
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: g1k9CXwXfrNF8ljGNJs//jpH00PVaILUD+swBjfKwa0=
Subject key identifier: A1:0A:E3:0F:94:1E:FB:5A:4A:C3:99:B4:3C:62:5F:DC:CA:70:FD:4F
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 019DF915AB70799ECB4F80B87C7B8621F368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 083D
Signing time: Tue 05 May 2026 17:00:40 +0000
Manifest this update: Tue 05 May 2026 17:00:40 +0000
Manifest next update: Wed 06 May 2026 17:00:40 +0000
Files and hashes: 1: F5-0m80tGgQaB6VZO47ty9lw_m0.roa (hash: oQoBwhHoNc0uwJ0ShH4VE+ATyTC8Z15nDhm83FZUfmE=)
2: snDtm5EPq4bt8uwg0uwMS4ldr3M.roa (hash: Re/iBzYv9n7wH6AvwpA38RzBVI5qHPbHIdU0N2m905E=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: oCvzxO5+v9/JCOLU76a89xrl831ly2wbBNpWwib+4xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:15:ab:70:79:9e:cb:4f:80:b8:7c:7b:86:21:f3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: May 5 17:00:40 2026 GMT
Not After : May 6 17:00:40 2026 GMT
Subject: CN=a10ae30f941efb5a4ac399b43c625fdcca70fd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:bf:02:42:61:d6:6c:ae:61:32:51:20:ac:
a3:59:ac:99:33:5c:43:76:9b:2b:9b:af:da:82:ba:
f8:79:e3:47:08:20:24:84:2f:64:19:65:1c:f4:ef:
f0:40:57:e8:82:d6:cd:ef:3f:97:4c:33:95:fa:85:
13:7c:ba:66:2e:56:b4:ba:a6:08:c2:fa:fd:6a:9e:
60:76:e7:aa:ec:9e:9a:83:6b:34:23:44:a7:f3:0c:
0a:c8:9c:23:91:d7:01:5b:1d:02:14:cd:7a:ab:89:
fc:b7:6e:67:19:99:3f:f8:27:87:ae:8c:35:78:c1:
4b:63:af:fe:8c:66:79:18:de:3b:1d:84:43:f8:60:
22:6e:7a:87:5e:6e:76:46:be:2e:e2:ae:2b:7a:8d:
8a:84:1d:34:8e:0d:47:ce:19:58:7b:2c:b7:f1:3e:
78:c1:8b:5f:2e:9b:36:83:97:67:89:60:27:95:86:
82:39:cf:10:0d:2a:9a:c3:cf:62:ac:12:97:cc:1f:
f4:46:45:6e:38:c4:9b:1b:f7:97:91:cc:e6:71:6f:
21:ae:a9:d2:1c:6f:ff:34:df:61:3e:e8:61:20:7d:
dc:1c:93:11:d0:e4:c1:18:5a:12:44:ed:81:62:3d:
38:d2:7b:67:3b:ca:07:9b:f9:e5:92:09:c4:4a:0a:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0A:E3:0F:94:1E:FB:5A:4A:C3:99:B4:3C:62:5F:DC:CA:70:FD:4F
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f9:8b:a3:2f:35:23:fa:32:b9:e4:e8:e3:70:6e:86:70:f3:
c3:0d:37:44:c3:36:28:d4:90:52:a1:f7:b4:1f:ce:f4:f6:58:
97:be:73:ed:7a:7d:52:f7:9a:49:53:15:7f:52:c7:0d:e0:0e:
53:87:a5:f7:6d:d2:34:80:e6:c1:e5:a4:cf:9d:3a:68:68:43:
22:1c:ff:54:7a:38:5c:a8:10:8e:ee:23:8d:6b:7a:df:23:3e:
74:8a:5e:ac:25:45:54:46:d1:94:cd:a2:6d:87:76:b2:20:4a:
e3:08:3e:24:66:d5:19:da:32:00:3e:bf:b1:66:91:3e:22:45:
12:46:6e:b2:51:7b:4c:a5:23:9d:20:96:d3:3c:02:e7:07:09:
9a:fd:5d:7c:6f:fd:2e:53:66:5b:07:f5:cd:fb:90:a6:78:40:
c9:51:6d:d4:ea:20:63:e2:ca:95:4d:4b:84:89:03:13:b1:c9:
99:f4:84:77:4f:c8:62:52:ef:e3:a4:4e:17:66:a1:aa:53:85:
39:1f:4e:03:dd:1d:db:df:ef:61:cc:d7:bb:9d:19:ae:53:07:
96:b1:bf:2f:69:70:fe:d3:8e:92:51:2e:81:01:73:4f:98:c5:
16:75:89:e2:8a:8e:fa:91:7c:9a:e8:f6:81:ee:30:12:cd:2d:
10:ea:47:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:31:55 2026 by rpki-client