Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
File: rmrw1fOCidNMIbpnxMOXh6QqZp4.mft (raw, json)
Hash identifier: SCKihbxCtMibgMGMFI9KAnGS7tJF29pV/okvNnQdX6w=
Subject key identifier: 67:A2:C2:7F:E4:42:71:C0:50:1F:44:A1:D5:61:98:04:3F:8C:BC:C7
Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
Certificate issuer: /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Certificate serial: 01A02055975D341C0A8C23B8296423E27E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
Manifest number: 1A0D
Signing time: Thu 20 Aug 2026 18:01:15 +0000
Manifest this update: Thu 20 Aug 2026 18:01:15 +0000
Manifest next update: Fri 21 Aug 2026 18:01:15 +0000
Files and hashes: 1: 7jEzRpfkM_lhZ7uAKRZvwSRQGNU.roa (hash: pz42e1Hyvu2YQLi28FAYwohQh8FXz6tczqllHjBA0EQ=)
2: XggtKq3xpWGXCHEG7oJDyVrafuA.roa (hash: Dw7wzvUkHqS4QhsFOClTO2lSejFZXMTyIw7n7pmXh3Q=)
3: rmrw1fOCidNMIbpnxMOXh6QqZp4.crl (hash: YUfp97J61yG16ONdk2A40MYeFAFT8eCZbCo3QrBclbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:55:97:5d:34:1c:0a:8c:23:b8:29:64:23:e2:7e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Validity
Not Before: Aug 20 18:01:15 2026 GMT
Not After : Aug 21 18:01:15 2026 GMT
Subject: CN=67a2c27fe44271c0501f44a1d56198043f8cbcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:bf:82:ea:7f:8f:4c:62:18:75:3a:9e:15:1c:
62:dd:e4:55:32:1d:61:d0:0d:99:ad:99:69:98:59:
40:84:28:da:45:23:d1:9e:0c:62:38:f1:c2:57:9e:
e5:63:6a:c6:61:cf:13:6b:4b:8a:6b:ec:34:67:e8:
9b:d5:8b:f5:6a:58:fc:24:1c:fa:eb:3a:1c:43:fc:
7f:fb:9b:d9:9f:12:1e:43:a4:18:1b:d3:38:03:c9:
fc:fa:65:1a:9b:de:72:5c:44:74:e8:a8:30:67:70:
8f:f1:01:0e:7d:6f:cb:70:6d:63:f3:de:44:13:32:
e0:54:53:b8:6e:5c:3b:63:d0:d3:3a:c5:d9:ac:d7:
d6:b7:1e:7f:c7:ca:cc:10:e7:17:33:c5:85:61:33:
5d:9c:2f:fc:9e:bd:65:07:29:95:0b:e8:96:6f:3f:
62:1b:1b:09:24:75:73:98:45:6d:d7:07:ca:b5:06:
5e:78:b7:fd:a6:58:0d:5e:93:17:1d:f8:49:ef:b3:
f2:98:c8:cb:52:03:87:d0:cc:93:a0:a5:10:a0:da:
06:33:97:b2:4c:31:c2:d3:d0:a4:06:2d:50:fc:be:
10:70:a8:ca:28:ff:9f:25:a1:e2:28:3a:05:12:3d:
33:6c:7d:c7:5e:f5:2d:7a:24:0e:f9:cb:18:c2:5d:
1c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A2:C2:7F:E4:42:71:C0:50:1F:44:A1:D5:61:98:04:3F:8C:BC:C7
X509v3 Authority Key Identifier:
keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4b:46:5b:ac:5a:9b:2a:14:01:56:09:3c:b4:c3:ca:51:89:
bd:90:6d:a4:49:36:1f:a5:93:16:63:63:2a:a1:4f:09:a1:ff:
7e:ca:23:aa:d4:bf:a1:f4:85:89:9d:b2:51:72:a1:69:ae:be:
18:4f:69:be:ba:31:ba:61:a9:37:4a:2b:73:93:5b:83:0d:73:
17:bf:b6:8a:64:3b:3d:be:67:35:8e:84:2e:00:e6:5a:6d:5e:
22:27:29:e3:75:31:b2:fd:5c:ef:3d:48:66:53:7e:36:34:ff:
b8:38:f5:02:4f:9d:77:b2:06:7c:7b:23:87:5a:0c:74:7d:62:
b6:be:49:1f:74:27:54:fa:98:7f:ad:1e:42:96:f7:af:20:19:
64:95:4a:9b:54:ec:10:af:ce:8d:d1:fb:72:50:81:01:ef:c8:
78:40:fb:c7:d8:bd:de:f9:e4:2c:15:78:96:e2:b1:e4:c5:c7:
5a:61:01:48:73:f5:b9:43:9c:13:66:ed:d3:66:84:f0:51:ef:
cc:c3:e9:15:32:1a:60:e6:da:ba:bc:4c:d2:01:5e:82:f7:7d:
d8:1b:1e:28:30:87:99:46:2b:aa:95:72:72:06:7f:65:0f:80:
63:e7:3e:e3:4b:e0:09:a3:f9:65:62:65:d3:30:34:f6:4f:88:
70:f6:54:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAgVZddNBwKjCO4KWQj4n5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNmFmMGQ1ZjM4Mjg5ZDM0YzIxYmE2N2M0YzM5Nzg3YTQy
YTY2OWUwHhcNMjYwODIwMTgwMTE1WhcNMjYwODIxMTgwMTE1WjAzMTEwLwYDVQQD
Eyg2N2EyYzI3ZmU0NDI3MWMwNTAxZjQ0YTFkNTYxOTgwNDNmOGNiY2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/r+C6n+PTGIYdTqeFRxi3eRVMh1h
0A2ZrZlpmFlAhCjaRSPRngxiOPHCV57lY2rGYc8Ta0uKa+w0Z+ib1Yv1alj8JBz6
6zocQ/x/+5vZnxIeQ6QYG9M4A8n8+mUam95yXER06KgwZ3CP8QEOfW/LcG1j895E
EzLgVFO4blw7Y9DTOsXZrNfWtx5/x8rMEOcXM8WFYTNdnC/8nr1lBymVC+iWbz9i
GxsJJHVzmEVt1wfKtQZeeLf9plgNXpMXHfhJ77PymMjLUgOH0MyToKUQoNoGM5ey
TDHC09CkBi1Q/L4QcKjKKP+fJaHiKDoFEj0zbH3HXvUteiQO+csYwl0c5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeiwn/kQnHAUB9EodVhmAQ/jLzHMB8GA1UdIwQY
MBaAFK5q8NXzgonTTCG6Z8TDl4ekKmaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm1ydzFmT0NpZE5NSWJwbnhNT1hoNlFxWnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kZWY1NTUtOTY1MS00ZTgxLTgyOGMt
N2E5NGRhN2Q5ZWUyLzEvcm1ydzFmT0NpZE5NSWJwbnhNT1hoNlFxWnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9kZWY1NTUtOTY1MS00ZTgxLTgyOGMtN2E5NGRhN2Q5ZWUy
LzEvcm1ydzFmT0NpZE5NSWJwbnhNT1hoNlFxWnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0tGW6xa
myoUAVYJPLTDylGJvZBtpEk2H6WTFmNjKqFPCaH/fsojqtS/ofSFiZ2yUXKhaa6+
GE9pvroxumGpN0orc5Nbgw1zF7+2imQ7Pb5nNY6ELgDmWm1eIicp43Uxsv1c7z1I
ZlN+NjT/uDj1Ak+dd7IGfHsjh1oMdH1itr5JH3QnVPqYf60eQpb3ryAZZJVKm1Ts
EK/OjdH7clCBAe/IeED7x9i93vnkLBV4luKx5MXHWmEBSHP1uUOcE2bt02aE8FHv
zMPpFTIaYObaurxM0gFegvd92BseKDCHmUYrqpVycgZ/ZQ+AY+c+40vgCaP5ZWJl
0zA09k+IcPZUxA==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:14 2026 by rpki-client