Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: phgTCiOPpPsmtHSnHQuL3XdjamHEBnqs3U8g6Gm5bjo=
Subject key identifier: 8C:61:D8:23:59:17:48:5B:C4:7B:1C:DC:F1:F3:CA:14:4D:CA:D8:97
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 01A129FB0D925C2B4322469FF8A5B802A693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 1869
Signing time: Sun 11 Oct 2026 08:01:21 +0000
Manifest this update: Sun 11 Oct 2026 08:01:21 +0000
Manifest next update: Mon 12 Oct 2026 08:01:21 +0000
Files and hashes: 1: 4bDkgENx5bPVfPJbt1ijigXmgrk.roa (hash: SO0YUT683qrSeySHKs6lQYWpsK+0MrLWBcrgELSwcJo=)
2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: AR/qPrpAG80dN3+1t6XQcXecEb63tBdwiNjywAZgCj8=)
3: rbleZbDw4gebdk07yrvF8SzeP6w.roa (hash: VrTcEnN0AeIhbsoOuLAPeO02+ay5MYr1fedY2RRIQx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:fb:0d:92:5c:2b:43:22:46:9f:f8:a5:b8:02:a6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Oct 11 08:01:21 2026 GMT
Not After : Oct 12 08:01:21 2026 GMT
Subject: CN=8c61d8235917485bc47b1cdcf1f3ca144dcad897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:db:71:7d:1c:be:bb:92:3e:fb:8a:99:83:19:
01:aa:80:90:22:47:53:c0:c9:8a:f1:4a:02:31:8b:
19:12:87:e3:d2:ee:b8:1b:7d:8c:0e:99:bb:81:dd:
75:b3:b7:16:7f:b6:31:40:41:ac:6e:25:c6:3d:8f:
b5:60:39:27:01:fa:04:8b:a2:3d:05:81:1e:d8:68:
f5:4c:75:34:84:b0:db:e1:39:c3:14:7a:44:18:60:
8d:87:74:6d:de:7d:2f:6d:ab:fa:59:7e:49:1c:1d:
88:c1:f2:e1:be:76:42:96:9b:11:3b:1b:c2:8e:ae:
12:0a:63:a3:f7:30:17:b9:74:54:d4:4d:d2:af:6a:
80:9f:de:8a:29:8e:42:ae:af:8e:17:eb:5a:c7:16:
ce:10:5d:f8:96:43:d8:7c:22:e8:cb:a5:38:7d:7b:
44:1e:5a:c5:d5:54:1d:71:23:a8:05:8f:db:41:3c:
58:0e:bc:42:8e:3a:e8:7f:37:05:d3:1e:0d:6e:e2:
de:94:53:16:08:46:0e:cd:28:f5:8b:d6:79:45:c2:
e2:8d:c2:07:2c:9a:de:48:cc:8d:c7:fc:f8:c3:86:
6a:89:41:e9:28:6c:31:2f:15:95:95:6d:d8:ce:40:
99:8e:ec:7e:16:78:4e:bf:e6:ef:0d:83:68:56:48:
a5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:61:D8:23:59:17:48:5B:C4:7B:1C:DC:F1:F3:CA:14:4D:CA:D8:97
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:67:d8:23:77:0d:06:1c:63:ef:db:9c:4e:11:de:16:29:fe:
16:70:5f:d4:ef:81:3f:1a:8f:db:07:7b:05:0f:7d:bf:9b:4c:
07:22:b0:11:f6:d0:e7:56:fa:b4:d4:da:d4:ff:88:66:e7:29:
74:45:ef:a9:ec:51:dd:85:5c:97:cc:7f:7d:82:56:4a:92:af:
33:e3:29:bf:02:9d:e8:37:dc:60:02:d8:f7:08:6e:f3:6b:66:
dc:cc:3e:03:f5:b7:22:ec:d1:1e:5b:c7:81:b7:25:ca:6d:2e:
4c:bc:d0:f9:57:4b:82:f8:57:13:9f:6f:e7:b8:8c:f9:04:b4:
5c:3b:07:ac:17:2e:83:bb:b7:ec:13:4e:14:ff:20:26:0f:d1:
e2:1c:8f:25:a8:d5:0a:9f:b3:42:54:7e:d0:96:2e:7a:9d:9b:
6a:4e:5a:ba:60:03:78:59:f5:84:2a:46:1f:38:31:c4:73:d4:
b3:03:62:1a:09:64:ba:1d:1a:c0:3f:01:eb:51:f9:eb:24:19:
3c:3a:6c:ad:b0:19:61:1b:55:01:ea:2a:74:ab:50:1a:17:f3:
96:51:92:23:71:dc:6b:bd:49:d9:e1:87:48:0c:d8:de:b1:be:
83:d2:77:f8:9a:37:3b:e6:0f:c8:9b:c8:e5:c2:93:06:6e:97:
a1:26:94:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:58:17 2026 by rpki-client