Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
File: rmrw1fOCidNMIbpnxMOXh6QqZp4.mft (raw, json)
Hash identifier: kKihCTQUVqac0kmh2DcwXPyByfKBLQs3SNte0yNqVrw=
Subject key identifier: 0A:70:2E:17:DD:12:88:5E:22:05:D3:E2:0F:7E:C0:9F:F1:CF:18:DC
Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
Certificate issuer: /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Certificate serial: 019E4EEAAFBE4FF72951EB470EA47546BAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
Manifest number: 191C
Signing time: Fri 22 May 2026 09:01:03 +0000
Manifest this update: Fri 22 May 2026 09:01:03 +0000
Manifest next update: Sat 23 May 2026 09:01:03 +0000
Files and hashes: 1: 7jEzRpfkM_lhZ7uAKRZvwSRQGNU.roa (hash: pz42e1Hyvu2YQLi28FAYwohQh8FXz6tczqllHjBA0EQ=)
2: XggtKq3xpWGXCHEG7oJDyVrafuA.roa (hash: Dw7wzvUkHqS4QhsFOClTO2lSejFZXMTyIw7n7pmXh3Q=)
3: rmrw1fOCidNMIbpnxMOXh6QqZp4.crl (hash: 2xGYYweG8jUPKp6CTn8QV2C/dTyqvjh8+HrBSwMkz0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:ea:af:be:4f:f7:29:51:eb:47:0e:a4:75:46:ba:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Validity
Not Before: May 22 09:01:03 2026 GMT
Not After : May 23 09:01:03 2026 GMT
Subject: CN=0a702e17dd12885e2205d3e20f7ec09ff1cf18dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:cb:62:b2:cb:79:57:3f:5c:73:bc:72:0f:
3b:c0:0e:3c:66:d7:86:25:ff:37:f8:6b:b0:f4:fd:
6c:7e:2e:ef:29:90:57:1a:53:4b:6a:08:2c:9e:71:
bc:f2:28:c1:cd:55:73:36:24:b3:a4:8f:f3:87:c3:
8d:56:17:db:10:a2:2a:5e:15:b6:ff:79:4e:60:55:
97:5c:83:4e:a9:a6:78:eb:8d:b0:49:47:a2:6a:06:
6e:78:a8:9d:33:90:6b:e7:e4:f8:e7:c0:c2:83:65:
b8:15:f5:38:2d:7b:54:65:f9:99:e8:4e:0f:26:c8:
56:0d:5c:e6:24:3a:43:d1:60:cb:66:d8:81:60:2f:
90:dc:2a:a1:b7:0a:74:f5:d4:77:6b:5d:98:83:51:
11:ba:86:b9:05:74:28:90:04:16:61:ab:49:76:30:
6f:8f:b1:9e:94:e5:2c:3d:62:c1:da:2c:1e:bd:6a:
6c:8f:da:7d:ea:c8:6f:e9:20:ba:de:ba:84:b5:80:
f5:e5:5f:8a:63:c3:9b:f6:5e:a2:ab:48:53:99:30:
19:a0:bd:fa:fb:fb:4d:d7:d1:33:b5:c1:87:3b:42:
65:9f:db:3a:29:ba:ac:70:f0:d7:93:13:e1:34:2d:
48:a4:47:9f:45:dc:be:a9:29:cb:63:c7:dd:6c:02:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:70:2E:17:DD:12:88:5E:22:05:D3:E2:0F:7E:C0:9F:F1:CF:18:DC
X509v3 Authority Key Identifier:
keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:98:2d:18:ac:a6:40:b9:e8:bf:e7:3c:3f:65:eb:ec:d2:e3:
14:07:8e:bc:80:9f:a5:13:21:be:22:89:a7:02:f0:39:93:de:
57:f4:10:d0:b4:4d:73:47:72:a7:41:d4:bc:41:7b:36:51:ce:
1e:f3:54:ee:16:42:0a:45:0a:b8:00:98:88:62:ce:aa:7c:e1:
41:de:a5:17:fd:81:bf:6d:8e:93:c8:b8:c8:ca:1d:94:49:e9:
fc:f3:3d:aa:73:27:aa:14:65:77:ae:51:e4:30:28:0d:04:4d:
dd:bd:51:d1:4c:22:8c:88:80:7a:85:01:42:6f:8b:02:31:2a:
f8:2a:cb:68:69:ba:c4:40:8a:36:e7:69:de:61:34:ed:2f:65:
a3:96:d1:db:76:48:f3:40:6b:e3:15:d5:38:86:3b:8d:f7:07:
52:dc:ea:e5:1e:d6:3d:02:7e:c3:51:7c:b3:18:ea:11:c0:82:
23:c3:20:40:74:4c:ae:fb:37:ad:52:03:41:ae:8e:6a:44:24:
25:df:71:0a:17:b2:f7:ac:5f:7d:7a:c0:58:02:37:5e:a3:d4:
4d:1d:1d:f3:71:90:7f:76:b9:47:09:e7:8a:c9:e2:f1:19:29:
cf:91:7c:25:17:5e:93:97:84:4a:e5:df:3c:53:d0:1d:65:c5:
27:7b:9e:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5O6q++T/cpUetHDqR1RrqiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNmFmMGQ1ZjM4Mjg5ZDM0YzIxYmE2N2M0YzM5Nzg3YTQy
YTY2OWUwHhcNMjYwNTIyMDkwMTAzWhcNMjYwNTIzMDkwMTAzWjAzMTEwLwYDVQQD
EygwYTcwMmUxN2RkMTI4ODVlMjIwNWQzZTIwZjdlYzA5ZmYxY2YxOGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBDLYrLLeVc/XHO8cg87wA48ZteG
Jf83+Guw9P1sfi7vKZBXGlNLaggsnnG88ijBzVVzNiSzpI/zh8ONVhfbEKIqXhW2
/3lOYFWXXINOqaZ4642wSUeiagZueKidM5Br5+T458DCg2W4FfU4LXtUZfmZ6E4P
JshWDVzmJDpD0WDLZtiBYC+Q3Cqhtwp09dR3a12Yg1ERuoa5BXQokAQWYatJdjBv
j7GelOUsPWLB2iwevWpsj9p96shv6SC63rqEtYD15V+KY8Ob9l6iq0hTmTAZoL36
+/tN19EztcGHO0Jln9s6KbqscPDXkxPhNC1IpEefRdy+qSnLY8fdbAJ9QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApwLhfdEoheIgXT4g9+wJ/xzxjcMB8GA1UdIwQY
MBaAFK5q8NXzgonTTCG6Z8TDl4ekKmaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm1ydzFmT0NpZE5NSWJwbnhNT1hoNlFxWnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kZWY1NTUtOTY1MS00ZTgxLTgyOGMt
N2E5NGRhN2Q5ZWUyLzEvcm1ydzFmT0NpZE5NSWJwbnhNT1hoNlFxWnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9kZWY1NTUtOTY1MS00ZTgxLTgyOGMtN2E5NGRhN2Q5ZWUy
LzEvcm1ydzFmT0NpZE5NSWJwbnhNT1hoNlFxWnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5gtGKym
QLnov+c8P2Xr7NLjFAeOvICfpRMhviKJpwLwOZPeV/QQ0LRNc0dyp0HUvEF7NlHO
HvNU7hZCCkUKuACYiGLOqnzhQd6lF/2Bv22Ok8i4yModlEnp/PM9qnMnqhRld65R
5DAoDQRN3b1R0UwijIiAeoUBQm+LAjEq+CrLaGm6xECKNudp3mE07S9lo5bR23ZI
80Br4xXVOIY7jfcHUtzq5R7WPQJ+w1F8sxjqEcCCI8MgQHRMrvs3rVIDQa6OakQk
Jd9xChey96xffXrAWAI3XqPUTR0d83GQf3a5Rwnnisni8Rkpz5F8JRdek5eESuXf
PFPQHWXFJ3uehQ==
-----END CERTIFICATE-----
Generated at Fri May 22 15:07:30 2026 by rpki-client