Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: o/fRpaabIv75ybvSWVeKF2B6QOakR5pxhsJ0IH1ZMFk=
Subject key identifier: 19:A3:B4:22:6E:46:14:88:0D:59:8A:E7:42:83:F3:56:48:86:89:82
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 019F935C2E3A708823EC8AC1DF9F2FAA187F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 09:01:59 +0000
Manifest this update: Fri 24 Jul 2026 09:01:59 +0000
Manifest next update: Sat 25 Jul 2026 09:01:59 +0000
Files and hashes: 1: pCYaE1miR-GUQiTETVWdX8bOgRE.roa (hash: oUes+claOJXex9WS4ZOvL+WR5ipZZwtqoFIaT61iF3Y=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: ROTcfCFW4pPadBYWgr7WFDdxKsysz5Ccv5ghAhr1hi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:2e:3a:70:88:23:ec:8a:c1:df:9f:2f:aa:18:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Jul 24 09:01:59 2026 GMT
Not After : Jul 25 09:01:59 2026 GMT
Subject: CN=19a3b4226e4614880d598ae74283f35648868982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:0b:36:5b:df:a3:8d:df:2e:57:98:0f:0b:
e3:c0:c5:17:e4:f3:b7:e3:70:ca:e9:49:9b:3e:e4:
5d:14:65:35:ed:4d:d2:ec:5c:fc:4f:93:36:68:d7:
7a:a9:c8:1b:32:2c:67:f6:da:e0:db:59:72:c8:f5:
dc:9d:ef:46:19:f7:8e:45:4b:fc:41:28:36:23:62:
e0:77:63:5c:83:54:83:16:09:98:96:62:8a:b6:8c:
68:8d:4a:74:bd:00:e0:e0:4c:02:b0:56:88:3f:7b:
50:6e:a4:10:db:6a:29:8d:7f:b2:ab:8f:61:63:56:
b1:76:9d:f8:6e:34:4c:e6:af:7f:c4:6f:ca:44:25:
76:a2:46:54:09:fc:3b:1e:ae:5f:1a:43:00:45:b6:
1d:e5:e1:8b:7d:69:6e:ac:b2:bb:6b:1a:6b:02:dc:
2c:4d:8d:78:48:0b:2d:14:20:ce:3d:ff:1c:98:a7:
ad:ba:6b:ef:1c:fd:24:70:bf:ff:41:57:b6:bb:55:
4f:4b:df:50:8c:ef:37:6b:dc:72:9f:92:b2:56:a8:
ce:bf:36:a8:0f:88:17:11:16:25:c4:17:6c:84:67:
28:04:22:18:c4:f1:d2:da:e7:83:d1:1d:a5:7a:04:
79:c4:9b:63:05:2f:44:9d:6e:c8:3b:46:2e:97:a8:
1d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A3:B4:22:6E:46:14:88:0D:59:8A:E7:42:83:F3:56:48:86:89:82
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ba:5c:35:5a:50:1f:12:c8:50:da:d7:1b:ea:90:64:d0:a2:
5e:39:e8:24:74:a5:21:7a:3d:9c:5b:3c:05:a4:23:c4:93:a5:
5a:18:5b:e8:1a:e4:45:05:aa:db:e5:70:7a:b9:25:b4:a9:fb:
4c:27:b1:32:b7:28:95:b5:43:5b:92:a3:6c:e2:a4:09:e8:0a:
0c:cf:3a:2b:25:2b:21:f1:3c:23:f1:20:bb:55:ea:33:5f:d6:
76:8b:27:85:bf:9f:e8:66:9b:dd:b1:ee:95:5c:ad:de:53:35:
b7:16:05:7a:73:43:f6:b1:18:6a:98:df:5c:ac:8c:59:07:02:
d9:f3:ae:8a:61:50:fa:8d:0e:68:ed:76:de:80:0b:75:a4:b0:
d6:5e:f0:77:b9:b8:14:cd:07:88:1b:b0:65:c2:81:61:bb:09:
07:fd:14:53:62:27:0a:21:57:6b:6a:6f:51:03:6f:6e:9a:d1:
a6:f5:3e:33:c7:58:07:cc:c5:ff:77:a7:9f:cf:f6:4d:61:50:
6f:ae:99:4b:18:90:60:c1:2a:01:f4:c7:e2:82:3b:de:d5:aa:
29:92:ec:d1:77:2d:89:df:00:b1:d0:3d:0e:38:40:31:85:a3:
1d:d2:7a:79:33:d5:cc:05:c9:d9:f7:4a:24:2a:42:2f:d7:cf:
77:25:9d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:06:10 2026 by rpki-client