Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: u6wJIGwt+YQuICH+7YAbKVrXG7fNuHU9pQTHgYMDl9k=
Subject key identifier: 8B:6F:5D:28:6E:3F:9E:E9:F1:96:49:E6:B8:9E:B7:55:C3:8C:91:B0
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 019CFFF68A5EA3D21BA0188FE7F16F0235D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 07BC
Signing time: Wed 18 Mar 2026 08:01:12 +0000
Manifest this update: Wed 18 Mar 2026 08:01:12 +0000
Manifest next update: Thu 19 Mar 2026 08:01:12 +0000
Files and hashes: 1: F5-0m80tGgQaB6VZO47ty9lw_m0.roa (hash: oQoBwhHoNc0uwJ0ShH4VE+ATyTC8Z15nDhm83FZUfmE=)
2: snDtm5EPq4bt8uwg0uwMS4ldr3M.roa (hash: Re/iBzYv9n7wH6AvwpA38RzBVI5qHPbHIdU0N2m905E=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: SiRULjCAkFmAO1UVLmIFRV4AUGPZ32IoK5LdvOfdMuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ff:f6:8a:5e:a3:d2:1b:a0:18:8f:e7:f1:6f:02:35:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Mar 18 08:01:12 2026 GMT
Not After : Mar 19 08:01:12 2026 GMT
Subject: CN=8b6f5d286e3f9ee9f19649e6b89eb755c38c91b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:6d:7d:02:aa:e9:ab:c4:95:d5:b4:77:ff:
fb:77:a9:b9:75:f8:c6:d0:6e:67:ba:5b:d8:51:28:
b0:82:3f:5b:01:84:42:f6:4f:89:69:c9:94:e5:73:
7c:ce:85:ae:c0:ff:5f:6b:54:2f:c0:1f:9e:59:0c:
de:a2:71:24:50:ea:d3:3a:cb:23:6a:51:d9:a1:ea:
d6:c3:81:13:d1:79:36:64:3f:4c:bb:b1:f1:8b:fb:
80:05:f9:5e:8b:19:cf:64:66:6d:43:e2:96:4a:65:
81:3c:73:3d:6c:e8:69:fa:48:b6:fc:ac:1f:c5:66:
e5:78:60:4b:bd:16:06:e5:9f:17:2f:0f:e4:8c:12:
65:73:1a:d4:80:6d:f8:d4:a0:32:ee:a9:9f:bd:69:
ae:ea:7e:c6:1c:91:6a:9b:e0:4f:fb:b2:7c:0c:4c:
12:46:77:45:34:95:67:22:e1:d6:a1:af:41:5b:c9:
bb:fd:72:8f:fb:9a:97:09:0a:08:09:28:46:18:8d:
32:d5:66:10:3c:e3:18:e8:62:f4:3c:35:bb:01:9f:
e1:20:65:20:c5:49:0b:31:ed:54:6a:1c:20:b7:b7:
fa:27:5c:f0:aa:ea:58:26:39:a8:fd:89:95:0d:a3:
00:ac:8d:14:ed:a2:ad:13:a7:22:57:df:d1:4d:63:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6F:5D:28:6E:3F:9E:E9:F1:96:49:E6:B8:9E:B7:55:C3:8C:91:B0
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a6:f7:b9:11:e3:88:ed:0e:9d:05:90:e2:0a:28:3e:83:1f:
ba:b3:ed:16:b6:25:06:ed:03:e8:66:c7:83:f1:d6:11:76:9a:
9a:b9:6a:1a:4e:68:0d:c1:da:ed:48:5c:43:fa:9d:f2:cb:49:
8b:ba:83:cf:b1:3c:7d:dd:71:71:fd:6b:be:41:36:03:d2:a7:
bb:d0:c3:01:53:a9:f6:3e:ba:03:1b:ce:a7:63:62:ab:f5:f2:
a5:f3:3b:22:88:86:4d:37:d0:f0:16:71:4d:c0:66:84:3b:3b:
16:9e:c0:6c:e3:3a:65:10:f3:e6:91:5d:78:94:63:a4:dd:8a:
a1:07:95:5c:86:83:f0:fc:b1:77:56:04:ce:99:20:53:37:26:
c1:b3:d0:41:f5:dd:50:2a:35:bb:7a:9b:a9:8a:89:49:26:76:
b7:fd:73:8c:51:89:45:55:cd:02:2a:98:28:ac:8d:47:ab:79:
08:6e:f9:e8:d0:bc:b5:83:18:69:ca:5d:b2:95:fe:ce:23:99:
fd:dd:24:8b:3f:41:d7:58:8b:53:2e:f3:69:15:23:3d:55:c0:
89:6e:6d:09:c4:82:45:32:c2:18:1c:75:9a:af:20:09:db:b3:
c6:bb:b5:5d:4e:61:e4:90:cf:b0:07:99:90:ff:d2:5c:d7:74:
d7:d3:e3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 10:35:49 2026 by rpki-client