
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: kgsfOyb9qlgdXC89Fm3cScdtVbexj4B8rMrfAnV0LoY=
Subject key identifier: 72:53:FE:3A:0B:B7:BB:B8:50:28:BD:43:0B:42:F2:E0:31:85:4F:81
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 019FCC6F3D21A6532578577220A799361DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 092F
Signing time: Tue 04 Aug 2026 11:01:09 +0000
Manifest this update: Tue 04 Aug 2026 11:01:09 +0000
Manifest next update: Wed 05 Aug 2026 11:01:09 +0000
Files and hashes: 1: F5-0m80tGgQaB6VZO47ty9lw_m0.roa (hash: oQoBwhHoNc0uwJ0ShH4VE+ATyTC8Z15nDhm83FZUfmE=)
2: snDtm5EPq4bt8uwg0uwMS4ldr3M.roa (hash: Re/iBzYv9n7wH6AvwpA38RzBVI5qHPbHIdU0N2m905E=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: TOPYC+hskAss4I/xsj9Eh7xNDYLCWNBoQ8R6QpOUT5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:6f:3d:21:a6:53:25:78:57:72:20:a7:99:36:1d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Aug 4 11:01:09 2026 GMT
Not After : Aug 5 11:01:09 2026 GMT
Subject: CN=7253fe3a0bb7bbb85028bd430b42f2e031854f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:a3:e7:97:97:55:28:a7:15:74:4c:53:b6:
4b:dd:d7:db:c6:9a:ae:fb:d9:bd:34:ca:46:2d:fd:
1d:8b:a9:61:8f:2b:20:f9:76:06:9b:3a:c7:ef:ac:
24:72:8d:8b:81:58:66:ec:7e:6a:62:9b:4f:2b:e1:
d6:ab:61:bd:0b:58:18:9d:92:17:ba:25:bf:dd:fa:
67:03:93:07:e9:85:67:3e:c2:69:73:91:66:24:58:
db:a1:d7:7f:af:50:ef:de:a3:69:4e:cf:bf:d1:f6:
0a:b7:c7:ed:34:a5:ad:37:0a:f6:80:fe:f1:f8:ca:
13:eb:ad:a5:cd:77:4a:e4:10:41:5b:99:ee:81:e5:
80:9a:40:44:d6:b3:b6:ee:5f:d2:a0:02:d3:95:bd:
ec:fe:98:86:75:3c:62:44:e2:56:41:fc:39:d9:a8:
02:0e:49:a6:5e:8e:d5:c1:bd:8a:96:37:f9:23:96:
80:a3:fc:94:fd:b2:55:5d:d8:3e:81:12:d3:12:c4:
52:a9:e4:d3:7c:4a:17:05:b8:dc:4c:20:ff:37:fa:
95:ce:21:2e:23:8c:ec:95:6b:92:9c:b6:7f:49:e5:
2b:2e:57:d0:d6:ff:c3:45:e9:ee:39:a4:bc:5e:27:
8f:cd:a1:ba:9b:ba:77:59:84:08:06:e0:e2:80:e5:
a9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:53:FE:3A:0B:B7:BB:B8:50:28:BD:43:0B:42:F2:E0:31:85:4F:81
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:03:d8:dc:a5:d3:44:49:81:ef:e5:ca:34:70:f1:b5:12:04:
7d:dc:ef:2c:71:0b:03:e0:ed:ba:b2:78:77:03:34:c1:b0:f3:
e2:37:ca:e4:2f:35:07:f8:68:74:54:39:eb:1a:9c:64:9c:cd:
8c:5d:a1:46:1d:f4:de:38:f0:e3:59:6a:45:f6:87:c5:d0:f7:
55:4a:b6:8f:52:ec:66:50:18:db:c5:b3:ba:a3:e2:aa:10:a6:
c7:e6:9c:a5:fd:aa:73:f4:07:41:12:40:8f:ac:03:b7:a7:d8:
0f:7d:e6:bd:62:6e:7e:e3:6e:d9:50:31:05:82:76:22:38:81:
9d:a2:6c:7f:5e:a7:3a:c6:79:d2:4d:a7:e8:60:40:ee:ad:75:
c9:eb:71:98:a4:ca:a3:5f:00:a8:be:2d:05:65:9b:6b:f8:c4:
aa:1f:ba:70:70:9e:03:59:85:38:df:d0:9d:0f:24:e0:05:42:
ca:7f:41:6d:b1:76:b4:e0:f8:20:51:04:dd:64:d9:55:a8:83:
65:5d:53:ae:ed:3e:e9:89:3e:3e:50:84:5f:ce:bb:c6:73:e0:
ef:82:b0:db:06:1a:a2:17:be:e4:a1:e1:3c:0b:e8:0b:48:e2:
59:7b:0e:17:d6:b7:06:03:14:e7:3c:c0:f3:2f:cb:2f:7d:e3:
e1:de:42:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 15:05:35 2026 by rpki-client