Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: M/WaUAYsrvzZt/1dpTWlTuZmchzntrhIvPpoqQHeg0g=
Subject key identifier: 61:F6:8C:04:0A:DA:D3:D1:C5:4E:F1:C9:E8:72:BF:A7:38:C1:0E:78
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 019D1233D068E1E7308AA88098C18C19FBE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 187D
Signing time: Sat 21 Mar 2026 21:01:18 +0000
Manifest this update: Sat 21 Mar 2026 21:01:18 +0000
Manifest next update: Sun 22 Mar 2026 21:01:18 +0000
Files and hashes: 1: pCYaE1miR-GUQiTETVWdX8bOgRE.roa (hash: oUes+claOJXex9WS4ZOvL+WR5ipZZwtqoFIaT61iF3Y=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: 8traXR1J42r4fHK8hpPLOzUGYKxS42Bxc/ZBwRPHjxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:12:33:d0:68:e1:e7:30:8a:a8:80:98:c1:8c:19:fb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Mar 21 21:01:18 2026 GMT
Not After : Mar 22 21:01:18 2026 GMT
Subject: CN=61f68c040adad3d1c54ef1c9e872bfa738c10e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:b6:e9:ce:94:12:17:59:01:c6:2c:48:d3:
a4:15:e4:3d:23:3d:6a:39:0a:82:6c:fe:26:88:89:
32:c7:ff:56:d2:01:9b:fe:9f:54:3a:d2:ac:ce:33:
39:aa:c1:e6:f5:2e:6e:6a:fd:31:89:50:71:fd:28:
ea:d0:a5:1a:fa:52:ab:00:86:92:35:c7:81:4e:e8:
13:c9:18:ef:74:ad:c3:d9:ce:3e:9a:8e:78:8e:b5:
8b:95:d0:4f:ba:6e:83:6e:6f:a1:3e:61:4a:e6:36:
79:4f:84:9f:01:b5:65:02:e5:d1:6b:0d:cf:d1:76:
96:43:62:12:85:c1:b8:e1:a4:4c:4f:01:25:6a:13:
4c:40:9c:18:0f:2f:5f:56:0b:92:53:6e:57:1f:34:
29:80:99:78:81:b9:77:9a:1d:11:4e:76:24:c8:d4:
95:7f:73:c4:53:82:58:e3:25:2e:a7:5c:60:cb:87:
65:71:bf:70:88:94:3a:29:70:a9:e8:a8:f7:c1:2e:
3a:12:37:ac:6f:02:56:99:e9:aa:99:df:17:e8:4e:
68:96:86:28:c6:39:f4:e4:ec:02:93:27:e2:d4:f2:
f3:ae:55:de:d6:b6:1e:75:38:1f:b5:a7:2b:43:a4:
a1:b9:8b:10:75:6e:ee:8a:0c:47:85:11:4b:9c:ba:
a5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F6:8C:04:0A:DA:D3:D1:C5:4E:F1:C9:E8:72:BF:A7:38:C1:0E:78
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:51:07:16:a2:13:96:bb:e1:be:dc:b0:aa:bd:6b:4e:ba:fd:
3b:63:47:ce:ac:49:e4:7c:25:6d:f1:c1:99:76:0c:af:2d:3d:
b6:45:9d:8f:02:b4:ed:66:0f:11:4d:47:5b:37:63:ec:a0:ba:
0b:41:f9:c7:53:50:63:d8:a2:3d:bf:f5:65:4a:9c:e5:b5:da:
33:dc:60:61:91:8a:35:2d:26:1b:17:42:a0:4b:64:0d:6b:e2:
28:9b:76:fd:c9:dd:94:a2:5a:fc:ed:60:4e:ec:56:1f:29:4e:
0a:7a:fb:7a:41:b1:48:20:47:00:b9:cd:40:e4:3f:28:d8:65:
6b:3c:f1:34:1c:f4:f2:e0:c3:1e:e2:c8:b6:e2:85:8f:27:33:
43:c4:4c:d1:81:e0:29:b3:6b:c7:87:1d:df:17:32:61:65:2b:
87:a8:e5:84:e2:10:fb:6f:cd:63:ec:25:0f:b3:8b:08:65:5e:
35:a8:51:f4:46:7a:fc:41:58:41:9a:d0:c9:cb:dd:f0:8a:81:
ce:fa:f7:81:ae:d1:6c:f7:08:6f:d1:5b:94:bf:79:52:00:d4:
14:a6:95:8e:bf:e3:30:53:db:ff:99:e5:13:b8:1e:25:90:4e:
e5:72:50:0b:6b:60:33:c2:f3:7f:11:9c:70:94:8d:7b:2b:d2:
8e:19:1f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 05:48:30 2026 by rpki-client