Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: U/UUEPvH9h0SS92vrlNG7440J83CCV1t4cGk+WGl2NI=
Subject key identifier: D3:37:23:23:22:DC:58:F9:E5:D0:49:95:DA:A2:DB:5F:AC:5D:89:3B
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 01A0BAD49169EC15CDAA012AA94759CF52EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 1A62
Signing time: Sat 19 Sep 2026 18:01:27 +0000
Manifest this update: Sat 19 Sep 2026 18:01:27 +0000
Manifest next update: Sun 20 Sep 2026 18:01:27 +0000
Files and hashes: 1: pCYaE1miR-GUQiTETVWdX8bOgRE.roa (hash: oUes+claOJXex9WS4ZOvL+WR5ipZZwtqoFIaT61iF3Y=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: ccQR4w1WRIpW8HUuFsN+zNK4q4F+h0BjpzNtKDX1JMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:d4:91:69:ec:15:cd:aa:01:2a:a9:47:59:cf:52:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Sep 19 18:01:27 2026 GMT
Not After : Sep 20 18:01:27 2026 GMT
Subject: CN=d337232322dc58f9e5d04995daa2db5fac5d893b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:24:a8:22:9f:e3:9f:09:5c:12:17:76:1f:
79:aa:1d:da:ee:3b:92:94:84:91:32:bc:29:f3:a8:
18:6a:d6:a2:2c:83:29:34:cf:1a:66:27:d8:00:e5:
19:51:95:94:84:0c:46:3d:93:43:cf:87:c7:34:5c:
67:09:53:5a:0a:e2:13:3b:0e:f2:42:0f:fe:8c:58:
ec:d5:74:22:23:5b:ed:6c:c2:a9:87:81:aa:0e:31:
f5:21:2c:2a:2e:b5:c1:ff:3a:62:fa:1a:8f:bd:ed:
28:74:d7:ed:7f:f6:9b:1c:1e:52:eb:0a:e7:ab:d5:
48:f0:6d:dc:82:9e:d8:1c:b9:ad:b9:b1:78:45:26:
cb:3d:2f:2c:d7:e5:15:93:be:be:d8:f9:be:49:ba:
1e:d7:27:1c:d5:2c:9f:74:48:73:03:47:c1:3c:76:
0f:83:15:c6:3b:ec:29:9a:83:f7:8a:14:81:83:6e:
ff:81:3d:b7:0c:b7:fa:9a:1f:0d:32:9a:3c:46:b4:
aa:76:45:06:d0:ff:5f:b4:dc:a9:01:c2:49:90:41:
44:8a:9b:46:e3:bc:bb:7b:6a:1b:5a:25:bc:85:c7:
bd:db:bf:5e:04:ed:7e:f9:fe:e6:2b:ee:c5:c5:fc:
aa:ec:08:19:b9:c1:f1:0b:87:b6:ea:be:8c:b5:1e:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:37:23:23:22:DC:58:F9:E5:D0:49:95:DA:A2:DB:5F:AC:5D:89:3B
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c9:e8:d7:ec:12:20:7c:f7:7b:cd:8e:49:31:eb:b6:d5:7e:
c3:4f:b6:d6:10:89:8f:29:32:06:b4:5f:4b:f9:40:a8:88:0b:
2c:22:a0:f5:d9:03:b8:17:8d:89:b9:67:24:51:a9:94:4c:2e:
66:49:fe:57:08:26:bb:1a:e3:94:c4:93:20:36:94:ba:12:f1:
92:5c:35:56:3f:e2:02:7e:b3:0a:2d:d5:8b:c1:84:a4:2a:ee:
a6:36:9c:61:96:18:2f:08:be:80:a1:7f:56:ad:11:56:41:4d:
88:75:13:b0:ae:fe:1a:dc:98:0a:25:73:44:a9:e7:91:3f:38:
f8:ad:70:55:8b:ed:57:f4:aa:a4:a8:58:6e:5f:81:77:50:1a:
4e:51:46:48:c0:55:4b:7a:1b:b8:4d:98:18:d5:c0:5b:08:36:
2a:35:bb:45:c3:7f:74:1a:21:a4:2a:e3:17:6a:be:8c:aa:08:
64:26:0a:20:c4:97:1e:07:5c:f9:24:a3:bb:65:70:61:d9:82:
85:52:60:42:86:bb:05:8e:d9:ca:06:95:3d:55:cc:e4:69:f1:
4e:ef:41:91:bf:d6:7f:6c:00:8c:6c:0e:cc:66:4c:59:eb:1a:
49:79:01:32:8b:49:43:e0:da:7b:2d:99:0a:c6:09:8a:a5:38:
48:85:5b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 02:33:26 2026 by rpki-client