Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: j4wSM+jNGm0C0OMsYeWC/Wj7+7w/x65BRoWOoL4UMDQ=
Subject key identifier: 77:41:0B:90:95:E8:FC:A2:78:D0:16:A8:55:34:53:66:71:85:1A:E4
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 019EE2C2C4271C5C0FC643C9B34AD24C4C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 08B6
Signing time: Sat 20 Jun 2026 02:01:15 +0000
Manifest this update: Sat 20 Jun 2026 02:01:15 +0000
Manifest next update: Sun 21 Jun 2026 02:01:15 +0000
Files and hashes: 1: F5-0m80tGgQaB6VZO47ty9lw_m0.roa (hash: oQoBwhHoNc0uwJ0ShH4VE+ATyTC8Z15nDhm83FZUfmE=)
2: snDtm5EPq4bt8uwg0uwMS4ldr3M.roa (hash: Re/iBzYv9n7wH6AvwpA38RzBVI5qHPbHIdU0N2m905E=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: pwbq12oS3GHhPFrzTHOmcTPeKXHWoHKNuiY0E4vC348=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:c2:c4:27:1c:5c:0f:c6:43:c9:b3:4a:d2:4c:4c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Jun 20 02:01:15 2026 GMT
Not After : Jun 21 02:01:15 2026 GMT
Subject: CN=77410b9095e8fca278d016a85534536671851ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:13:41:de:9e:8b:14:6e:22:2b:c1:3c:ad:
9d:58:8c:b3:8c:6a:d8:20:03:6f:72:83:eb:79:ec:
bd:69:eb:5f:60:1d:11:2b:23:08:d5:14:bf:85:96:
9f:a0:2b:67:2d:a4:04:59:ad:f2:51:5b:49:e1:0c:
98:3f:02:89:17:b9:85:7b:ee:fe:05:82:52:2f:f9:
fa:0b:06:96:04:6a:a6:27:9c:c7:cc:37:2c:89:19:
8d:96:6e:9a:b6:a0:71:c2:0d:c8:e3:e9:81:1a:64:
c6:fb:a7:15:60:ef:8e:bf:67:04:88:5e:13:2e:fc:
5c:3d:06:2f:87:c1:26:d7:dd:04:5d:55:9b:af:51:
b6:ec:fb:31:78:3e:80:89:52:f2:27:3b:dd:bc:23:
b4:25:14:5e:fa:91:56:8b:5f:19:54:9e:72:ad:47:
4a:53:35:3f:31:b1:45:5f:60:e5:c0:fa:27:47:15:
23:36:eb:28:12:3b:b1:dc:bd:6b:8b:25:9d:c0:ef:
81:d4:7c:12:f5:db:70:ad:bc:21:78:4b:bf:34:34:
a8:49:ef:19:9e:9f:0b:8f:89:04:9b:21:7f:8b:c0:
ac:32:c5:b5:de:eb:94:ec:dc:ab:5b:73:95:2f:e6:
6e:87:2c:33:fd:fe:7b:f3:91:94:8a:4e:ec:72:12:
ef:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:41:0B:90:95:E8:FC:A2:78:D0:16:A8:55:34:53:66:71:85:1A:E4
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b8:72:83:6e:e5:06:75:b1:6f:99:14:30:45:ae:2b:ba:b9:
c4:06:35:ea:98:54:3e:a4:c8:98:e3:62:a9:8c:b4:f3:cb:ce:
12:f5:78:df:3e:8d:1c:93:d7:86:15:c0:46:9b:f8:f7:d7:e8:
d8:cc:75:43:2a:cc:30:7f:82:e3:a8:a4:d3:ce:66:86:59:0f:
15:7e:7c:c4:8d:fa:a6:c2:44:41:49:f7:b1:50:f5:1e:b9:b6:
40:7c:81:84:df:86:02:62:39:63:0e:a4:06:37:06:a1:b0:d1:
ef:d9:7a:09:be:0c:22:ce:92:7e:4d:6b:6b:6e:e0:af:61:bd:
a8:d8:a1:d0:df:da:b9:7c:46:bb:36:01:82:bf:e6:88:9e:fc:
ac:b3:02:e4:20:f9:8e:02:01:4f:d8:c5:2a:aa:a9:b4:86:61:
b9:af:6f:1a:fe:67:04:9a:e6:19:07:ef:8d:04:31:1e:0e:b7:
db:b8:40:3c:85:34:9a:03:bc:1a:64:9b:f8:10:41:aa:a6:91:
ff:c5:63:ac:ac:45:c9:6b:82:30:f7:0f:0a:f9:34:6c:3c:67:
01:f8:aa:6b:b2:a4:71:aa:ac:f8:8a:34:9d:e6:98:a4:4a:76:
89:f8:17:a3:0b:73:6d:ae:95:9d:67:b3:49:76:de:67:ca:77:
b4:9f:00:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:35:11 2026 by rpki-client