Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
File: mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json)
Hash identifier: j1oOL4mvksGcYlmbVe0t/kvgc6gFezGbI+OX4NHl2jk=
Subject key identifier: 05:D2:CD:3C:3C:B2:46:6F:A8:5C:F0:19:55:15:89:55:AF:F4:DE:7F
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 019F9135B7BA47E3EEB6ACBC38C661CF0239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
Manifest number: 0ABE
Signing time: Thu 23 Jul 2026 23:00:44 +0000
Manifest this update: Thu 23 Jul 2026 23:00:44 +0000
Manifest next update: Fri 24 Jul 2026 23:00:44 +0000
Files and hashes: 1: 3lc1Iu7hC-zHLMQkZNtii7oqg5M.roa (hash: AzZG+4D5GxDUpzfM6ZHMgxfiWGvCIzXIyJrcYsz9Als=)
2: _WqApLTSHnn-QALIm4js6GY_w-E.roa (hash: vRro0DgNa75sk/Unt/zDQwG9CVSw25Sr8T6Yt4LIK54=)
3: e7Z2PR7xiMg2qO87UOgZBfNHWVA.roa (hash: 2MJbHB4+HtGJ4wxkgZ0Dl95e/tJehFc1YChaP86nwFM=)
4: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: R5IKJJ3OYGUA5MCj5fYMHzye1FY1+MpmY27zv5VAUNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:b7:ba:47:e3:ee:b6:ac:bc:38:c6:61:cf:02:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Jul 23 23:00:44 2026 GMT
Not After : Jul 24 23:00:44 2026 GMT
Subject: CN=05d2cd3c3cb2466fa85cf01955158955aff4de7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:72:30:75:81:54:c0:17:30:00:6b:9e:c5:
b0:55:39:e0:fa:e5:3c:8e:b3:e1:df:ac:20:7a:43:
25:5b:02:56:4b:9d:1b:12:8e:10:51:b7:55:c7:c8:
56:c5:bf:6f:ae:8a:73:d2:cb:cb:1d:88:19:ca:51:
38:e7:22:42:30:da:8d:ca:4f:5c:5f:db:24:64:2f:
53:f8:ec:64:29:47:18:4f:a6:c7:33:6b:98:30:ed:
75:06:d4:84:ce:90:16:32:1a:83:1c:f6:fe:21:82:
fa:58:d3:49:da:d1:72:7a:9c:e3:57:c9:d5:de:be:
5e:3d:81:5b:05:56:24:10:23:f5:b4:91:a4:3d:62:
5d:ce:f2:26:e8:d9:b0:3c:cc:20:51:48:a2:f3:37:
51:d0:f7:8d:21:46:4b:de:d7:7e:97:e8:f5:06:95:
c2:d0:bf:90:b7:70:e2:c2:ba:ce:7b:02:66:49:b2:
cf:a6:7b:2c:f4:3e:a0:c2:b2:14:09:f6:35:75:05:
15:34:eb:46:19:6e:1f:c8:8a:d0:64:6d:83:3f:34:
c1:c4:66:49:0a:df:fe:f7:d3:a5:4d:50:68:0b:51:
8c:0e:c7:b3:30:aa:a7:8a:04:4c:a7:86:fd:df:20:
8d:a9:3b:38:f3:13:5a:aa:1f:e0:4c:24:d9:fb:3b:
2b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D2:CD:3C:3C:B2:46:6F:A8:5C:F0:19:55:15:89:55:AF:F4:DE:7F
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8b:ea:c0:23:67:5d:55:72:c0:48:b8:14:f3:1b:a8:4b:67:
b0:19:84:cc:86:2f:76:1d:57:8d:20:e1:fe:39:ba:ff:7f:79:
85:f1:41:c3:6b:7f:18:b0:87:d3:c8:c5:30:80:3c:32:ae:10:
34:5c:56:10:75:83:a8:d9:fc:ae:ea:e4:87:6b:f1:8b:b5:5d:
a4:43:2b:8f:0f:b1:a1:f4:c7:af:8b:6f:af:fd:ea:00:f0:ac:
63:59:be:d9:fc:43:90:88:72:75:14:00:1f:b3:ca:9b:f5:22:
af:3d:14:d5:d8:cb:7f:d6:3d:1d:96:6c:37:74:11:9e:b5:ad:
c6:bb:3a:2f:08:b9:d8:07:47:48:b4:b3:07:59:c0:bc:a7:a0:
b0:71:97:41:7d:32:ca:ce:18:0f:f4:93:f6:5e:36:84:fd:ed:
63:77:5f:17:55:92:a8:7c:89:e1:5a:d4:9d:20:e6:a7:81:ab:
d3:72:91:88:88:3d:ed:0e:54:c7:5a:ad:59:b8:ef:51:e4:ec:
f1:61:77:5f:1f:2d:16:cd:88:8e:31:cd:1c:e7:e5:c4:e7:98:
2c:26:d3:ee:e4:80:c4:e5:c5:aa:49:04:d2:b7:02:1f:2c:24:
6a:59:11:c8:55:48:32:46:36:61:8f:ee:25:55:8f:f3:2b:23:
1b:20:53:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:50:23 2026 by rpki-client