Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
File: mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json)
Hash identifier: XRQYCQE9NnhREJyu3ZJDt2Ulu5l2nCyxYC0xSvgQ4YI=
Subject key identifier: E8:A6:64:5E:CD:66:99:6D:F1:DF:4D:6A:01:13:2E:50:6B:59:64:61
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 019DEE24F0063A37453E0B693812A8088406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
Manifest number: 09E5
Signing time: Sun 03 May 2026 14:01:31 +0000
Manifest this update: Sun 03 May 2026 14:01:31 +0000
Manifest next update: Mon 04 May 2026 14:01:31 +0000
Files and hashes: 1: 3lc1Iu7hC-zHLMQkZNtii7oqg5M.roa (hash: AzZG+4D5GxDUpzfM6ZHMgxfiWGvCIzXIyJrcYsz9Als=)
2: _WqApLTSHnn-QALIm4js6GY_w-E.roa (hash: vRro0DgNa75sk/Unt/zDQwG9CVSw25Sr8T6Yt4LIK54=)
3: e7Z2PR7xiMg2qO87UOgZBfNHWVA.roa (hash: 2MJbHB4+HtGJ4wxkgZ0Dl95e/tJehFc1YChaP86nwFM=)
4: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: UEF5bZ7b6CYlbhyuWgpZhS/X0FZsb1EWVBPtiXJgAgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ee:24:f0:06:3a:37:45:3e:0b:69:38:12:a8:08:84:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: May 3 14:01:31 2026 GMT
Not After : May 4 14:01:31 2026 GMT
Subject: CN=e8a6645ecd66996df1df4d6a01132e506b596461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2c:70:9e:c8:72:d4:26:88:ba:6c:83:41:7c:
a3:4b:47:c6:ef:b3:80:2b:82:4a:cc:74:ca:ba:aa:
61:24:c4:d2:fb:66:16:45:3a:8e:01:f7:cb:8f:c2:
b0:72:69:c3:2d:34:45:d3:50:b8:74:9c:c2:be:30:
37:3a:50:d2:c9:dd:8c:7b:7b:65:b0:c8:d8:9c:be:
0f:2f:d0:3c:62:67:6c:ca:91:38:07:9f:0c:a2:69:
52:fe:97:0b:2c:b9:24:d9:6f:9a:bc:ee:53:ef:15:
68:f8:6e:d7:0a:cf:6a:0d:1f:60:9a:71:23:3a:ef:
56:5b:66:39:48:8b:42:13:23:ba:ea:14:71:92:54:
f1:61:91:8b:91:5d:1e:c2:3e:15:04:60:64:7f:4c:
35:67:da:86:27:7f:9b:95:36:83:c9:5d:8c:d4:35:
9e:ff:d9:99:d1:74:4a:0f:52:6f:9c:85:b8:26:38:
b7:d8:3a:7a:99:39:22:9e:b9:4c:15:c7:39:f6:b6:
22:10:16:ce:b5:89:45:31:34:9a:a3:70:25:65:2a:
ac:b2:f5:d5:6a:07:d4:cf:fa:d5:27:45:77:77:b3:
b6:44:b1:d5:0c:a9:6f:37:8b:6c:47:42:76:0f:84:
c8:75:2f:cc:9a:3e:7e:39:25:9b:78:7e:8f:21:13:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A6:64:5E:CD:66:99:6D:F1:DF:4D:6A:01:13:2E:50:6B:59:64:61
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:eb:eb:7b:c7:4f:e4:65:8c:74:80:25:03:7a:58:8c:72:7a:
ea:13:2b:4f:3e:82:24:c6:fa:4f:1c:71:67:21:75:21:91:6c:
a7:2c:9b:ba:27:99:37:78:e4:eb:bd:9a:0d:82:91:3e:16:bd:
99:f2:10:83:76:2f:d8:63:30:56:f7:7a:03:10:9e:76:6d:e3:
74:b0:2e:b4:a8:55:48:e0:87:f7:1f:40:9c:07:ea:33:fb:30:
0c:92:1e:8e:8b:f9:ae:f7:5a:98:f4:a1:9e:19:3a:86:6e:91:
cc:20:d5:f0:38:35:1e:1e:28:29:9d:af:65:23:22:47:f2:38:
72:c8:bd:77:87:1d:fe:27:cc:43:5c:99:b7:2c:98:d9:12:61:
c3:ba:09:02:c7:f7:bc:6d:b3:9a:37:93:7e:69:a7:54:d7:bf:
8d:76:ac:95:7c:c7:b9:d6:9a:09:4a:41:66:3c:73:bb:95:11:
34:96:04:3e:a3:e2:2a:a6:d3:46:3f:ef:95:3b:91:60:a9:3f:
d9:c5:5d:8b:84:0e:63:f1:d0:ba:ff:b2:55:3d:5d:04:27:fb:
0d:d6:28:2c:9b:51:b1:75:41:94:10:89:d6:88:de:c9:e5:cd:
59:b4:c0:03:e7:e9:f1:80:5c:66:c7:d7:e9:e3:1e:04:06:9b:
25:c2:73:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:06:45 2026 by rpki-client