Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: k78IelPuKRt6gXL5rOAbHN36J6w6fJ5c8b92y6kjd9w=
Subject key identifier: 9E:0A:7A:47:46:E5:65:AE:94:20:A3:C8:69:08:5F:29:F8:5B:2B:1A
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 019F946DD4B2B74596943E02816D8E8CFBEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 0912
Signing time: Fri 24 Jul 2026 14:00:53 +0000
Manifest this update: Fri 24 Jul 2026 14:00:53 +0000
Manifest next update: Sat 25 Jul 2026 14:00:53 +0000
Files and hashes: 1: F5-0m80tGgQaB6VZO47ty9lw_m0.roa (hash: oQoBwhHoNc0uwJ0ShH4VE+ATyTC8Z15nDhm83FZUfmE=)
2: snDtm5EPq4bt8uwg0uwMS4ldr3M.roa (hash: Re/iBzYv9n7wH6AvwpA38RzBVI5qHPbHIdU0N2m905E=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: gMoEKJWD+FXWFAutIyx1dYKRAYlPhY8JSEFDrIvxCAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:d4:b2:b7:45:96:94:3e:02:81:6d:8e:8c:fb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Jul 24 14:00:53 2026 GMT
Not After : Jul 25 14:00:53 2026 GMT
Subject: CN=9e0a7a4746e565ae9420a3c869085f29f85b2b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:71:b9:5d:6f:50:df:c9:eb:e4:3a:14:ee:
78:5a:3a:e4:a2:bb:60:e0:e5:21:af:c8:3a:49:3b:
de:d1:de:81:31:92:53:91:29:72:a0:5c:b3:cd:21:
1d:6e:45:10:9d:db:88:a1:fd:bd:35:f0:e4:df:f1:
7f:1c:86:96:57:35:9a:05:13:4b:7d:84:57:ac:bc:
17:25:41:b7:ac:f8:41:fe:33:b1:58:d4:ce:20:be:
83:f7:4f:03:0d:a5:8b:20:25:37:72:a0:b4:cb:eb:
ef:42:ba:82:dc:73:18:d3:55:f4:fe:87:a4:a6:1d:
9b:62:4a:70:62:b4:a3:f3:8f:6a:33:24:c5:af:7e:
1c:a4:fa:bf:7a:54:09:c0:45:ad:1e:44:3f:1d:04:
bf:04:36:7e:80:21:b5:3b:35:d9:c4:0e:27:5c:7e:
46:18:67:6c:16:c6:47:35:d2:12:f1:09:f1:71:0d:
dd:aa:42:31:a8:53:d3:93:a0:5c:20:27:ee:e2:43:
f7:65:f7:6c:a6:14:43:b9:cf:ac:15:f6:eb:c2:f4:
fb:33:db:d5:20:46:92:85:d8:eb:e1:ec:7c:c4:cd:
03:e2:03:ed:1a:74:b0:90:37:7e:6d:38:cf:e0:4b:
2b:82:02:d6:23:3f:f0:22:11:40:79:dc:80:e0:dc:
8d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0A:7A:47:46:E5:65:AE:94:20:A3:C8:69:08:5F:29:F8:5B:2B:1A
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a1:75:27:47:9e:2b:a3:68:f7:42:f5:86:1d:07:09:b4:2a:
4e:42:ee:64:69:c2:56:00:32:80:97:85:5d:e7:35:bd:46:e2:
d7:94:e2:56:6b:af:32:85:90:f2:eb:88:9e:a0:30:ca:d9:d6:
f2:7a:11:f9:a6:1f:be:2d:3a:23:04:cb:f9:ef:c0:c4:0b:8f:
44:31:64:ff:c4:48:6a:1f:95:08:56:b8:7e:52:c1:08:21:48:
ae:e6:23:7b:33:00:53:4d:ed:3f:94:cb:63:4b:95:cf:50:bb:
5f:03:91:29:c2:aa:16:32:9d:41:25:a1:83:77:dc:8a:c6:9c:
21:dd:bc:ef:3c:90:d2:29:3a:8b:ad:6f:c5:87:dd:fc:68:29:
a0:f4:15:3b:b1:4d:0e:6c:06:a1:1f:a4:a6:5c:9a:80:02:d7:
8a:4a:12:3f:78:6d:d0:73:ee:3c:21:5c:7a:b4:f9:47:e8:9b:
20:59:21:f6:d6:97:0a:50:cb:65:35:5b:b4:20:9b:f1:2f:b6:
68:4b:76:93:e2:6f:aa:1b:0b:78:9d:f0:a6:70:80:b7:0d:f7:
9f:c4:18:d4:65:0d:51:83:0b:61:86:30:c7:11:36:2d:b7:fd:
40:d1:ae:72:ea:39:43:c3:a0:e3:bf:e4:6b:39:8e:a5:99:78:
62:a3:44:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbdSyt0WWlD4CgW2OjPvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzgxNGZmY2E1MzEwODYyYTIyMjRmMGFmZDkwY2FhOTZh
YzBiNTQwHhcNMjYwNzI0MTQwMDUzWhcNMjYwNzI1MTQwMDUzWjAzMTEwLwYDVQQD
Eyg5ZTBhN2E0NzQ2ZTU2NWFlOTQyMGEzYzg2OTA4NWYyOWY4NWIyYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI9xuV1vUN/J6+Q6FO54Wjrkortg
4OUhr8g6STve0d6BMZJTkSlyoFyzzSEdbkUQnduIof29NfDk3/F/HIaWVzWaBRNL
fYRXrLwXJUG3rPhB/jOxWNTOIL6D908DDaWLICU3cqC0y+vvQrqC3HMY01X0/oek
ph2bYkpwYrSj849qMyTFr34cpPq/elQJwEWtHkQ/HQS/BDZ+gCG1OzXZxA4nXH5G
GGdsFsZHNdIS8QnxcQ3dqkIxqFPTk6BcICfu4kP3ZfdsphRDuc+sFfbrwvT7M9vV
IEaShdjr4ex8xM0D4gPtGnSwkDd+bTjP4EsrggLWIz/wIhFAedyA4NyNrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4KekdG5WWulCCjyGkIXyn4WysaMB8GA1UdIwQY
MBaAFLTIFP/KUxCGKiIk8K/ZDKqWrAtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAt
ZjQ2N2IyZjQyYWY2LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAtZjQ2N2IyZjQyYWY2
LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqF1J0ee
K6No90L1hh0HCbQqTkLuZGnCVgAygJeFXec1vUbi15TiVmuvMoWQ8uuInqAwytnW
8noR+aYfvi06IwTL+e/AxAuPRDFk/8RIah+VCFa4flLBCCFIruYjezMAU03tP5TL
Y0uVz1C7XwORKcKqFjKdQSWhg3fcisacId287zyQ0ik6i61vxYfd/GgpoPQVO7FN
DmwGoR+kplyagALXikoSP3ht0HPuPCFcerT5R+ibIFkh9taXClDLZTVbtCCb8S+2
aEt2k+JvqhsLeJ3wpnCAtw33n8QY1GUNUYMLYYYwxxE2Lbf9QNGucuo5Q8Og47/k
azmOpZl4YqNEXg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:42:22 2026 by rpki-client