Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: ieIBLCQRdYXyTEgzWVDmAy8+nhmwl9SUlPPYKp93Rxs=
Subject key identifier: 6A:0B:E5:1E:27:D7:65:E4:EE:22:37:8F:59:79:D2:51:B2:E3:FC:F1
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 019E21A3DEDDEB51328B3191ADA165EE50F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 0852
Signing time: Wed 13 May 2026 14:00:47 +0000
Manifest this update: Wed 13 May 2026 14:00:47 +0000
Manifest next update: Thu 14 May 2026 14:00:47 +0000
Files and hashes: 1: F5-0m80tGgQaB6VZO47ty9lw_m0.roa (hash: oQoBwhHoNc0uwJ0ShH4VE+ATyTC8Z15nDhm83FZUfmE=)
2: snDtm5EPq4bt8uwg0uwMS4ldr3M.roa (hash: Re/iBzYv9n7wH6AvwpA38RzBVI5qHPbHIdU0N2m905E=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: C7A1kcykTR+lWlok6a9KX1BFClTkT15/DiIS+MXt4bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:a3:de:dd:eb:51:32:8b:31:91:ad:a1:65:ee:50:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: May 13 14:00:47 2026 GMT
Not After : May 14 14:00:47 2026 GMT
Subject: CN=6a0be51e27d765e4ee22378f5979d251b2e3fcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:d9:07:fa:8f:ed:88:35:39:43:8a:84:77:
a7:03:a8:01:fd:6b:03:20:4a:05:8a:1f:18:99:ab:
e6:49:a8:01:b5:eb:c9:7e:e8:9f:31:dd:3e:2b:6e:
7f:1b:0d:04:36:35:36:6c:7e:01:85:e3:7b:ca:f3:
fc:67:e4:49:94:1e:26:76:f2:f2:17:ba:2f:f5:cd:
d5:e7:17:b2:c7:25:af:0b:2c:5c:a5:7f:5f:07:c1:
fb:a2:1a:b8:a6:a3:46:a1:36:d4:e7:8d:e0:5f:20:
e6:04:ed:3d:dc:2d:a1:8c:ca:8b:b3:dc:42:0f:12:
4b:e9:90:4f:08:e0:7a:61:6c:d2:8f:2a:85:b8:f0:
85:2a:d8:40:67:43:55:24:42:5b:a7:24:23:35:38:
b6:2b:f1:46:16:b8:77:1a:30:1f:67:6b:d6:da:c5:
b4:09:0f:5b:2f:c9:5f:68:3b:7d:a2:8a:9c:3e:18:
f9:e9:13:22:cc:a5:4e:7b:d0:dd:40:a5:38:e1:d4:
27:9a:64:cf:12:b9:21:d9:98:f9:65:f9:c5:b2:20:
d3:34:a6:34:bc:f6:d5:bc:00:a2:66:c6:1a:da:97:
d9:aa:bc:32:68:cc:fc:66:1c:83:12:70:91:90:67:
06:49:95:3e:df:5d:1b:e7:ba:b1:30:7d:04:ba:f2:
84:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0B:E5:1E:27:D7:65:E4:EE:22:37:8F:59:79:D2:51:B2:E3:FC:F1
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9d:05:5d:f3:5c:df:4d:6a:5b:cb:3b:f0:98:f0:f0:d6:c3:
5d:fe:64:a8:9f:0d:05:7a:f6:2d:b5:95:a2:ca:d9:78:5b:54:
e8:d1:ac:1d:23:37:21:ab:60:40:c4:3d:2e:1a:68:9e:46:63:
ef:a8:89:d3:a6:ee:4e:8d:39:24:c1:d2:ad:ef:43:38:3e:48:
ac:64:5f:40:d2:e6:bd:2b:6e:14:7c:d0:56:1e:31:5c:dc:4b:
fc:37:56:8c:5c:3d:7b:22:7a:59:bd:30:b0:d1:d9:da:a8:49:
0b:3e:a7:1e:4c:27:77:27:df:f5:25:91:78:68:b3:36:9d:83:
25:70:ef:5f:0c:81:83:31:e8:5d:71:bc:0b:53:d4:57:61:5b:
f7:b5:af:c9:44:47:3a:f2:d1:b9:f7:9c:ee:5c:4c:58:80:c3:
a9:23:fe:5f:b2:c9:89:ce:89:e3:fe:df:c5:f3:d5:73:da:64:
7c:07:3c:23:4a:0f:30:16:18:d8:01:21:a5:f6:73:f6:2d:c8:
94:15:b5:d0:e8:45:88:fc:d2:fe:15:a6:72:cc:60:ea:14:16:
5e:b2:f6:4d:b9:3b:69:03:94:19:96:4b:93:13:1b:8f:b5:07:
02:96:98:b5:e1:a7:d3:93:26:2e:80:7e:06:b5:60:fd:a0:d2:
95:d6:e0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:39:01 2026 by rpki-client