Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: 5amysprzN8lDuhunn39TpHpmvboL2QbDlnlAoLE+vzA=
Subject key identifier: 77:9D:07:3D:46:13:D4:10:CE:90:12:A2:B2:6A:03:BA:0C:19:AC:9E
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 01A0028232313F163B04E0AFF4F53F5E92F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 17D0
Signing time: Fri 14 Aug 2026 23:01:21 +0000
Manifest this update: Fri 14 Aug 2026 23:01:21 +0000
Manifest next update: Sat 15 Aug 2026 23:01:21 +0000
Files and hashes: 1: 4bDkgENx5bPVfPJbt1ijigXmgrk.roa (hash: SO0YUT683qrSeySHKs6lQYWpsK+0MrLWBcrgELSwcJo=)
2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: TTNRiQxpRJO0o23ekMyZItYIkRwy5o3gLgIIMLr+A04=)
3: rbleZbDw4gebdk07yrvF8SzeP6w.roa (hash: VrTcEnN0AeIhbsoOuLAPeO02+ay5MYr1fedY2RRIQx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:82:32:31:3f:16:3b:04:e0:af:f4:f5:3f:5e:92:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Aug 14 23:01:21 2026 GMT
Not After : Aug 15 23:01:21 2026 GMT
Subject: CN=779d073d4613d410ce9012a2b26a03ba0c19ac9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:c5:37:ce:52:d1:70:7f:af:f8:58:27:65:
78:b9:b8:f3:92:3a:e9:0b:7d:10:82:d1:b0:99:cb:
39:41:0a:70:78:51:f9:d2:7b:e6:cb:c0:c2:f5:40:
90:3c:3a:6d:8c:53:77:f2:a1:10:69:fa:59:32:de:
f4:7a:08:6f:87:48:0c:ff:67:74:02:1a:cf:c4:cf:
1b:b9:b0:34:07:cb:23:01:da:cb:b9:fb:87:e4:9b:
c4:fa:49:e8:fd:2a:88:23:ee:57:59:ff:a0:d0:4a:
2f:22:30:8a:db:f3:4d:73:2e:ee:d3:ca:04:05:66:
c4:7c:f6:26:15:c1:c8:5c:a5:ba:7f:22:4b:a3:fd:
1d:74:cb:63:f7:43:4a:a1:c8:4b:42:47:38:60:2b:
f9:42:2d:99:5f:fc:6a:6a:6e:fa:bb:79:02:63:08:
0b:94:bb:27:04:71:1c:13:d1:e5:14:55:aa:46:62:
82:ab:3c:b1:42:3c:af:b0:40:50:12:ff:a4:a4:6c:
67:c0:e3:81:6a:46:8f:41:68:a3:3d:37:76:35:c3:
2f:05:01:85:8a:b9:ad:2e:f4:b9:1f:c0:9e:e0:27:
a7:81:39:19:0d:7c:e4:fc:b9:59:a9:9a:15:ac:97:
08:66:a9:03:84:9d:b5:cb:e9:62:5e:49:e0:05:36:
32:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9D:07:3D:46:13:D4:10:CE:90:12:A2:B2:6A:03:BA:0C:19:AC:9E
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9b:dd:fc:25:09:1e:97:08:7b:a3:b3:a1:5b:1b:e8:6d:11:
3e:dd:6d:d1:f3:b4:0b:6d:a7:f8:f7:b7:89:f1:63:63:53:6c:
0f:67:d6:d4:58:e0:7c:c4:d6:41:42:e2:12:48:1f:4e:a3:6d:
99:b8:1d:fd:70:1d:64:00:ba:0d:6a:98:f8:8d:72:5e:a9:bc:
90:07:34:cb:a9:94:ff:48:19:78:fd:f0:2c:ae:de:dd:de:b5:
bb:ab:38:41:6e:c0:6b:bb:84:f6:f1:a9:af:c6:ac:6d:84:79:
73:fb:ae:a3:74:5d:c6:c0:54:eb:71:0c:f3:59:2b:a4:eb:2a:
e1:b0:c9:35:ba:e1:3a:75:36:12:69:68:81:cd:a6:d1:2a:3b:
a5:ac:d2:df:4d:24:a2:0e:54:ac:bb:37:ae:1b:39:95:ca:d1:
e2:22:76:09:ce:35:ed:2e:5d:c3:e3:0f:bb:a8:c3:46:ea:3e:
fb:c9:ba:01:52:7a:24:fe:8f:74:3c:30:af:83:b2:96:ad:97:
84:cd:36:0f:61:6a:c1:37:f4:8a:28:cc:36:d9:2f:ae:95:6f:
6c:37:ea:02:4a:85:e0:05:43:2a:8d:cc:84:76:ca:36:0e:73:
12:b0:58:df:6a:dd:ed:7b:88:7b:6d:b0:c4:72:a8:35:fb:45:
a6:f9:e2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:14:42 2026 by rpki-client