Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
File: mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json)
Hash identifier: ajzwn13Lz/+E4fmw3YjR/z5RLOxkWfU/OE5cN0Ki0zU=
Subject key identifier: 9F:C6:F7:A2:0E:FE:38:4C:D5:B9:5E:A9:B8:60:ED:AF:55:40:C6:0F
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 01A0201EA23341F2CC21154F04EE9B797AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
Manifest number: 0B08
Signing time: Thu 20 Aug 2026 17:01:13 +0000
Manifest this update: Thu 20 Aug 2026 17:01:13 +0000
Manifest next update: Fri 21 Aug 2026 17:01:13 +0000
Files and hashes: 1: 3lc1Iu7hC-zHLMQkZNtii7oqg5M.roa (hash: AzZG+4D5GxDUpzfM6ZHMgxfiWGvCIzXIyJrcYsz9Als=)
2: _WqApLTSHnn-QALIm4js6GY_w-E.roa (hash: vRro0DgNa75sk/Unt/zDQwG9CVSw25Sr8T6Yt4LIK54=)
3: e7Z2PR7xiMg2qO87UOgZBfNHWVA.roa (hash: 2MJbHB4+HtGJ4wxkgZ0Dl95e/tJehFc1YChaP86nwFM=)
4: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: OcfAku6hEqTYAwtY/geatwIchwuVQwDM/2PdIIjeQco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:1e:a2:33:41:f2:cc:21:15:4f:04:ee:9b:79:7a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Aug 20 17:01:13 2026 GMT
Not After : Aug 21 17:01:13 2026 GMT
Subject: CN=9fc6f7a20efe384cd5b95ea9b860edaf5540c60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:35:d7:79:4e:bd:47:f5:62:58:5c:d4:a3:
1f:df:7e:a1:db:12:48:66:72:c8:bc:f3:35:64:06:
4b:bc:35:2e:25:6b:ac:48:29:c5:e1:0d:4c:38:8f:
2f:2d:fd:0f:f4:07:b5:74:fd:bf:52:65:2b:0d:de:
4d:95:59:55:82:49:fd:29:32:c3:4f:c9:ea:18:3a:
92:7c:99:4e:91:2e:a6:6b:2c:d9:e5:66:22:53:5a:
b1:dd:fe:8d:ae:9f:e8:35:cd:ba:9c:d9:2a:e1:0c:
93:a5:89:6c:eb:a0:e5:54:97:85:30:18:11:97:c4:
fc:be:9d:ef:27:79:42:4d:5c:ee:a0:b7:3d:9a:36:
85:98:92:d9:73:51:ea:c5:06:7d:8e:6f:9b:b6:af:
81:68:4e:e2:25:af:52:b7:94:08:e2:c7:17:85:d7:
c7:ce:4a:d7:d8:19:57:81:4d:b1:cf:ee:d2:2f:e0:
b4:d4:38:32:38:65:d3:9e:21:9e:57:c8:20:e8:ea:
a8:6a:3d:2e:cd:b8:e9:41:1b:dc:2d:5d:a1:da:ab:
8d:fe:e7:be:61:0e:b5:87:07:7a:8a:82:d1:1f:12:
5e:de:85:a0:a2:07:00:7a:1a:e4:c5:9a:b3:81:55:
a5:cc:0b:4f:a4:4e:4c:7a:f8:77:62:7e:05:b7:1a:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C6:F7:A2:0E:FE:38:4C:D5:B9:5E:A9:B8:60:ED:AF:55:40:C6:0F
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:da:da:06:cf:0e:be:6d:1b:c4:31:2e:1c:45:04:dc:20:49:
09:54:1d:db:13:47:e6:d1:bc:2f:c3:8e:99:16:fd:4f:ad:96:
36:f6:23:ae:6f:1a:88:55:2e:a2:b1:8d:90:6b:2d:bd:c2:8f:
32:55:d5:4d:76:a6:cf:ae:c5:40:f1:f8:bb:de:db:c8:5b:65:
ad:3b:8d:69:98:27:e0:91:1a:95:a2:e8:36:de:0f:e8:42:a7:
20:61:fb:11:55:b8:3b:0e:13:83:7c:38:ce:f9:b2:46:25:99:
50:42:0b:06:9e:ad:0a:d0:b3:c9:ac:94:64:a0:ea:15:37:45:
ba:d4:ef:95:54:49:58:ab:0d:07:f5:97:3d:ba:c6:28:bc:fc:
29:df:f2:fc:ef:f6:5e:ca:6e:a2:83:43:18:6f:f2:ed:67:e3:
43:bd:4b:cc:8c:2b:3e:31:d8:91:1d:93:da:a8:8c:7d:52:22:
89:e8:11:0d:3e:d6:fc:de:df:4f:c3:33:71:61:10:f2:ad:2e:
df:4d:24:2a:b0:bf:ac:10:2c:f4:38:6b:89:e2:af:c1:23:c3:
82:1f:d6:d7:b8:2b:cc:6b:62:ee:26:07:23:12:d4:3e:92:55:
f2:a1:2f:88:60:29:5d:ca:ff:70:20:27:95:e6:42:0e:16:f2:
0d:45:5d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:39 2026 by rpki-client