Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: USHTuVLLd7mq/OFBUbjEl/3z8ACD2Up2FduWw6JhLYs=
Subject key identifier: 50:9E:BB:1E:71:BB:6E:2B:23:F8:88:54:D5:D6:29:68:BA:DE:87:27
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 019EE77BAB30A755D85DEE3486788569CA1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 1970
Signing time: Sun 21 Jun 2026 00:01:42 +0000
Manifest this update: Sun 21 Jun 2026 00:01:42 +0000
Manifest next update: Mon 22 Jun 2026 00:01:42 +0000
Files and hashes: 1: pCYaE1miR-GUQiTETVWdX8bOgRE.roa (hash: oUes+claOJXex9WS4ZOvL+WR5ipZZwtqoFIaT61iF3Y=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: wyKiY9z2kLGZ5m2bg5ulV7lxZ/LJTPLqTDiaglXvIvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:7b:ab:30:a7:55:d8:5d:ee:34:86:78:85:69:ca:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Jun 21 00:01:42 2026 GMT
Not After : Jun 22 00:01:42 2026 GMT
Subject: CN=509ebb1e71bb6e2b23f88854d5d62968bade8727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a2:11:75:7a:2f:a3:f3:77:3d:0a:0f:00:4c:
a6:27:ed:b3:48:71:dc:42:16:bb:44:26:56:e4:6f:
b5:78:48:88:81:8b:8e:99:ae:1f:87:d3:5d:53:54:
15:95:4b:a2:17:5d:91:da:32:ca:b1:f9:1e:12:c7:
71:c4:4d:ce:fa:82:f3:89:6c:b7:d6:8c:98:77:77:
90:53:44:15:79:bd:24:df:d7:8c:54:bd:f0:6a:7c:
d4:99:33:c4:5d:ee:59:c8:09:f0:ea:c8:58:19:11:
78:38:b5:dc:f5:74:af:e0:e2:4a:49:36:a6:38:dd:
a5:49:94:92:a0:58:01:06:34:96:f6:04:2a:b1:22:
93:5e:e8:a5:f3:5d:6a:c3:c6:84:9c:86:36:61:2b:
78:93:11:7d:16:51:cf:1e:af:cd:13:75:79:ed:48:
46:39:53:68:6f:22:c8:31:4f:21:8f:aa:26:be:97:
06:8b:2b:5f:05:6f:7e:87:f7:7e:61:23:32:5e:4c:
3d:0a:5a:b8:99:38:b7:4d:a0:ae:1e:22:5d:2e:9b:
54:c4:58:1c:6c:a9:4b:3e:1d:70:3a:0b:56:f4:af:
7e:e5:8f:25:f4:87:08:8a:a2:05:00:00:63:98:52:
cf:ac:e0:d1:c9:70:6e:d5:6e:01:94:d0:ac:8b:16:
92:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9E:BB:1E:71:BB:6E:2B:23:F8:88:54:D5:D6:29:68:BA:DE:87:27
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a1:27:80:af:16:ce:49:0c:83:db:71:c7:1a:0e:fa:d1:ff:
eb:6a:35:bd:d5:42:27:97:de:2a:f6:dc:a7:aa:4a:01:9d:e1:
59:68:81:5f:a3:73:15:13:4a:ef:30:40:70:ee:fa:d8:2e:3a:
2f:ef:09:ba:34:f3:fb:61:a9:57:13:5e:d8:1f:b6:3b:15:d3:
d1:0e:52:08:a1:e3:d9:f7:11:d1:a5:72:d2:bd:f9:db:9f:5a:
d5:cf:b7:95:fa:25:bd:16:06:29:d8:45:52:12:70:4a:8f:24:
06:34:e1:9b:21:84:7a:a2:6c:3f:62:d1:7d:57:07:b6:bd:52:
eb:cc:f1:97:44:00:cf:22:93:85:03:ce:dc:26:5f:6a:fa:20:
78:42:65:c8:fb:a4:9d:f1:31:99:43:d9:94:f0:a4:98:5e:77:
52:5a:ad:ce:c1:b2:ff:ad:87:69:fa:a3:cd:0b:18:9a:ea:cb:
c5:4c:ec:14:24:a2:2a:0c:9d:76:da:73:fc:7f:3f:fe:01:42:
0c:42:67:b6:55:5e:2c:c4:36:d9:fe:d3:67:b0:94:ab:05:b0:
75:bc:e5:63:03:73:6b:dd:22:dc:2a:a9:a6:73:c0:f6:03:cd:
8b:32:91:a9:d6:17:f3:b6:b1:c8:50:11:e4:1c:8f:aa:37:3d:
a0:47:8f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 07:12:37 2026 by rpki-client