Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: mp6mw3ow7bu0f32tx7D07beCznNp/o71LrGc6LiE3FE=
Subject key identifier: 2F:B9:DC:58:CC:B0:42:98:47:0F:0F:26:49:6E:87:64:C4:70:3C:4C
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 01A0B61AEE667975698A424D924E29129911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 09A8
Signing time: Fri 18 Sep 2026 20:00:13 +0000
Manifest this update: Fri 18 Sep 2026 20:00:13 +0000
Manifest next update: Sat 19 Sep 2026 20:00:13 +0000
Files and hashes: 1: F5-0m80tGgQaB6VZO47ty9lw_m0.roa (hash: oQoBwhHoNc0uwJ0ShH4VE+ATyTC8Z15nDhm83FZUfmE=)
2: snDtm5EPq4bt8uwg0uwMS4ldr3M.roa (hash: Re/iBzYv9n7wH6AvwpA38RzBVI5qHPbHIdU0N2m905E=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: 0X1M5CEIAQ0mEGeRUjmfDFoWOS0invsBXsxdFYiumek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:1a:ee:66:79:75:69:8a:42:4d:92:4e:29:12:99:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Sep 18 20:00:13 2026 GMT
Not After : Sep 19 20:00:13 2026 GMT
Subject: CN=2fb9dc58ccb04298470f0f26496e8764c4703c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:9a:a8:ff:6f:2b:50:ab:79:4c:69:0a:6f:
66:a1:42:5b:0c:7a:5b:e9:be:f2:b7:0a:5b:65:81:
77:d6:09:e0:a7:ed:ea:63:98:14:86:9a:1e:be:2b:
88:8a:0e:c4:29:3d:cb:8c:f1:8b:59:d5:80:3a:77:
88:c8:97:1f:63:3d:51:f7:d5:94:d2:2b:85:5f:fc:
77:1c:c6:b3:25:20:76:87:5f:c9:d2:24:8c:55:fb:
6d:9d:c3:4a:b0:21:2a:08:57:81:e7:31:81:d4:54:
7b:1b:42:de:68:8a:3c:b8:56:53:07:3f:48:5a:b5:
b1:fc:bd:49:52:34:7a:b5:96:29:33:4e:8e:ce:4a:
19:89:6f:1e:6e:81:86:31:1c:99:ef:e0:60:35:84:
d5:46:9f:51:fb:6f:24:16:37:a9:8f:86:d8:3d:2c:
e4:f7:98:31:86:23:a6:37:64:a7:88:9d:27:a0:ab:
ec:9d:6b:e0:16:b2:0c:03:4a:c2:ca:2e:a9:a7:26:
5f:c8:f9:e6:15:47:41:88:20:24:84:da:b5:4f:b7:
10:2e:bc:2e:ec:00:5f:97:d5:9c:00:b7:4b:fb:52:
34:f0:9b:e4:e7:6a:a4:36:e7:2f:45:a3:0b:c2:04:
c4:96:39:32:25:ed:97:de:90:43:9d:10:1b:60:a1:
e1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B9:DC:58:CC:B0:42:98:47:0F:0F:26:49:6E:87:64:C4:70:3C:4C
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:93:d5:d4:48:1d:d5:1b:da:20:ff:40:d7:76:c7:ad:f9:eb:
5f:1c:d9:53:1e:a2:ae:e1:2f:b8:93:b9:4e:ac:b0:a9:6f:aa:
4a:10:8d:5b:17:3e:2e:f1:8a:0b:fb:1f:ed:27:84:59:12:0a:
40:b1:de:45:3b:34:6f:17:01:9e:7b:a8:ca:3e:7f:c4:64:41:
98:0a:f5:d7:e9:3a:ab:26:6a:2d:aa:63:48:15:31:b5:64:ea:
dc:d4:7b:c2:1c:b3:b6:d5:46:3c:75:35:ff:81:75:61:38:65:
44:06:61:2f:76:69:8c:3b:b8:11:ad:b7:d2:04:50:90:63:2d:
4d:ca:bd:ca:54:89:ee:e2:63:8b:c9:78:7d:dc:ff:56:3f:da:
fe:64:6f:17:78:51:7d:ef:5c:a4:97:18:6c:74:ac:45:98:90:
ae:fa:b7:9b:d6:9b:cd:27:be:cb:f2:2c:b9:cd:c9:90:4a:15:
18:ca:9e:73:eb:0a:e1:f5:16:b2:c1:a7:c9:fb:68:76:4b:a4:
16:8a:25:2b:e4:c4:90:a5:f4:be:17:0b:4c:dd:ef:df:80:83:
b1:85:15:e2:05:f7:9b:aa:83:87:d5:d6:96:20:69:a0:ae:ab:
f4:e6:a6:b5:53:52:5d:9f:36:56:2a:77:6a:32:41:7e:74:33:
b2:de:e7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:07:44 2026 by rpki-client