Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: p8ETikV/Mm9Jq9DN4RsjDiNcnCd2cSVjsJROeBj+BTE=
Subject key identifier: 21:B2:48:A9:1D:58:04:E7:3B:C1:70:64:E4:47:5B:78:94:37:AF:27
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 019E1EA3A10A0284C75C46A71B5FDA76D943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 00:01:40 +0000
Manifest this update: Wed 13 May 2026 00:01:40 +0000
Manifest next update: Thu 14 May 2026 00:01:40 +0000
Files and hashes: 1: pCYaE1miR-GUQiTETVWdX8bOgRE.roa (hash: oUes+claOJXex9WS4ZOvL+WR5ipZZwtqoFIaT61iF3Y=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: He7YJ3ZboFHogxQqnMLRqv3X4xvok6wKKkZApcFRGgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:a1:0a:02:84:c7:5c:46:a7:1b:5f:da:76:d9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: May 13 00:01:40 2026 GMT
Not After : May 14 00:01:40 2026 GMT
Subject: CN=21b248a91d5804e73bc17064e4475b789437af27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:17:1b:e4:39:ff:2b:25:84:9c:fe:2e:79:
a5:6e:b7:bc:86:43:66:96:6e:3b:20:ab:b3:13:35:
4e:f3:15:67:83:b6:3a:3c:b2:53:da:ff:c3:4a:a0:
9f:6a:e0:63:0d:5a:57:65:f3:95:53:7a:f6:39:12:
49:b0:38:a7:9c:7b:82:d3:b9:11:81:31:78:2e:28:
63:b5:b0:ff:77:38:53:65:bc:46:2b:64:bb:ed:a0:
c9:e7:27:91:c7:d5:70:1b:c9:33:c8:d7:57:94:db:
5a:84:a2:42:65:f7:29:18:e2:35:75:25:b4:0c:15:
3c:25:ee:63:dd:b0:ea:bc:48:56:f1:38:7e:3f:37:
25:7d:33:b9:f7:73:b0:ef:da:af:c4:43:80:da:1d:
98:d2:07:aa:9a:16:3c:e4:ea:a5:80:d2:e6:ff:9c:
15:b0:68:ad:2d:85:f4:29:3f:fa:be:af:f0:17:59:
f1:71:36:ff:4c:ed:08:b1:e7:47:fd:b4:c6:e3:25:
fd:e6:7b:23:bb:79:e8:a5:5f:df:23:6b:f2:0c:7e:
7a:c1:91:40:fd:18:a3:56:37:7b:14:f9:cc:89:12:
1d:f2:1b:ff:97:0e:35:1b:98:5c:7f:82:79:82:f0:
86:4e:b2:33:50:5f:a4:cc:71:da:7b:75:ee:bd:12:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B2:48:A9:1D:58:04:E7:3B:C1:70:64:E4:47:5B:78:94:37:AF:27
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:61:ce:5d:39:ff:6c:0b:c2:06:72:5c:15:a6:8b:2e:97:64:
df:50:f8:cc:c1:0d:51:84:3a:f1:0b:7e:2a:38:80:78:27:56:
a0:ca:ba:cb:76:90:a3:6d:49:7d:a8:85:d8:2a:9c:71:7d:96:
6e:fb:10:e4:d7:3a:90:c1:07:a8:e8:3e:51:8b:cf:4a:c6:82:
7e:2c:91:a5:b4:32:2c:46:b0:15:1e:5f:44:bb:70:66:35:8d:
b5:08:89:65:26:ea:b5:5c:78:ef:82:2b:56:e3:39:e4:32:74:
38:a7:b4:bd:73:cf:6f:cb:d0:70:36:75:10:42:79:21:3c:3b:
7b:e2:4e:e1:d5:22:1d:6e:d2:2c:4c:55:66:91:d6:f4:1a:62:
32:af:95:a6:5d:e7:0d:e6:fd:01:34:51:b8:86:c3:04:52:0d:
d7:8d:f0:1c:64:a5:78:35:0d:df:88:f8:c1:99:f7:d6:49:90:
03:96:2b:b6:b9:7f:d3:59:ca:36:77:4f:7b:b0:12:38:2c:98:
56:86:22:79:5c:a7:20:78:1e:c6:5d:34:8e:3b:3a:c8:bd:bb:
11:76:b9:d5:d9:64:7c:8c:81:b1:dc:89:37:0d:8b:d8:6f:c6:
5d:6f:15:70:a8:af:d5:cd:50:bc:a0:f2:61:d6:b1:20:82:46:
81:49:68:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:03:34 2026 by rpki-client