Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: S5kqy89adQFLqUmmeMB2olBRIbSJkDIA8RBn4Paa6WA=
Subject key identifier: 88:29:E5:0D:9B:E5:11:1F:FF:D6:71:98:9E:8E:00:65:D2:F1:F3:E2
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 01A0F0E74411285EE6EB401EE0AE8EF747D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 1A7E
Signing time: Wed 30 Sep 2026 06:01:23 +0000
Manifest this update: Wed 30 Sep 2026 06:01:23 +0000
Manifest next update: Thu 01 Oct 2026 06:01:23 +0000
Files and hashes: 1: pCYaE1miR-GUQiTETVWdX8bOgRE.roa (hash: oUes+claOJXex9WS4ZOvL+WR5ipZZwtqoFIaT61iF3Y=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: wYVRAKDb047tCYS1SBvxC0CMpJOwjwAEXoCCPO2Z8KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e7:44:11:28:5e:e6:eb:40:1e:e0:ae:8e:f7:47:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Sep 30 06:01:23 2026 GMT
Not After : Oct 1 06:01:23 2026 GMT
Subject: CN=8829e50d9be5111fffd671989e8e0065d2f1f3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3f:0b:16:2f:07:e0:4d:72:86:90:c0:ca:e8:
b0:6a:8b:8a:ff:0d:8b:bb:ce:e7:0c:4c:67:af:e7:
73:df:54:57:f1:90:a2:4e:84:93:d9:dc:01:0f:7a:
11:26:b4:fb:af:57:d9:1c:19:79:5b:b8:e4:c2:f3:
83:bc:e0:a9:9c:c3:ad:d8:10:03:6a:f0:df:1c:f0:
88:3e:fb:08:d6:84:c5:58:bf:34:d1:90:84:98:83:
06:ca:81:1d:ed:a5:23:37:86:ac:d9:f3:75:21:69:
6f:bc:53:a5:f8:d1:31:0c:d0:c1:ef:bb:37:ac:5c:
19:d5:dc:87:3f:64:b8:e0:ee:f6:b1:f8:ea:fb:e3:
6b:95:00:a1:04:80:3a:85:30:01:66:10:23:03:be:
9a:56:a5:cd:54:a4:40:cb:51:f2:07:72:14:a0:88:
f1:b9:69:88:95:d5:35:96:80:84:ab:6e:94:d7:8d:
fc:94:e4:c5:4a:61:ef:f2:a1:38:59:74:a7:c3:5f:
3c:fa:42:61:74:50:c0:e9:1a:78:d5:6a:ff:34:c7:
80:34:68:a8:11:54:35:88:75:d0:33:e7:66:43:0b:
ff:cf:ae:ff:c2:23:cd:63:c0:38:cf:c1:8e:79:72:
45:bd:0f:f1:ee:de:8b:f5:ba:ee:62:74:80:ec:91:
32:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:29:E5:0D:9B:E5:11:1F:FF:D6:71:98:9E:8E:00:65:D2:F1:F3:E2
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1c:f4:27:16:f2:ba:f2:ed:73:6c:da:db:5d:fc:01:d5:5b:
8b:e7:5f:56:e1:b2:ee:73:3a:e4:ca:82:5b:2b:1d:9b:35:a1:
b0:16:9a:de:73:d0:b7:31:a9:96:ec:39:1e:4e:61:68:b6:d7:
6e:5f:e7:66:78:23:fd:62:ed:83:96:8d:b5:81:d5:42:27:38:
8f:f1:41:ec:d8:5d:0f:a2:e4:9f:9b:fa:84:ce:75:18:91:04:
08:02:57:34:0e:26:a4:61:b3:0b:29:3a:68:51:93:24:7f:52:
92:7a:7e:2e:80:b7:68:b4:69:47:92:69:bf:0a:b6:82:b6:19:
22:6d:32:cf:b5:0c:0e:12:6f:b1:30:d8:93:9c:ef:05:53:48:
d2:53:c5:7e:f0:7a:7e:00:22:4b:99:ac:f3:f5:32:54:5d:b8:
11:c0:24:91:5a:fa:67:29:0b:8a:93:fe:8c:d8:fd:e2:5b:08:
b9:1b:ee:fa:9d:b2:22:e7:b9:7f:d5:1d:9b:bb:08:aa:8b:e4:
67:31:1c:39:47:ee:13:2f:6e:41:68:29:76:9f:3c:8b:b4:cc:
5a:09:ee:61:92:73:90:56:da:d6:7c:05:68:8c:48:e8:5d:6f:
78:61:01:fe:03:9e:56:5f:da:d5:60:c5:95:df:6f:87:e6:ce:
7d:2d:d8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:24:41 2026 by rpki-client