a:3b:
00:2b:34:78:4b:e5:a1:8d:af:5e:5b:6f:9f:bb:21:
95:38:ef:b9:94:fe:c4:59:b3:88:1d:ab:82:ac:05:
00:a3:79:54:6d:16:0c:e5:52:6b:3c:c7:74:e8:7b:
ad:a2:ba:cb:81:d3:ee:13:22:ad:c2:8d:e8:ba:a1:
48:5e:d3:a6:6b:2e:16:46:1e:80:21:4a:1b:19:90:
ad:1a:d4:22:0c:74:71:d7:4f:bd:ef:bb:7a:5e:64:
d6:7b:f9:79:17:97:80:ef:88:aa:19:47:b2:60:66:
04:2f:2c:8e:af:69:e8:cd:8d:29:a7:5b:08:96:fe:
c9:91:da:d8:15:ec:04:6b:e8:a6:8c:80:f8:48:ef:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3A:C3:7D:65:22:5C:55:62:E1:C1:E4:28:8F:4A:98:22:60:8E:FB
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0e:5f:0f:d8:b3:c0:ad:81:95:c2:8e:83:7c:ba:93:e9:a1:
4f:4e:70:11:bd:af:b9:2c:84:14:85:6e:50:51:dc:77:e0:68:
6d:a6:fa:9c:2a:c8:44:97:2d:66:f0:38:3e:e5:06:c0:94:40:
d0:d3:d8:99:96:f7:16:3a:d3:eb:df:3b:6c:f5:cf:58:ab:ad:
dc:81:ec:37:d6:2c:ca:40:6a:e6:0a:aa:6e:57:e8:40:49:42:
9a:d8:95:ba:32:fd:37:71:fb:3a:64:53:bd:23:e3:80:a7:3b:
04:22:3b:5f:63:61:e0:af:0e:4f:7b:26:91:2a:fc:62:f4:a8:
34:ba:fe:0f:bf:e3:d2:c1:0d:bd:5f:36:16:1a:83:5b:28:e4:
d6:22:67:45:b3:4e:20:6b:8f:3e:c1:43:06:6d:84:6c:0c:b6:
f9:71:c5:ae:3a:8f:19:2e:14:d2:b9:74:48:56:0d:1a:88:a8:
07:73:b1:da:5a:a9:ab:ef:22:f3:37:48:70:5e:21:c2:79:5f:
a5:cf:fa:8a:0b:84:fe:7b:0f:0a:66:ff:20:f9:92:e4:e6:5b:
b6:55:f7:6d:cb:0a:56:56:44:dc:a0:bc:a2:34:39:b3:43:0b:
84:ff:74:08:52:f9:ba:3c:a7:42:3c:07:fd:ba:bb:c2:be:9b:
52:48:51:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:19:12 2026 by rpki-client