Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: 9XDWoKY+d1wu1yjb2o7WkH/q7YRzViKlqbOGQAafNgQ=
Subject key identifier: F4:E2:1E:31:4B:D0:9E:26:F0:C3:46:E7:03:CE:A4:21:C3:17:92:5F
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 019DFBE05FCD68A3AA47478CCE077119CA03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 18F6
Signing time: Wed 06 May 2026 06:01:18 +0000
Manifest this update: Wed 06 May 2026 06:01:18 +0000
Manifest next update: Thu 07 May 2026 06:01:18 +0000
Files and hashes: 1: pCYaE1miR-GUQiTETVWdX8bOgRE.roa (hash: oUes+claOJXex9WS4ZOvL+WR5ipZZwtqoFIaT61iF3Y=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: LzWd+Q+ofJgkunAa9b0n2O5w0wOnsliS4j9D/zpYJQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:e0:5f:cd:68:a3:aa:47:47:8c:ce:07:71:19:ca:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: May 6 06:01:18 2026 GMT
Not After : May 7 06:01:18 2026 GMT
Subject: CN=f4e21e314bd09e26f0c346e703cea421c317925f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:c8:3e:48:5b:75:bb:27:ac:fc:ac:c8:01:
40:ca:3e:c6:9a:d9:e3:3a:ca:78:ef:94:d8:b3:7d:
cf:13:27:2a:04:d9:75:59:07:25:6a:89:b5:16:84:
82:ea:a6:16:ba:d3:20:cd:1c:1e:90:04:b6:b2:37:
e2:87:08:78:be:dd:21:37:db:63:9e:d4:9a:c0:79:
ff:76:11:47:28:5e:1b:aa:d3:0a:69:0c:b6:e9:9b:
7b:93:18:94:3d:fe:aa:57:59:01:5d:9f:74:2d:bb:
6e:bc:31:0f:54:a0:c8:e2:7c:95:43:d9:82:be:5c:
09:7c:5f:d1:74:17:f7:f2:da:4c:81:4d:18:98:0a:
68:fb:f4:4f:3a:29:b4:fc:17:fb:83:89:c8:70:5d:
3b:42:95:11:a6:1c:07:22:62:e3:29:08:00:b2:b7:
39:6b:c3:73:dd:d2:57:1e:fc:7b:9b:65:f2:2b:c0:
ec:7e:d7:ae:e1:79:00:30:68:72:c4:2e:54:95:a5:
91:fd:f2:9a:4d:6b:20:10:8a:ef:c9:f9:ad:b5:00:
07:fa:0e:32:8f:4d:5f:cf:fd:44:23:79:53:d1:a2:
12:f4:bf:c7:7f:51:d1:41:bd:31:e2:b1:c2:8a:da:
b7:a5:d0:54:87:b3:fc:ba:c5:ca:10:86:eb:c4:b2:
ba:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E2:1E:31:4B:D0:9E:26:F0:C3:46:E7:03:CE:A4:21:C3:17:92:5F
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:16:e3:cf:d8:e7:ce:b3:99:e4:e4:14:c2:21:bb:ce:14:8d:
a7:1b:05:1d:27:a4:7a:1e:bf:06:9c:d6:4a:55:b8:1d:0c:eb:
de:f6:f4:ac:2b:0b:10:ad:f7:41:4e:c4:66:17:e5:dc:5c:d2:
90:6f:fe:da:f7:b1:8d:64:15:a1:b4:11:0b:c0:62:62:cc:d4:
d8:12:5d:ee:2c:b8:ab:c0:c6:b7:d7:e3:5e:dd:44:a2:e6:95:
99:a5:e3:43:50:a1:94:5b:37:1a:f1:98:18:79:6c:e1:6c:1e:
a7:5e:e6:02:e5:f1:38:69:ab:8d:2e:34:01:5a:3a:18:0c:bb:
e7:94:e3:1f:88:7a:64:8b:28:07:40:16:03:72:8a:19:4d:54:
24:3a:7c:7d:10:52:cb:25:8d:49:74:77:34:5f:b3:7c:dd:d8:
56:86:b8:dd:6a:20:2d:fb:33:f0:34:61:8f:5e:48:17:5b:56:
24:f1:c5:56:a5:0b:37:15:37:f8:c7:a0:36:b1:8a:3f:50:34:
93:8e:54:14:93:4b:3e:ea:f3:fc:cb:79:a0:a6:1b:77:d7:68:
7c:70:2c:d0:af:b3:4e:df:d9:19:dc:ab:7c:22:24:a2:3d:d7:
88:24:57:44:ce:58:22:e4:31:8a:17:05:ed:32:27:01:1a:ce:
90:d9:f2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 13:22:54 2026 by rpki-client