Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: OIXck6DXjoOOPuofwoOpRBDuInCqkGFAEiidptTNrik=
Subject key identifier: DE:ED:E5:79:23:95:0B:54:9F:CD:B3:87:1E:1C:EA:0A:22:D0:D5:CE
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 019CABD964BEC21E5658BBF4D52579EC448C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:16 +0000
Manifest this update: Mon 02 Mar 2026 00:01:16 +0000
Manifest next update: Tue 03 Mar 2026 00:01:16 +0000
Files and hashes: 1: pCYaE1miR-GUQiTETVWdX8bOgRE.roa (hash: oUes+claOJXex9WS4ZOvL+WR5ipZZwtqoFIaT61iF3Y=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: 3NR40D23sHxii0ee0qWM5S8DOmPjaUDn3HQWFALG4Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:64:be:c2:1e:56:58:bb:f4:d5:25:79:ec:44:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Mar 2 00:01:16 2026 GMT
Not After : Mar 3 00:01:16 2026 GMT
Subject: CN=deede57923950b549fcdb3871e1cea0a22d0d5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:aa:ca:16:9f:69:9d:70:b6:18:20:11:fd:
7e:5e:4c:c6:b8:3d:d8:25:a3:9a:ba:bb:d9:13:8e:
14:af:21:2c:09:ad:49:35:96:e2:1a:f0:f0:69:93:
42:30:56:49:3b:7a:5a:e0:93:ec:1e:07:e9:3c:4d:
ac:b2:ea:65:90:08:7c:b8:84:b1:e1:3c:38:fe:bc:
7b:78:22:4f:2b:dd:21:ea:6e:bb:dd:47:00:07:ff:
4e:b5:cb:c4:15:62:f4:24:9c:22:c0:1d:e4:33:44:
a2:f4:20:f6:54:56:ad:6a:c7:e4:26:30:a8:35:f7:
1f:9a:56:30:2f:16:46:98:67:eb:33:16:7e:a3:3b:
82:f3:56:9a:9c:18:9d:78:ad:b7:22:c7:2a:ec:2a:
e9:43:90:82:88:f5:84:5f:bb:ce:c1:fc:f9:cd:f1:
8f:dc:fb:cc:7e:78:77:17:7c:6e:88:9a:8b:a1:30:
a6:23:2f:b9:64:ef:fe:89:33:91:ba:4d:da:5a:e7:
7c:f7:f0:40:e7:da:5c:3a:94:fb:3d:11:33:4e:42:
c9:3b:e2:af:79:2f:6e:32:68:29:af:94:90:6f:48:
5e:32:3b:27:7c:e4:07:69:9f:35:4b:bc:29:99:c2:
47:8f:8c:88:6c:fd:81:a1:50:3d:a7:19:65:ef:39:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:ED:E5:79:23:95:0B:54:9F:CD:B3:87:1E:1C:EA:0A:22:D0:D5:CE
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:30:d2:65:54:ef:04:2c:2a:73:b7:0a:c4:1f:66:3d:57:94:
16:d2:43:7a:82:b2:24:f4:6e:f4:65:4b:07:0a:c2:b8:c3:87:
34:87:09:b2:f5:dd:44:c5:de:28:b4:90:f3:c1:56:27:a3:44:
0c:36:5b:7e:f8:c0:c4:20:d9:22:08:2a:ea:d3:1d:b0:5f:b7:
28:89:29:95:97:52:2d:45:46:ee:c0:d7:d7:62:1d:bb:b5:f9:
44:d8:7b:fb:02:07:bd:32:d7:a5:e5:b3:cd:91:66:ca:19:ef:
ff:43:4c:c3:84:f7:ff:6e:64:c1:79:88:fb:3f:dd:bc:61:13:
59:d6:0f:0c:4a:88:c3:7a:75:fe:c6:b6:d2:e8:69:46:b9:8f:
c1:1f:77:b2:55:12:94:cf:24:72:41:7e:7b:08:fc:a5:51:55:
e9:dc:4e:f7:61:42:1e:10:e5:e1:97:1b:2c:2b:d2:6b:68:b5:
cc:f9:1c:04:79:0f:d9:bc:09:2a:e9:1e:b0:70:58:97:3f:64:
f4:50:43:6c:89:f4:c7:79:02:ec:94:9c:4b:37:77:ac:7b:c7:
cf:9b:8d:8f:31:5c:63:cc:f5:91:c0:18:3b:77:d8:26:ef:7c:
85:4b:0e:82:f1:03:16:88:e6:77:e3:84:cd:40:a4:5b:5b:dd:
1d:9b:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:52 2026 by rpki-client