Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: w0Q+Tp2Lu/WIpA5edWb1RAEkOfBBdtF+Y/400U3SdZs=
Subject key identifier: 60:FE:3E:2D:84:A2:7B:FE:52:CB:CE:57:C6:AD:71:39:D8:FB:4D:1B
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 019FD128002258103246FC1259C5F4A80470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 19E9
Signing time: Wed 05 Aug 2026 09:01:27 +0000
Manifest this update: Wed 05 Aug 2026 09:01:27 +0000
Manifest next update: Thu 06 Aug 2026 09:01:27 +0000
Files and hashes: 1: pCYaE1miR-GUQiTETVWdX8bOgRE.roa (hash: oUes+claOJXex9WS4ZOvL+WR5ipZZwtqoFIaT61iF3Y=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: gZ3BMP47mQh4xqt2TEwc6nw6qfI6qsXurZvh1j9j6VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:28:00:22:58:10:32:46:fc:12:59:c5:f4:a8:04:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Aug 5 09:01:27 2026 GMT
Not After : Aug 6 09:01:27 2026 GMT
Subject: CN=60fe3e2d84a27bfe52cbce57c6ad7139d8fb4d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:e1:ab:43:38:d6:76:55:f4:47:f6:d5:30:
49:43:00:e1:d3:e6:73:6c:5c:4b:eb:a2:3e:67:a0:
9c:ad:bd:f8:92:4f:c7:31:b2:4e:af:41:00:15:d6:
ba:71:d5:40:0a:27:3b:41:3a:b9:24:cc:fe:06:38:
a2:f5:93:02:aa:42:50:34:3c:bc:f6:bd:61:b7:ae:
5a:4b:26:b3:86:32:5a:af:0a:0f:8d:8f:2f:40:51:
7f:7b:9f:08:a5:26:20:7c:61:94:5c:1f:9d:c2:8f:
6d:8b:d9:9b:08:d2:37:d3:28:0c:aa:21:32:cf:ee:
42:b8:92:59:bd:29:25:7e:04:36:e0:96:36:7b:a7:
96:f2:7d:74:72:bd:3d:0b:c6:87:be:bf:aa:f0:b0:
4d:f4:3c:38:2b:14:25:de:65:a5:63:02:33:5e:c7:
2b:f4:16:96:d1:28:a6:da:51:e5:7e:a8:c3:11:09:
f7:47:4f:ba:b5:25:0a:b1:e1:e6:37:ed:7b:63:d7:
b4:d3:d1:20:69:27:cc:0b:26:3a:44:c6:04:21:b1:
25:7e:ff:77:fc:2b:c5:c8:62:f5:b2:34:0a:5c:d7:
35:6b:9f:ee:89:d9:69:f9:04:97:56:65:80:04:39:
30:42:be:b7:13:ad:d2:f3:77:23:22:77:42:9c:5e:
fd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FE:3E:2D:84:A2:7B:FE:52:CB:CE:57:C6:AD:71:39:D8:FB:4D:1B
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f0:13:d0:c7:ac:5e:6f:08:3f:05:32:e7:09:e5:73:d4:71:
39:6a:b6:fe:25:78:4c:c0:41:92:27:5f:df:69:28:8a:ee:92:
b5:60:80:a6:29:b0:cd:f8:2f:26:8b:04:f4:f2:12:6e:89:1c:
14:8a:30:2e:ab:1b:40:b4:bd:31:b7:3b:1d:e1:d1:e5:70:2b:
68:01:78:f8:df:b3:b1:8c:f2:41:d9:05:9a:2b:50:88:cd:b0:
ca:07:bc:b1:b2:20:5e:a6:06:b7:a6:ca:73:1e:e0:04:a0:9f:
2e:cf:7c:d8:9f:ab:bb:a4:af:fb:8f:5a:a5:74:e7:8e:11:f7:
7f:01:6a:8b:c3:ce:65:1c:f1:f3:25:45:f9:df:3d:e7:70:42:
a5:8e:9a:15:2e:56:40:70:cd:a6:1f:46:c1:b0:43:79:88:b8:
7f:18:e0:e2:2e:e1:ef:e2:cc:f8:8d:fd:7f:d5:69:14:71:b9:
c3:a7:f4:b8:28:c2:50:12:bf:59:85:81:29:44:29:a8:8a:ce:
d0:d3:1b:a2:e2:72:3e:8b:6e:7a:d3:3a:74:f2:11:36:f3:a3:
8e:08:9d:7e:12:f4:ea:b3:6c:de:04:20:33:d7:9a:52:94:e4:
f0:b3:c2:5e:96:5e:0d:7c:1b:b3:73:ac:1b:ea:6f:49:61:fa:
3d:28:cd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 19:01:15 2026 by rpki-client